Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
File: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft (raw, json)
Hash identifier: l5PZY/hPEqAMaEkNfR4qejJtF8Hzurv+PoPpEfDsr3M=
Subject key identifier: B4:32:EF:9E:98:E4:F5:39:99:33:BA:8D:C3:7A:B8:40:DB:A5:4B:88
Authority key identifier: 43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C
Certificate issuer: /CN=439137befe8bc55903690c7c46af197cc91a703c
Certificate serial: 01A0897A2DAEFA486EB7A065761EB7D4F34F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
Manifest number: 0632
Signing time: Thu 10 Sep 2026 04:01:20 +0000
Manifest this update: Thu 10 Sep 2026 04:01:20 +0000
Manifest next update: Fri 11 Sep 2026 04:01:20 +0000
Files and hashes: 1: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl (hash: 71LXBpSaYXxY7lDaryifSLFuqsyEJF0nSS71UiOnRbs=)
2: _7YkQnir_Fs7RdN8jRsXRuKitU0.roa (hash: eG23lB/DnSZrnvg06TYWuaxCxD+hbMjkA+ocC1LtuGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:7a:2d:ae:fa:48:6e:b7:a0:65:76:1e:b7:d4:f3:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439137befe8bc55903690c7c46af197cc91a703c
Validity
Not Before: Sep 10 04:01:20 2026 GMT
Not After : Sep 11 04:01:20 2026 GMT
Subject: CN=b432ef9e98e4f5399933ba8dc37ab840dba54b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:22:43:34:25:78:ea:ea:ce:e5:46:26:2d:76:
62:7d:e3:e2:63:d6:a3:9e:36:d5:0c:43:dd:f5:7d:
31:17:9e:1b:56:94:4a:b0:ae:bb:f6:9e:17:0a:9b:
1b:0c:b4:77:54:2a:e0:6a:42:dd:e0:64:85:fb:56:
69:7f:b9:2c:62:1f:b4:0d:26:38:ff:16:f1:1c:24:
b1:48:36:0d:73:bd:7c:61:80:6f:ce:a0:8f:f4:1a:
cd:cd:08:e5:dd:c0:72:c1:56:f1:97:e2:ee:ad:a0:
2e:93:7c:66:27:22:9e:26:36:28:f5:2c:69:42:8e:
0f:6b:05:b6:8c:65:10:88:e8:dd:93:7a:27:bb:07:
cb:6a:5f:de:9f:ef:ca:7f:5b:1b:d5:93:ed:a7:db:
42:26:24:20:f6:5b:55:05:78:cc:71:89:1b:3f:1e:
c6:59:ea:d7:bb:62:ac:95:37:97:58:1f:38:ec:f2:
90:fe:fd:4a:ef:a7:35:36:7e:2c:b2:bd:a8:ca:72:
2c:19:ff:61:23:11:c4:ee:d8:30:1e:19:0b:de:e5:
28:5b:da:fd:6b:e8:c9:ec:2c:12:b9:bf:dc:64:cf:
f2:a5:24:1b:f6:cc:b3:2d:24:bf:9d:a3:42:4c:c3:
5b:a0:84:27:91:a9:13:3f:ec:f1:85:d3:26:f8:a1:
cf:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:32:EF:9E:98:E4:F5:39:99:33:BA:8D:C3:7A:B8:40:DB:A5:4B:88
X509v3 Authority Key Identifier:
keyid:43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:35:dd:b1:f7:f8:66:cf:56:05:69:78:9f:df:c0:6a:ad:f5:
de:ef:13:d5:f9:d7:c4:ea:c7:70:a2:90:47:30:35:6d:c0:0a:
8b:81:b0:ef:7b:38:1b:15:20:5d:01:7a:f0:e2:65:1e:82:b7:
94:3e:52:39:1a:6c:15:d1:9a:98:5b:b3:a4:b2:9e:c5:84:f5:
36:7a:08:db:82:9b:b9:9a:e9:8a:58:b8:0b:22:91:09:a6:cd:
3b:8d:1c:47:31:15:84:8d:cc:5f:e8:a0:12:e6:42:9d:9b:da:
18:b6:79:26:38:a4:44:de:26:77:2c:62:38:4d:2b:f9:d9:ba:
80:26:14:c9:fe:c5:84:30:df:b6:7c:e8:c4:6e:18:56:d4:6b:
48:2a:a9:8c:4f:36:91:15:d4:71:0d:18:58:02:f6:d4:e4:7d:
87:a7:d7:b5:25:74:3a:fd:7f:e0:ff:5f:aa:95:9d:4f:ff:06:
49:8d:24:d0:80:02:4c:75:cf:25:0a:92:31:03:48:80:98:33:
20:ac:65:8a:8f:27:66:0f:4e:11:4b:69:04:bb:a8:f9:e5:f6:
a5:f6:fd:31:e6:31:a8:af:a4:11:c9:68:8b:c1:a0:f7:3a:fc:
fa:94:4b:64:45:76:ef:d7:cc:36:4f:a9:1a:2c:71:59:bc:aa:
b9:13:3d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:17:02 2026 by rpki-client