Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
File: 1QibzgjFXapXtPOjyQcPs5GFPM8.mft (raw, json)
Hash identifier: nh9y0V1K0eVurbf/DHTYhuMzmsUhvVfH1rLU865nQNw=
Subject key identifier: DB:CC:8A:7B:C0:B7:2F:07:0B:FA:51:FD:87:51:8F:26:27:00:62:47
Authority key identifier: D5:08:9B:CE:08:C5:5D:AA:57:B4:F3:A3:C9:07:0F:B3:91:85:3C:CF
Certificate issuer: /CN=d5089bce08c55daa57b4f3a3c9070fb391853ccf
Certificate serial: 01A13D81215B842515E0889BB4F96096DFBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
Manifest number: 0F7A
Signing time: Thu 15 Oct 2026 03:00:35 +0000
Manifest this update: Thu 15 Oct 2026 03:00:35 +0000
Manifest next update: Fri 16 Oct 2026 03:00:35 +0000
Files and hashes: 1: 1QibzgjFXapXtPOjyQcPs5GFPM8.crl (hash: aQMrRsjml3hQo34QV/l9C5Pecp59/3cCqHYwpxW2FWI=)
2: 3oaI4BJ1PfZU5ToAgLWtvl5NwhU.roa (hash: 3ZrLLG5oIpjvCZLR27J2YMVw+al6VtK2RFAJCZ4jGnc=)
3: cJFbLtaeoUfXlMt793s1Sx4oIHk.roa (hash: Q8rXRF1zW51xxj2bD+8pa1r9iTu2h5oDnFm7rQ/g/G8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:81:21:5b:84:25:15:e0:88:9b:b4:f9:60:96:df:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5089bce08c55daa57b4f3a3c9070fb391853ccf
Validity
Not Before: Oct 15 03:00:35 2026 GMT
Not After : Oct 16 03:00:35 2026 GMT
Subject: CN=dbcc8a7bc0b72f070bfa51fd87518f2627006247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:47:07:ee:6e:f2:9c:4b:ac:55:d0:21:f2:ba:
5c:0d:01:f1:5a:9b:6a:da:34:1c:60:0c:b3:87:e2:
83:4a:3d:3b:59:83:f5:16:9b:fe:80:f6:25:81:91:
f0:1f:e4:0a:f4:03:72:08:72:49:5f:fd:44:d7:eb:
3a:7b:29:de:fa:12:d5:52:b4:9e:0a:31:02:48:93:
0f:94:5a:59:e2:12:9d:ed:85:36:30:27:a2:a3:41:
fd:c8:ac:3d:5f:73:96:08:d8:1a:87:bd:ed:b4:8e:
5f:cb:53:d7:c4:28:8f:34:ac:0f:6e:c5:e2:4f:a7:
6f:00:6d:a5:ae:57:3f:d0:77:96:d0:43:a8:d8:1d:
31:4a:a0:ed:ce:6e:3c:2c:f5:21:9e:e5:50:d0:47:
00:13:78:2f:ae:00:1a:e7:bf:a8:5d:85:bb:c1:01:
b3:f1:67:02:48:f1:ba:dc:fc:30:68:e7:0d:84:38:
55:85:16:b5:1e:bf:78:97:0e:58:70:cc:e1:a8:08:
ce:9e:b3:4a:4e:bf:21:42:bb:40:3a:9a:49:7c:c4:
36:a3:3e:fe:8b:62:c5:cf:d5:38:dc:41:28:b6:fa:
84:45:01:1f:41:59:f3:fb:b7:21:f8:d7:31:02:f9:
bc:fd:50:d2:35:14:31:14:aa:b6:22:b9:c1:0e:60:
c7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CC:8A:7B:C0:B7:2F:07:0B:FA:51:FD:87:51:8F:26:27:00:62:47
X509v3 Authority Key Identifier:
keyid:D5:08:9B:CE:08:C5:5D:AA:57:B4:F3:A3:C9:07:0F:B3:91:85:3C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:cf:32:c1:34:a2:f7:fa:b6:0a:8d:52:e1:57:65:79:a1:fa:
1f:39:f6:8c:a9:66:e6:53:39:55:75:2a:85:43:0b:36:dd:30:
b8:76:e9:7d:fc:a2:dc:c6:5b:42:ef:3e:79:ba:b9:ab:3f:85:
2b:b6:95:e9:75:44:89:b7:54:fd:8c:f6:d8:fc:67:83:92:6b:
75:3a:08:b6:d6:88:1f:ab:fe:f8:25:b7:55:99:12:bb:64:e7:
7f:60:0d:74:e8:be:61:3a:cf:07:0c:31:8a:45:0c:b1:e3:44:
da:21:96:f5:6a:47:a5:ef:1d:88:22:53:5a:78:3a:cb:3b:e6:
00:9d:89:3b:e7:89:d9:b0:ee:b4:a3:99:33:06:5d:0b:03:67:
bc:09:eb:5f:04:02:24:13:78:4b:96:3e:97:4c:c7:c5:1f:62:
13:90:49:ac:ec:6e:61:e4:9c:95:25:bb:d8:16:52:e5:8a:01:
ba:49:ab:98:f5:88:20:6e:c9:b6:67:85:f2:4a:e2:b3:bb:7d:
4b:6f:47:d6:b3:e3:2c:43:db:c1:15:79:47:94:e8:84:b8:2b:
c5:e3:d6:9d:78:d7:3e:64:9d:f2:2a:56:ab:13:67:da:59:ee:
87:df:c3:cc:8e:f0:0b:bc:76:e8:86:6c:cc:a2:c1:f9:58:5c:
c9:99:07:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:32:26 2026 by rpki-client