Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
File: q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft (raw, json)
Hash identifier: 563aeXbmW55t2v+IicPv6CCE9rTQG/AOJRCKJx/qKyQ=
Subject key identifier: F8:02:5A:DC:F6:2B:0B:49:E7:C2:EC:A3:7D:70:BE:0D:1D:B8:C6:CA
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 01A18F42B8CE5D382426A6F5B136E40F81E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
Manifest number: 1B32
Signing time: Sat 31 Oct 2026 00:01:16 +0000
Manifest this update: Sat 31 Oct 2026 00:01:16 +0000
Manifest next update: Sun 01 Nov 2026 00:01:16 +0000
Files and hashes: 1: q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl (hash: O4vay+/a5rkHCvNDrLSZjycgjiOAikYh/EuYQvEvfDM=)
2: seBFYYQv0cvrV-jBttwLxGx-GgQ.roa (hash: ckniHG5YK95jMkTsaGk+p/q7us5X85VQ/bIV+gQNUtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:42:b8:ce:5d:38:24:26:a6:f5:b1:36:e4:0f:81:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Oct 31 00:01:16 2026 GMT
Not After : Nov 1 00:01:16 2026 GMT
Subject: CN=f8025adcf62b0b49e7c2eca37d70be0d1db8c6ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2e:01:eb:bd:02:d6:f0:59:8d:fb:85:47:a2:
f0:6a:9b:f8:78:49:4d:e7:3b:8f:ef:cf:82:73:11:
00:9c:6b:78:94:c6:e9:51:07:83:da:b9:86:8c:bf:
a6:22:24:13:52:ca:c2:6e:8f:11:6b:9a:36:4b:cb:
dc:d0:41:60:6f:71:06:9c:10:1f:f6:e8:df:a5:20:
29:d1:20:82:bf:e1:8c:32:26:4c:e8:93:38:0c:11:
86:f6:b2:0f:47:53:cf:5c:1c:be:36:b9:94:2c:f9:
f6:be:fa:00:da:9c:03:59:89:ae:4d:b5:06:dd:79:
1a:7d:3e:ec:bb:e2:58:d9:b8:b7:ae:bf:7d:b8:7a:
15:fd:53:e1:90:47:46:83:dd:19:ac:4a:74:49:3d:
2e:3c:c0:c6:c4:a5:03:4e:7c:02:f2:99:df:7a:41:
18:34:4d:1b:9f:fb:9c:30:29:76:08:28:fd:45:10:
bc:49:a6:3e:99:41:13:2d:15:da:79:62:63:e7:f0:
ed:a0:17:ef:26:5a:90:9b:f4:b2:19:2c:b6:cb:84:
97:94:c0:01:96:ee:41:f2:1f:40:86:3b:a5:11:c1:
8d:df:67:30:59:93:d2:fb:c4:84:e5:f8:b2:54:5f:
e3:58:40:7a:aa:8f:a4:62:d0:50:84:da:1d:cc:71:
00:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:02:5A:DC:F6:2B:0B:49:E7:C2:EC:A3:7D:70:BE:0D:1D:B8:C6:CA
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f3:cf:ad:1e:52:89:84:e1:ed:3f:d4:b1:65:07:c7:ab:32:
d7:7f:79:43:a0:bb:0a:58:d5:1a:9e:96:4e:27:c8:42:38:00:
e8:7b:e1:2f:2c:26:71:58:45:73:43:97:b7:b9:7a:50:2a:17:
17:ff:3e:ab:c2:99:0e:14:72:23:7d:cd:9a:3c:00:4e:c9:3c:
4b:39:8c:1f:b5:0c:7c:fa:78:0e:91:e7:4d:d7:12:57:65:9f:
e6:46:c6:c6:dc:77:98:f7:1a:b5:db:55:ae:bf:d0:44:a6:f6:
9c:af:05:e9:ff:f1:3a:4b:6c:51:34:79:6a:5e:ad:53:c7:e8:
1b:62:46:55:d3:c9:f0:41:c1:b9:c1:5d:f8:e7:cb:f7:f9:01:
ef:c4:88:e4:24:b1:52:92:ea:3e:6f:da:28:04:2c:4d:6f:42:
fb:7b:d5:ef:05:fb:32:77:34:63:6c:0c:db:eb:a7:1d:3b:51:
a2:75:d6:30:71:43:9e:9a:69:a8:fc:97:ee:31:2f:3f:50:ac:
7a:ce:c6:66:c8:b5:66:e5:1e:0b:0c:ca:aa:3d:5e:4c:6d:fa:
76:a1:48:12:40:94:da:1a:0b:16:9f:bf:ec:97:8a:dd:66:34:
f5:fa:c1:04:f4:3e:99:2d:90:85:79:82:41:5b:4e:a7:89:1b:
8c:53:4b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 02:45:19 2026 by rpki-client