Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
File: Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft (raw, json)
Hash identifier: UrTchPwysG8HIZ190a5SDPTWrImDJHFTqA1jv+J2vo0=
Subject key identifier: 28:BB:E5:5C:E5:5C:94:7F:5F:33:F2:D0:3D:58:63:FB:4F:CE:41:43
Authority key identifier: 42:1E:49:E1:C7:55:FD:E0:38:BD:18:75:C7:F3:97:A5:68:64:60:14
Certificate issuer: /CN=421e49e1c755fde038bd1875c7f397a568646014
Certificate serial: 01A19A33A7D05921DA5758C715BE16886CCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
Manifest number: 0CE7
Signing time: Mon 02 Nov 2026 03:00:38 +0000
Manifest this update: Mon 02 Nov 2026 03:00:38 +0000
Manifest next update: Tue 03 Nov 2026 03:00:38 +0000
Files and hashes: 1: Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl (hash: 6WZp+6vaD2/0bpiLgzOR/tscchngiA7Hrb3RBSRU8zA=)
2: tzxRcibemA94VnMAm0dv4MlqbUA.roa (hash: VBIKKEa5Iy0UgSH1dlBF7tfkGRCcGJgtuhRAaqjOCP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9a:33:a7:d0:59:21:da:57:58:c7:15:be:16:88:6c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421e49e1c755fde038bd1875c7f397a568646014
Validity
Not Before: Nov 2 03:00:38 2026 GMT
Not After : Nov 3 03:00:38 2026 GMT
Subject: CN=28bbe55ce55c947f5f33f2d03d5863fb4fce4143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:44:c6:43:36:8c:57:14:28:9d:ee:70:6f:2c:
70:01:d8:68:3f:3a:41:91:3a:59:f0:41:13:23:80:
8c:84:5e:f3:30:eb:ef:13:5a:9f:f2:64:b9:7f:68:
93:ab:87:05:38:69:05:eb:5c:a8:98:48:be:b0:bb:
6c:85:86:eb:84:e1:33:91:f0:f8:67:26:75:2e:f2:
d2:bd:ca:1c:4b:96:cc:83:b9:2b:4f:2b:48:00:92:
00:02:f0:84:85:df:58:49:5a:1a:d9:28:dd:bf:6d:
1f:3b:19:6e:29:1f:da:27:f3:a5:d6:98:9c:8a:1d:
87:15:34:d1:e2:cc:a7:7b:86:62:a6:3d:a4:96:84:
27:09:d8:16:98:42:8b:bc:30:a8:a3:a7:44:28:db:
7b:ab:9c:9c:00:0e:44:69:72:be:1e:d2:56:15:74:
d8:4c:5c:94:33:32:8e:2d:73:9a:88:3a:f7:4c:dd:
59:d2:56:0f:34:b2:d2:2f:1a:df:89:fa:8d:53:35:
f3:2c:87:49:18:0f:e6:e9:89:cc:a9:bc:25:8f:67:
0f:6f:7e:8f:01:9b:4b:36:44:4c:70:b2:e5:eb:1b:
24:00:52:fe:ad:27:bd:8f:e3:46:29:7c:5c:40:c3:
da:be:5b:5f:25:e0:e9:b7:e0:b5:74:43:59:6d:d3:
b7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BB:E5:5C:E5:5C:94:7F:5F:33:F2:D0:3D:58:63:FB:4F:CE:41:43
X509v3 Authority Key Identifier:
keyid:42:1E:49:E1:C7:55:FD:E0:38:BD:18:75:C7:F3:97:A5:68:64:60:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:af:d3:9e:97:96:db:17:f2:d3:9a:13:1b:8a:03:91:0d:84:
37:19:4d:a0:8c:79:97:79:d0:29:5a:b8:b6:be:8b:17:56:06:
fc:1e:0d:c1:a2:e3:01:13:c1:e0:28:db:8a:7d:74:66:f6:66:
c9:86:64:c5:f8:67:65:3e:58:c6:a0:45:7a:75:5d:21:55:c2:
7d:cb:fa:f7:25:e9:a3:35:5e:15:37:a2:cd:cd:4a:ed:92:9c:
b4:1f:34:01:f2:b0:c8:91:63:a3:d8:6a:83:9b:49:a8:6c:8f:
fd:57:18:bd:d9:b4:c6:e4:26:d0:a3:4e:5c:72:13:eb:71:68:
9f:fa:69:e4:dc:4e:07:84:c2:52:e4:6a:3d:ee:8a:de:a3:88:
40:b8:2e:d2:ad:13:f7:03:50:d0:20:7a:78:ac:94:49:98:f2:
f8:d3:ef:c2:9e:fe:54:21:2c:58:57:7c:cc:87:03:55:5c:d6:
26:17:ea:94:c6:c4:90:98:91:20:77:f6:4f:ff:d5:85:48:81:
9c:57:ed:23:0e:9e:32:c1:a8:43:22:6a:87:d1:47:48:b8:3c:
11:7b:75:ba:9e:01:e9:cd:29:f6:e9:e6:da:e2:7d:3c:f5:10:
28:c0:c5:c0:d4:bd:45:17:cd:5b:66:34:4f:1d:78:13:b5:e8:
7f:c8:1c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 12:43:03 2026 by rpki-client