Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/98f299-79f3-44c9-be47-3ca0a3fbdd70/1/qUn5FWBAKb68AE3q1y0RvAcV37s.mft
File: qUn5FWBAKb68AE3q1y0RvAcV37s.mft (raw, json)
Hash identifier: gkslxz/r5/4xXJ3ozEx9/w7uZiy/5INalLpEZeDWq7M=
Subject key identifier: 19:E6:52:39:25:8A:EA:D4:CB:AC:EF:5A:4A:F4:B0:45:5C:6A:8F:22
Authority key identifier: A9:49:F9:15:60:40:29:BE:BC:00:4D:EA:D7:2D:11:BC:07:15:DF:BB
Certificate issuer: /CN=a949f915604029bebc004dead72d11bc0715dfbb
Certificate serial: 01A164C6C692308657C5317FB0476F1CFE65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUn5FWBAKb68AE3q1y0RvAcV37s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/98f299-79f3-44c9-be47-3ca0a3fbdd70/1/qUn5FWBAKb68AE3q1y0RvAcV37s.mft
Manifest number: AE
Signing time: Thu 22 Oct 2026 18:01:50 +0000
Manifest this update: Thu 22 Oct 2026 18:01:50 +0000
Manifest next update: Fri 23 Oct 2026 18:01:50 +0000
Files and hashes: 1: qUn5FWBAKb68AE3q1y0RvAcV37s.crl (hash: sA1z5iTcOlfPbEmz6+9LWs36+gMfEeAiLiQceJD3Png=)
2: uHI7c1lxQG_MT9KOHTDNSrPpJX8.roa (hash: R1Pw1llMZGhkTopwsbaboewxn+ec/eSdwTYfu1/Mfvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/98f299-79f3-44c9-be47-3ca0a3fbdd70/1/qUn5FWBAKb68AE3q1y0RvAcV37s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/98f299-79f3-44c9-be47-3ca0a3fbdd70/1/qUn5FWBAKb68AE3q1y0RvAcV37s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUn5FWBAKb68AE3q1y0RvAcV37s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:c6:c6:92:30:86:57:c5:31:7f:b0:47:6f:1c:fe:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a949f915604029bebc004dead72d11bc0715dfbb
Validity
Not Before: Oct 22 18:01:50 2026 GMT
Not After : Oct 23 18:01:50 2026 GMT
Subject: CN=19e65239258aead4cbacef5a4af4b0455c6a8f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:39:1b:ca:17:69:e7:ce:ca:83:a6:e6:b6:57:
ac:14:9a:fa:dd:1d:fd:26:af:a4:ef:cc:9c:ba:ac:
66:54:a4:26:d6:98:32:83:6d:9e:94:03:47:3b:30:
e6:80:b7:da:0e:d4:61:61:35:24:10:a1:8b:06:6f:
95:24:bb:2c:2c:2b:3d:98:37:b3:71:62:b5:ef:cf:
27:4e:06:99:fc:64:f4:dc:f4:05:d4:61:02:fb:28:
cf:a9:e5:7d:cb:db:e7:28:ff:6d:2c:c4:a4:7f:60:
ad:4f:70:7c:ab:ee:a5:8d:65:14:ad:da:0a:07:2b:
f5:b8:ca:74:f3:95:50:80:e8:b9:be:c0:36:8f:5b:
74:99:f8:85:d1:1b:e3:a4:0d:73:45:65:60:60:48:
16:93:62:fd:fc:22:53:af:83:5c:1f:88:8c:44:47:
07:ad:74:fb:eb:53:14:37:21:1e:ab:73:65:95:b3:
a3:02:84:eb:5b:f9:1c:a5:fd:31:7c:30:15:87:55:
b0:60:b4:43:68:83:97:f7:de:87:6f:0a:4f:4b:6d:
15:9e:c4:04:6d:dc:ca:61:0e:2e:5c:a0:a6:72:c1:
6e:ae:97:8a:b9:c9:f0:3b:0a:c5:8e:99:54:c5:f4:
0d:1c:c9:8a:b1:5c:91:3a:ed:68:64:97:2a:c2:f1:
87:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E6:52:39:25:8A:EA:D4:CB:AC:EF:5A:4A:F4:B0:45:5C:6A:8F:22
X509v3 Authority Key Identifier:
keyid:A9:49:F9:15:60:40:29:BE:BC:00:4D:EA:D7:2D:11:BC:07:15:DF:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUn5FWBAKb68AE3q1y0RvAcV37s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/98f299-79f3-44c9-be47-3ca0a3fbdd70/1/qUn5FWBAKb68AE3q1y0RvAcV37s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/98f299-79f3-44c9-be47-3ca0a3fbdd70/1/qUn5FWBAKb68AE3q1y0RvAcV37s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:57:cc:75:8a:57:f2:de:c7:18:35:99:2f:1b:f9:e1:95:9a:
09:28:f0:9b:d7:8c:44:db:bd:6d:2b:c1:61:24:5c:9b:f5:25:
c0:c4:68:c0:a3:99:24:77:31:87:11:47:10:50:21:2c:17:b3:
f6:ca:20:6f:8b:fe:3d:27:11:2c:a9:a9:9e:88:77:3a:d4:d4:
c1:c5:da:6c:0a:40:6b:68:54:06:52:03:67:f6:15:14:e1:49:
90:f7:fa:95:48:5a:b6:0d:74:ee:c3:ff:65:c4:b7:c4:7e:7b:
1d:96:cb:23:69:5d:d1:2d:39:b1:1a:a8:4d:eb:fd:99:14:74:
63:91:46:36:40:de:05:fa:df:44:4a:ed:ab:b5:54:d0:22:6a:
ff:14:3d:9c:8f:a1:90:23:17:cc:b1:c4:0c:2f:38:60:0d:21:
17:21:7c:ae:36:26:1a:bc:9d:7f:6e:6f:3e:82:a1:f8:86:41:
e4:80:95:cc:61:4b:3c:4c:86:b3:72:77:bb:02:67:f1:ca:8f:
3a:26:e8:69:c7:05:c2:96:17:ff:e9:cc:0b:13:c4:56:bc:7f:
8f:26:4a:20:5b:b0:0e:d6:87:51:d7:ac:58:c0:42:01:6b:f6:
2f:c1:08:11:ae:74:c7:27:42:8e:9a:da:ae:2c:b7:94:b7:34:
1d:98:bd:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 02:41:07 2026 by rpki-client