Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/baf879-67c0-4785-b870-ae3b9e34d27f/1/qI2nDOKKiJJzJtuLYipmwp-sUjw.mft
File: qI2nDOKKiJJzJtuLYipmwp-sUjw.mft (raw, json)
Hash identifier: lPkxK+8IVDXAh5ESloJzys2c0G+1u71Ym0HLqGv6BME=
Subject key identifier: 96:64:2B:74:4C:1C:AB:F8:46:2F:E8:BA:7B:25:9C:95:36:FA:9F:BD
Authority key identifier: A8:8D:A7:0C:E2:8A:88:92:73:26:DB:8B:62:2A:66:C2:9F:AC:52:3C
Certificate issuer: /CN=a88da70ce28a88927326db8b622a66c29fac523c
Certificate serial: 01A171DCE02E727FDC86681F7EC9E50AE1F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qI2nDOKKiJJzJtuLYipmwp-sUjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/baf879-67c0-4785-b870-ae3b9e34d27f/1/qI2nDOKKiJJzJtuLYipmwp-sUjw.mft
Manifest number: 01BA
Signing time: Sun 25 Oct 2026 07:01:03 +0000
Manifest this update: Sun 25 Oct 2026 07:01:03 +0000
Manifest next update: Mon 26 Oct 2026 07:01:03 +0000
Files and hashes: 1: Agdkr7pow-AzSTl7UhxIjtbuif8.roa (hash: XwEU2q/BPbK/EoWe/rSsRkIbMCNqHp48BI3sTIZFcTs=)
2: qI2nDOKKiJJzJtuLYipmwp-sUjw.crl (hash: sG1/yYIHtJAlg/S0XMe0uLq1t0OVGqEbNDo4Pd26cEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/baf879-67c0-4785-b870-ae3b9e34d27f/1/qI2nDOKKiJJzJtuLYipmwp-sUjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/baf879-67c0-4785-b870-ae3b9e34d27f/1/qI2nDOKKiJJzJtuLYipmwp-sUjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qI2nDOKKiJJzJtuLYipmwp-sUjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:71:dc:e0:2e:72:7f:dc:86:68:1f:7e:c9:e5:0a:e1:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a88da70ce28a88927326db8b622a66c29fac523c
Validity
Not Before: Oct 25 07:01:03 2026 GMT
Not After : Oct 26 07:01:03 2026 GMT
Subject: CN=96642b744c1cabf8462fe8ba7b259c9536fa9fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:11:3f:cb:4f:b7:fe:51:b7:f7:27:c6:57:99:
c5:44:8e:a4:7b:5b:7c:9c:0e:0e:f5:19:64:97:f3:
df:10:2b:64:93:77:a5:53:a3:59:ad:72:f6:52:28:
f1:a1:69:64:77:e5:97:c7:af:1c:4a:55:28:da:90:
85:c1:83:22:19:35:ab:43:51:ee:70:c1:c7:43:97:
e1:08:8b:ae:56:35:8c:88:fa:38:2e:96:32:ee:7e:
8f:b4:fd:6e:e4:13:98:8d:2e:db:3d:b9:1a:03:8c:
46:44:a8:ad:5e:f3:5c:9c:39:cb:df:16:3c:c2:38:
1a:53:ba:55:0e:80:6f:4e:18:f0:99:a3:60:46:f9:
6a:89:2e:7a:06:b3:e8:36:6b:4f:19:ae:1c:18:0b:
82:4f:7c:9a:9c:0f:05:7b:17:a4:15:2f:3d:1d:7d:
f5:80:d2:3e:6b:ae:3f:bb:a0:8b:1c:c5:8d:fa:08:
e2:f6:37:98:39:d6:f2:9d:d4:a8:7d:38:72:2c:77:
17:15:38:47:12:61:ca:8f:fa:5a:67:4d:3a:67:98:
26:d2:dd:0e:0f:51:48:4d:85:09:1a:db:2f:11:6f:
60:d8:8c:11:51:27:e5:fd:06:f8:86:be:3b:32:09:
51:5a:4c:9a:32:74:b8:70:a0:de:20:80:9f:09:32:
0c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:64:2B:74:4C:1C:AB:F8:46:2F:E8:BA:7B:25:9C:95:36:FA:9F:BD
X509v3 Authority Key Identifier:
keyid:A8:8D:A7:0C:E2:8A:88:92:73:26:DB:8B:62:2A:66:C2:9F:AC:52:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qI2nDOKKiJJzJtuLYipmwp-sUjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf879-67c0-4785-b870-ae3b9e34d27f/1/qI2nDOKKiJJzJtuLYipmwp-sUjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf879-67c0-4785-b870-ae3b9e34d27f/1/qI2nDOKKiJJzJtuLYipmwp-sUjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:a6:69:78:d4:2d:3d:0b:7e:9b:19:91:ae:38:68:e3:60:e0:
9a:d2:1b:c9:1d:46:f4:2c:40:a7:1a:11:c9:81:f7:c7:40:81:
e9:2d:ae:a6:50:53:47:ee:60:dc:c2:2e:3e:f4:d1:11:2b:61:
14:d1:e5:cc:f9:43:7d:87:0e:92:76:f5:d3:8c:2e:75:c2:c5:
65:47:42:20:73:71:64:f6:4f:01:ff:e8:d4:cc:26:c3:b6:bb:
38:9c:74:0b:26:06:f7:ba:90:d2:80:aa:40:f5:ac:89:92:6e:
8b:41:c2:d2:02:90:d1:37:b0:6d:6d:62:26:07:dd:dd:8a:74:
f4:6e:d9:d5:30:88:44:fb:0e:a5:fe:c6:56:0d:4f:30:9f:98:
59:45:e7:96:86:35:12:90:e5:89:1a:0f:38:95:cb:15:df:0c:
a4:13:5a:b4:17:4d:c6:f9:f4:87:5f:c1:f1:61:66:6c:ae:8f:
27:bb:53:63:37:9e:75:dc:11:db:9b:ca:c9:ff:74:c3:66:e4:
5b:54:6e:7e:39:fc:dd:47:6d:dc:4b:0f:59:2e:cf:51:19:92:
40:f5:da:a6:b4:67:ba:07:76:fc:a5:ba:47:64:e7:97:c2:81:
ea:33:dc:dd:f6:45:33:46:27:c1:a0:d6:f8:79:c2:ed:ef:d9:
c5:6c:e3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:37:19 2026 by rpki-client