Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/2b56f9-eaed-486b-975e-e0346b188163/1/qBkQNvLgQ03c2KZOC6dNSBe2YCg.mft
File: qBkQNvLgQ03c2KZOC6dNSBe2YCg.mft (raw, json)
Hash identifier: 8LRmrMPL2oCTrwNCc21t11dBq0fd2iykL99Py8oAUgI=
Subject key identifier: 1B:74:78:2E:9F:4E:02:07:37:4C:FB:22:C3:82:C0:9D:7D:C7:EE:6B
Authority key identifier: A8:19:10:36:F2:E0:43:4D:DC:D8:A6:4E:0B:A7:4D:48:17:B6:60:28
Certificate issuer: /CN=a8191036f2e0434ddcd8a64e0ba74d4817b66028
Certificate serial: 01A180E21776AFC5972E6CF615F82B30A199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBkQNvLgQ03c2KZOC6dNSBe2YCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/2b56f9-eaed-486b-975e-e0346b188163/1/qBkQNvLgQ03c2KZOC6dNSBe2YCg.mft
Manifest number: 5F
Signing time: Wed 28 Oct 2026 05:01:03 +0000
Manifest this update: Wed 28 Oct 2026 05:01:03 +0000
Manifest next update: Thu 29 Oct 2026 05:01:03 +0000
Files and hashes: 1: H37_rL6n9HixiqvG1uW2uEiLCE4.roa (hash: dkSDWKUse13+36/q9LeseO4+uvLBizV7Qz1e7pf72kc=)
2: qBkQNvLgQ03c2KZOC6dNSBe2YCg.crl (hash: gl5nxr+S3odnQGj5FCA5W2ZLOkrs6UWAMsFIVL6Fwe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/2b56f9-eaed-486b-975e-e0346b188163/1/qBkQNvLgQ03c2KZOC6dNSBe2YCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/2b56f9-eaed-486b-975e-e0346b188163/1/qBkQNvLgQ03c2KZOC6dNSBe2YCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBkQNvLgQ03c2KZOC6dNSBe2YCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:e2:17:76:af:c5:97:2e:6c:f6:15:f8:2b:30:a1:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8191036f2e0434ddcd8a64e0ba74d4817b66028
Validity
Not Before: Oct 28 05:01:03 2026 GMT
Not After : Oct 29 05:01:03 2026 GMT
Subject: CN=1b74782e9f4e0207374cfb22c382c09d7dc7ee6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7f:09:20:ac:3b:99:73:52:77:1c:8d:41:8a:
27:88:0b:de:e6:ca:f8:21:41:bf:12:21:ea:56:cd:
21:da:db:8f:01:97:69:24:37:2b:92:4b:0c:f5:79:
99:51:38:dc:7e:1f:2e:e4:26:3a:dc:f9:12:d9:7e:
91:ab:e4:53:dd:4c:19:83:0d:b7:58:2a:f1:e8:16:
46:49:f6:aa:6d:4b:38:39:33:22:ca:5e:06:4c:ad:
41:dc:4c:4d:77:76:b8:93:67:3f:bc:e1:19:b5:ef:
b3:54:1e:9b:96:a1:84:ef:7f:cd:44:29:ad:2c:c4:
6a:05:4b:9b:be:86:d2:a6:b7:94:ef:f4:3e:ee:62:
d3:fb:b5:69:cc:89:5c:30:f0:d6:99:35:e0:55:e7:
64:da:c0:91:7e:dc:59:d9:1e:83:8e:90:6b:be:86:
ce:58:6a:29:bf:f4:48:cb:63:de:55:97:46:9e:6e:
ba:00:3a:c6:30:82:ae:2e:50:4f:43:20:71:46:78:
a1:5c:c8:a1:d6:53:c4:5b:8f:42:53:78:df:26:97:
fb:76:90:70:a9:03:11:bc:90:d2:8d:0d:65:23:ff:
88:77:90:2d:a9:46:f5:a8:03:8c:50:09:b3:5a:22:
9b:88:d4:c8:de:47:86:cc:95:dc:a1:5b:c2:77:0d:
7d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:74:78:2E:9F:4E:02:07:37:4C:FB:22:C3:82:C0:9D:7D:C7:EE:6B
X509v3 Authority Key Identifier:
keyid:A8:19:10:36:F2:E0:43:4D:DC:D8:A6:4E:0B:A7:4D:48:17:B6:60:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBkQNvLgQ03c2KZOC6dNSBe2YCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/2b56f9-eaed-486b-975e-e0346b188163/1/qBkQNvLgQ03c2KZOC6dNSBe2YCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/2b56f9-eaed-486b-975e-e0346b188163/1/qBkQNvLgQ03c2KZOC6dNSBe2YCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:2e:d4:ca:68:76:b7:86:6e:65:c7:48:df:14:cd:a5:10:9b:
fd:70:fc:94:a5:f9:5a:de:ee:de:f5:dc:22:34:32:88:1c:f6:
93:32:c1:20:5c:12:7c:7a:b5:68:ae:e3:51:52:07:67:3f:4c:
00:58:4f:25:25:a8:40:00:fc:94:e6:0b:e0:10:0d:20:d2:b6:
d7:cd:7d:7e:b1:30:86:fe:14:02:dd:ab:4f:92:74:80:96:99:
cb:59:9f:72:25:f6:93:23:55:ed:51:1b:a0:3e:09:f6:09:88:
05:9c:2b:28:b0:d3:7c:c3:6f:c1:6b:b6:aa:d6:1b:78:1e:24:
e6:ae:8c:1c:57:4f:93:b5:fa:d1:3a:a8:29:10:78:18:3d:ba:
f4:8e:87:59:9b:36:99:2a:c0:0c:39:4e:d4:d3:35:a4:6a:98:
80:63:8a:40:b3:e7:30:bc:0a:94:d4:1a:d8:d0:1d:58:bd:6a:
cb:1f:10:07:1b:2a:2b:14:b2:90:49:37:6d:6d:53:f4:45:d2:
03:65:79:7d:0a:e8:2f:61:54:44:b7:f4:74:2d:05:b1:9f:9c:
c5:5c:20:51:f4:6f:ea:f1:21:fc:f4:77:33:b7:86:c4:b7:3b:
4d:0f:e8:84:f5:0d:8b:01:b9:b9:cb:97:d1:72:be:7e:e4:a9:
74:79:ef:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 13:02:02 2026 by rpki-client