
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
File: Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft (raw, json)
Hash identifier: eM9KGF68a5a3ZB5lgonKDt/P4cdVBmptSBDITPft1Uc=
Subject key identifier: F2:99:6C:63:3D:30:11:00:B3:CC:67:2A:05:29:26:5C:93:4D:BB:44
Authority key identifier: 43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
Certificate issuer: /CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Certificate serial: 01A1815028214C4F74EB7B3BD9AEB1CC28AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
Manifest number: 1ADE
Signing time: Wed 28 Oct 2026 07:01:16 +0000
Manifest this update: Wed 28 Oct 2026 07:01:16 +0000
Manifest next update: Thu 29 Oct 2026 07:01:16 +0000
Files and hashes: 1: 9jc69vVsdWk6bDgFshwFaPkQiW4.roa (hash: vJY4PURpp9zlGE8vkcu9TTy5SV3ZXYUmKNEh03HjHbE=)
2: McRpwaQnqqZOGTag3hww5pMg2ZA.roa (hash: S2MuhIxLoEt0UYzfR1rcMJ/qgJF6eA4a0C2qNQuo9nk=)
3: Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl (hash: blTrVxphtUapCaxagIWVrDGne0ojYE3ZFzEosMWxDm0=)
4: tDspM2jjSgEGhc8BloKM8cbAdEU.roa (hash: yKxOJy53jyvQOqMbQzES6V6OdCvwq23pAU2NRVmp2OI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:50:28:21:4c:4f:74:eb:7b:3b:d9:ae:b1:cc:28:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Validity
Not Before: Oct 28 07:01:16 2026 GMT
Not After : Oct 29 07:01:16 2026 GMT
Subject: CN=f2996c633d301100b3cc672a0529265c934dbb44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1e:bc:41:0c:99:94:49:9f:8d:25:cf:7b:5c:
b3:37:0a:b2:fb:33:96:49:bb:c2:6e:2d:c4:e7:25:
84:67:23:f6:4d:7e:94:1c:f6:ef:2f:31:36:e7:4d:
cf:2e:9f:cc:d3:f0:b6:6b:f7:c9:30:ce:53:7d:8a:
71:cb:c2:df:61:e0:57:ea:6a:3d:83:9d:23:2a:f6:
d3:4a:ea:5b:a5:a1:a1:07:0c:25:db:ab:ec:f2:3c:
13:42:fe:50:6a:71:d5:a2:d0:25:27:a1:ef:9f:9c:
3e:6f:d1:f6:f7:ad:cc:98:ec:93:32:bb:65:02:a2:
22:24:ae:2b:58:1d:83:be:93:b1:44:d6:28:c9:c1:
4e:c9:8b:64:21:b8:6b:f7:16:91:2d:d4:1a:5e:13:
fb:64:03:f4:68:4e:9e:de:99:76:40:92:93:46:04:
58:93:ce:a0:fe:25:46:fb:34:96:61:f0:42:fa:56:
3b:c8:45:fb:bd:5f:ef:15:f2:d8:0d:58:1f:3f:85:
99:2b:31:25:0d:0e:6c:f5:8c:36:78:b7:d7:b4:3e:
c4:f3:58:0a:ee:aa:e0:a7:fb:83:27:61:2f:46:d6:
17:e5:15:96:4a:86:35:d4:11:93:e9:dc:cd:97:1c:
fa:d6:e2:b5:06:83:39:50:d7:03:de:2c:e2:83:53:
d2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:99:6C:63:3D:30:11:00:B3:CC:67:2A:05:29:26:5C:93:4D:BB:44
X509v3 Authority Key Identifier:
keyid:43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ed:35:c3:f7:0d:0c:2f:42:22:a2:3c:64:a6:e6:d4:c2:a7:
14:9f:00:cf:26:32:62:d9:86:4c:49:74:a0:3b:1f:81:29:8a:
6e:9b:78:37:80:95:77:29:33:32:52:96:82:18:4d:99:95:ed:
22:d0:03:54:43:66:2b:c0:22:6e:4d:24:a9:eb:ea:58:79:fb:
3e:db:34:35:67:de:7b:ae:6f:2e:97:7e:57:76:54:8e:7d:13:
41:f7:28:c3:30:73:c5:6e:f9:f9:5a:ad:ea:f8:aa:4c:71:bb:
3a:ed:48:64:00:62:d5:da:7e:f1:ce:4f:fa:1e:a0:c8:c9:74:
fa:a4:3d:bd:75:f3:9a:e7:2c:8f:dd:19:65:c0:e9:36:a8:a0:
ca:3b:9d:05:ca:fb:0e:03:50:21:59:0f:32:5c:b7:94:4c:c9:
0c:c0:a4:9d:b5:5e:29:21:a7:1d:ed:d6:f8:69:58:ae:69:c6:
0e:02:5a:95:ef:7d:77:ab:d1:b1:19:be:e7:1d:c8:de:9e:55:
c5:35:96:1f:dd:ad:9c:39:e2:46:08:13:fc:0e:a1:ca:b9:a0:
83:62:02:9e:65:e0:ba:13:60:51:03:08:a8:a8:87:2e:1d:60:
89:6c:7a:b3:44:43:6e:40:45:ec:25:95:a9:3c:c8:8a:b8:6f:
2c:bc:d2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:34:51 2026 by rpki-client