Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
File: q6gfB6STo-ZDdS5mvYFG9Xca34g.mft (raw, json)
Hash identifier: 6umYwVtwz3d6U/e+RlgVR8LBMpxxDCEHgJuxqy5GD34=
Subject key identifier: 56:5F:B3:9F:4A:4C:E9:B6:AF:3B:4E:A8:B6:7D:CB:DD:3B:33:BB:14
Authority key identifier: AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
Certificate issuer: /CN=aba81f07a493a3e643752e66bd8146f5771adf88
Certificate serial: 01A17F61B98B5510B7C7430E10EE98D9B3B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
Manifest number: 1AA1
Signing time: Tue 27 Oct 2026 22:01:13 +0000
Manifest this update: Tue 27 Oct 2026 22:01:13 +0000
Manifest next update: Wed 28 Oct 2026 22:01:13 +0000
Files and hashes: 1: KVyFy8VhCmWDFDfi6hznjqY-CiM.roa (hash: gxDIq6BgrSNUPikORcjw6F0p9+XkSRUjM2gZnMVK/i4=)
2: mHnLIzDp0K0uZ34p1Ju5C7yV-Jc.roa (hash: ndDoF5lyW5EcQE2tsppbm+3E+OkI4cfheb+pzHW2skk=)
3: q6gfB6STo-ZDdS5mvYFG9Xca34g.crl (hash: KkK+/HBBvpWv4X6sXoaa09E6+1chQDLc+Q8PXe0Npjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:61:b9:8b:55:10:b7:c7:43:0e:10:ee:98:d9:b3:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aba81f07a493a3e643752e66bd8146f5771adf88
Validity
Not Before: Oct 27 22:01:13 2026 GMT
Not After : Oct 28 22:01:13 2026 GMT
Subject: CN=565fb39f4a4ce9b6af3b4ea8b67dcbdd3b33bb14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a5:59:60:d9:74:cd:58:a4:b7:25:ba:f4:b9:
5c:9f:4f:01:f3:8e:45:5e:3a:38:04:49:20:77:0e:
88:e6:e5:8c:93:80:6a:b2:b4:de:9d:03:ce:c6:8b:
dc:23:e3:ae:ed:17:52:f6:1e:76:5f:3c:3c:5b:e9:
fc:4e:1b:37:87:06:1e:29:cf:4b:31:c7:e4:d9:85:
3d:e8:b6:24:c2:5c:3c:0d:08:63:38:7c:2a:b8:b5:
bc:e5:8c:d6:74:87:81:2f:15:98:53:2e:38:59:e8:
42:f4:60:71:21:42:ac:ca:e5:12:d3:9a:5f:b7:ae:
6c:8c:e5:3a:6b:8a:bb:dd:71:6d:7a:18:84:f1:c9:
eb:21:eb:6f:8f:7d:f7:30:48:6c:ad:a7:5a:1a:99:
7e:1e:5f:41:c8:f5:52:9d:88:c2:7f:e2:0e:f2:12:
e2:fb:2d:d3:3e:b9:89:8b:11:5d:14:e5:da:17:98:
3a:61:7a:65:86:da:5f:3d:5f:6c:ab:60:c6:e0:00:
20:aa:26:02:e8:8d:46:ab:54:ed:c6:3b:79:2b:c8:
76:89:30:ef:e9:09:45:5f:83:2b:96:8a:6d:98:f7:
4b:60:85:df:09:10:57:50:8e:8d:a6:eb:7f:25:07:
57:77:89:ce:63:38:ed:08:55:3f:3d:b5:8f:0f:c3:
b3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5F:B3:9F:4A:4C:E9:B6:AF:3B:4E:A8:B6:7D:CB:DD:3B:33:BB:14
X509v3 Authority Key Identifier:
keyid:AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:bb:d7:1d:6e:47:74:57:d1:e4:32:53:7d:b8:e2:68:0d:83:
13:18:a8:8c:25:66:3e:ec:d0:d1:58:5a:f4:59:cb:53:dc:d6:
8f:9c:27:fd:69:7b:65:b1:cc:bd:5e:09:5c:e6:f1:59:43:e1:
b8:38:74:86:dd:28:39:75:a9:36:92:7c:f9:3d:d1:1d:c4:97:
db:04:fc:0f:83:f7:c2:3b:03:a7:b6:8a:02:1f:08:48:47:41:
af:94:4f:77:48:d7:38:89:8b:26:f8:cc:39:c6:69:88:e3:d2:
16:f1:9e:51:45:bf:31:22:82:bb:23:71:93:73:b9:3e:02:f7:
36:b6:79:13:a1:60:70:8f:84:8e:5c:a1:11:ce:3c:28:23:30:
77:30:20:dc:9a:19:8f:7a:7e:1b:87:84:4c:e8:9d:26:96:d5:
97:8f:c3:d8:b7:7f:b5:80:0c:26:e0:0b:ef:dc:7c:43:fe:05:
d1:40:e5:0d:37:c4:79:fd:44:9e:49:d9:1a:b3:54:8f:2f:e5:
3c:4a:24:a0:ce:c7:73:0b:e1:87:c5:5d:16:1b:1c:85:aa:e5:
4f:e6:55:97:5c:df:a9:a6:42:72:f4:62:24:b9:54:aa:87:05:
da:54:8e:9d:2f:ee:79:b9:c2:09:e2:07:eb:d2:22:58:86:6e:
ee:a2:26:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:14:09 2026 by rpki-client