Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
File: Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft (raw, json)
Hash identifier: ebmL5PMNmQV9ufQJFIB59QGggkuek5fWiVlRR0FjsdE=
Subject key identifier: 2E:E4:9C:AF:F4:B1:D2:D4:AD:5E:7B:F0:19:8C:40:76:7A:77:0F:B5
Authority key identifier: 42:1E:49:E1:C7:55:FD:E0:38:BD:18:75:C7:F3:97:A5:68:64:60:14
Certificate issuer: /CN=421e49e1c755fde038bd1875c7f397a568646014
Certificate serial: 01A19E10A842C1F42CE686C320578A60F658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
Manifest number: 0CE9
Signing time: Mon 02 Nov 2026 21:00:54 +0000
Manifest this update: Mon 02 Nov 2026 21:00:54 +0000
Manifest next update: Tue 03 Nov 2026 21:00:54 +0000
Files and hashes: 1: Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl (hash: wdukbg4GavagXTgQGiuktyTxU2j6E/4m+m4tdmBA54o=)
2: tzxRcibemA94VnMAm0dv4MlqbUA.roa (hash: VBIKKEa5Iy0UgSH1dlBF7tfkGRCcGJgtuhRAaqjOCP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9e:10:a8:42:c1:f4:2c:e6:86:c3:20:57:8a:60:f6:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421e49e1c755fde038bd1875c7f397a568646014
Validity
Not Before: Nov 2 21:00:54 2026 GMT
Not After : Nov 3 21:00:54 2026 GMT
Subject: CN=2ee49caff4b1d2d4ad5e7bf0198c40767a770fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c2:f5:9e:70:89:53:13:7d:d4:d3:d9:97:35:
d6:99:3d:1f:6b:51:3e:bc:45:3f:69:a3:71:fe:12:
d4:f1:ec:a3:4f:67:36:1b:e9:88:49:98:75:05:2d:
84:50:db:d3:f8:6d:00:0c:2b:a6:4b:6a:1b:4b:5a:
20:81:ef:b4:9e:9b:72:29:0d:95:c7:76:cb:46:80:
f4:dc:3d:77:bf:4f:49:a0:bf:21:7d:70:5a:05:0d:
44:49:26:11:a1:df:ba:57:fe:6c:bd:ae:e4:df:2b:
7a:52:67:a4:59:bc:7b:76:29:9c:fb:57:2e:f0:c8:
e6:ee:88:92:7e:cb:4e:82:fc:29:10:04:49:9e:37:
fd:7a:00:b2:27:c7:f0:a0:16:4d:a5:66:b9:44:8a:
75:cd:dc:0a:61:76:69:78:c8:72:24:db:10:8a:2d:
12:8e:e8:02:ae:1e:57:68:46:2b:b3:4d:1b:d9:37:
90:3d:26:1b:d4:01:cc:5d:61:3b:ed:26:38:af:5b:
25:88:cd:28:c5:e6:82:f3:88:6e:33:5d:0c:1d:45:
87:39:a0:b1:19:61:61:22:03:0c:1b:19:ed:29:f3:
90:11:d3:37:46:9b:80:05:82:8e:27:c5:67:96:e7:
bc:13:83:6d:59:30:59:dd:3d:f8:4a:fb:7a:d0:b5:
9f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E4:9C:AF:F4:B1:D2:D4:AD:5E:7B:F0:19:8C:40:76:7A:77:0F:B5
X509v3 Authority Key Identifier:
keyid:42:1E:49:E1:C7:55:FD:E0:38:BD:18:75:C7:F3:97:A5:68:64:60:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:d3:be:f6:8a:a6:c6:a6:e0:e3:81:a4:f0:57:b7:5b:77:3d:
f3:6e:61:b6:05:87:d4:5c:16:49:9e:6b:ff:8e:6e:76:70:a9:
db:80:3e:41:8e:0e:39:18:3b:5e:cd:9f:5b:1d:79:98:03:16:
f1:42:80:03:58:6b:56:b4:b5:7b:a0:7f:9e:68:bd:58:95:91:
d4:00:ef:c7:4b:84:8b:1e:b9:45:fd:36:21:15:b6:91:31:5c:
d9:3b:8e:ed:9b:0f:11:2f:16:5f:b3:71:1a:77:07:88:55:17:
c2:ce:8b:41:26:d7:64:f1:d7:19:d9:1d:2d:7c:39:fb:57:25:
f0:3f:0d:02:8c:8e:1a:e6:61:1d:5f:c4:42:91:de:d4:ba:d7:
0d:e6:5a:e3:6e:4e:0f:74:1d:dd:7d:5f:91:d3:f3:9d:51:bb:
17:89:3a:b1:47:f9:59:f7:5b:86:b5:6c:a4:68:fd:4e:67:3d:
38:e2:88:1d:8b:79:62:d6:7b:b3:0d:d8:59:7c:6c:57:87:a9:
e7:d7:92:4d:bc:d7:f9:49:08:a2:be:42:48:5d:b8:b4:64:50:
e2:79:9c:7c:a1:25:ec:8d:9f:0f:6d:cd:e5:54:ec:e4:7d:d1:
4f:56:e6:25:21:bb:6d:50:d8:93:0b:90:42:3f:7a:10:64:19:
b9:6b:4d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 03:49:59 2026 by rpki-client