Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/Q46TTR1OiyAupSfF3ZRC0KJ25xg.mft
File: Q46TTR1OiyAupSfF3ZRC0KJ25xg.mft (raw, json)
Hash identifier: TbetgvqxcgV6J7HBcKqpGAH4lJq6bHpstvndoNmFqVE=
Subject key identifier: CA:AD:32:3D:00:9A:39:F1:F7:53:64:AA:29:16:3C:8C:66:64:36:A6
Authority key identifier: 43:8E:93:4D:1D:4E:8B:20:2E:A5:27:C5:DD:94:42:D0:A2:76:E7:18
Certificate issuer: /CN=438e934d1d4e8b202ea527c5dd9442d0a276e718
Certificate serial: 01A13E260230D6B0594657E7B6A2B6A28144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q46TTR1OiyAupSfF3ZRC0KJ25xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/Q46TTR1OiyAupSfF3ZRC0KJ25xg.mft
Manifest number: 011E
Signing time: Thu 15 Oct 2026 06:00:40 +0000
Manifest this update: Thu 15 Oct 2026 06:00:40 +0000
Manifest next update: Fri 16 Oct 2026 06:00:40 +0000
Files and hashes: 1: HuS9HEQnmgwkuk6nNfxYJWoTZfg.roa (hash: Gax45SA31eyvFfTp8hHtUBasQUGl4kGyHCARRtiz6pQ=)
2: Q46TTR1OiyAupSfF3ZRC0KJ25xg.crl (hash: aR+hOXambbP/llYx7WFm0j5CsGrWLaa/62G5UdMAaKo=)
3: xBKM8I38qGeVMeob4yWir2gnqCk.roa (hash: KcgLf5khcgwTitCwhZW6SThRiWSlxfBJuDkexFoQ3hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/Q46TTR1OiyAupSfF3ZRC0KJ25xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/Q46TTR1OiyAupSfF3ZRC0KJ25xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q46TTR1OiyAupSfF3ZRC0KJ25xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:02:30:d6:b0:59:46:57:e7:b6:a2:b6:a2:81:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=438e934d1d4e8b202ea527c5dd9442d0a276e718
Validity
Not Before: Oct 15 06:00:40 2026 GMT
Not After : Oct 16 06:00:40 2026 GMT
Subject: CN=caad323d009a39f1f75364aa29163c8c666436a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9e:3d:3e:99:0d:e0:9f:c6:fd:f7:02:c1:03:
1a:91:2d:f4:75:1b:5e:4b:fd:e1:f5:d7:24:44:88:
ca:c2:ba:5c:3c:ca:aa:a3:a8:2e:9e:4f:66:da:03:
5c:53:f6:40:30:50:c4:e4:f5:b9:27:5d:a5:b4:95:
4b:37:ff:c0:55:66:28:71:32:86:9d:76:cf:90:9c:
45:64:e9:6b:4f:94:1f:3b:0b:fb:24:b1:86:4d:89:
b8:db:ee:8e:43:48:bb:99:3a:a1:92:9c:aa:08:4b:
35:3f:1b:ac:15:f8:4e:da:1a:90:bf:e7:04:e9:19:
61:91:00:8d:fe:10:02:3f:29:12:ec:6a:d7:3f:58:
52:18:10:4e:52:71:71:cc:0c:de:9e:0a:03:46:24:
d3:7e:25:00:eb:f3:c5:63:0d:f2:ae:0c:4e:ef:de:
1b:52:6c:eb:b3:31:7b:b8:39:a3:e4:5d:36:71:52:
08:45:b9:ac:c6:12:6f:70:72:73:fe:09:90:08:76:
14:18:72:ff:5d:0c:d1:39:93:bd:e6:6a:3f:f0:f3:
57:1d:6e:78:79:f7:39:9c:3d:8e:7e:9e:1d:12:6c:
eb:02:16:3b:8b:a0:4d:62:67:fc:3e:c3:b1:f0:5c:
77:ee:8d:b6:a0:72:d4:df:33:78:1b:64:76:5a:d1:
f1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AD:32:3D:00:9A:39:F1:F7:53:64:AA:29:16:3C:8C:66:64:36:A6
X509v3 Authority Key Identifier:
keyid:43:8E:93:4D:1D:4E:8B:20:2E:A5:27:C5:DD:94:42:D0:A2:76:E7:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q46TTR1OiyAupSfF3ZRC0KJ25xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/Q46TTR1OiyAupSfF3ZRC0KJ25xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/Q46TTR1OiyAupSfF3ZRC0KJ25xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a4:5e:ad:c2:3b:4b:b1:8f:da:b2:87:1b:4f:8c:ec:b3:dc:
a2:1e:4d:b8:8e:33:10:65:f5:fb:e3:f1:4f:4d:17:00:f5:d0:
26:c3:58:55:ec:d7:57:9b:cc:f2:3f:0c:66:fb:33:84:8c:51:
89:80:24:d3:ab:40:87:8f:f6:4f:8e:12:43:af:50:e0:2f:b7:
41:a4:55:40:8d:a8:0c:72:0a:17:40:c3:ae:46:6a:92:bf:96:
9d:03:ee:72:cd:c4:0f:d6:36:cf:bf:bd:7a:d4:20:f6:be:e6:
86:17:5f:43:b2:ec:6d:dc:b9:de:0c:ff:f0:53:dd:9b:6b:a6:
d9:93:e5:6f:8a:59:0e:41:bb:a4:7a:a1:56:7e:d5:bd:5b:7b:
68:16:ff:db:4d:1e:bf:5c:bd:f0:dc:0f:b7:d3:22:59:31:bd:
e7:71:54:28:ba:20:36:fd:04:5a:cb:48:8e:e7:be:1d:27:7d:
a6:2f:b6:ef:9b:ab:22:6b:d3:49:79:ff:1f:33:09:f9:43:47:
5b:1c:12:f1:23:e6:2b:06:93:fa:58:4e:8e:75:20:58:06:d0:
80:33:f1:8e:95:26:22:11:e3:d1:ab:6c:8a:1d:33:45:2f:8f:
83:a9:db:8d:90:1c:38:02:03:40:29:b2:71:24:46:2e:9a:67:
96:26:ad:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:22:25 2026 by rpki-client