Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
File: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft (raw, json)
Hash identifier: Fsya95NHKwVu4vBTaIASw64Va+6OXJtgsG8LxXq1fbk=
Subject key identifier: 12:B9:A6:F2:0A:2B:65:81:48:D0:39:CB:E5:D7:9D:BC:9B:01:CD:D7
Authority key identifier: 43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C
Certificate issuer: /CN=439137befe8bc55903690c7c46af197cc91a703c
Certificate serial: 01A1829982744AD3803974E286A7AA258ACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
Manifest number: 06B3
Signing time: Wed 28 Oct 2026 13:01:00 +0000
Manifest this update: Wed 28 Oct 2026 13:01:00 +0000
Manifest next update: Thu 29 Oct 2026 13:01:00 +0000
Files and hashes: 1: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl (hash: YtuhaAUQd7gom9Kwa0att6vQK8rUO1hiQr/33q0Aaqg=)
2: _7YkQnir_Fs7RdN8jRsXRuKitU0.roa (hash: eG23lB/DnSZrnvg06TYWuaxCxD+hbMjkA+ocC1LtuGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:99:82:74:4a:d3:80:39:74:e2:86:a7:aa:25:8a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439137befe8bc55903690c7c46af197cc91a703c
Validity
Not Before: Oct 28 13:01:00 2026 GMT
Not After : Oct 29 13:01:00 2026 GMT
Subject: CN=12b9a6f20a2b658148d039cbe5d79dbc9b01cdd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:87:b3:d0:01:a3:ab:41:d9:39:d0:c8:9d:71:
db:fd:b0:39:30:3e:99:36:38:c3:b0:d2:88:78:a7:
f3:66:08:bd:dc:03:4a:bc:30:12:ab:df:6d:07:ae:
cd:2e:7d:01:b4:25:dd:cb:5d:62:75:66:0b:2e:4e:
89:3d:f7:f4:1b:75:0e:df:b8:62:d6:2f:58:1e:34:
7e:ac:f9:ce:73:2a:a6:68:93:ad:92:74:cb:62:cd:
dd:67:e6:02:9f:b6:5d:09:51:9c:ca:13:41:86:f3:
3f:9c:72:33:33:ca:7e:45:61:a2:80:df:5b:fb:05:
22:50:b2:e8:bb:f5:6f:c5:6a:41:e1:ac:1c:f4:ad:
11:64:3a:e3:55:11:ba:25:47:b4:c6:d5:5d:d7:63:
b0:95:48:d7:e4:c0:a9:97:1e:3a:90:7d:80:d4:8b:
2c:59:6f:25:64:79:5e:9f:52:02:10:e2:ef:c5:74:
8e:22:5f:2d:36:26:ef:d9:fc:2e:b9:d7:cd:85:7c:
6e:49:5d:ff:97:70:d2:63:71:14:55:5f:80:6a:40:
6d:61:f1:5f:bb:85:15:5a:32:9a:57:48:c6:6d:db:
75:f8:9e:7d:f1:a1:8b:fa:12:f6:1f:d1:d5:b2:f6:
3a:4a:59:ed:c7:ae:16:49:2e:3d:cd:7d:44:b1:9a:
40:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B9:A6:F2:0A:2B:65:81:48:D0:39:CB:E5:D7:9D:BC:9B:01:CD:D7
X509v3 Authority Key Identifier:
keyid:43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:4f:10:12:30:f6:3b:9d:ef:84:d5:88:db:49:b3:81:9a:64:
2b:8c:dd:eb:b4:07:b1:9c:cf:45:cc:82:b5:46:59:1b:3b:62:
3f:f3:0f:9e:83:bc:bc:87:73:26:8f:22:89:5b:35:ca:a5:df:
93:46:cb:ea:9e:f9:80:dd:5f:23:b2:de:d6:b9:bd:b0:b8:fd:
31:f1:5d:1c:24:35:3d:6e:d7:5e:36:42:bd:60:f8:6c:ba:fb:
31:83:16:11:66:5e:b7:6f:2d:73:f6:a6:a5:f9:11:9f:da:7c:
e6:e0:e7:c1:82:21:14:f5:ee:aa:d2:eb:da:dc:97:a8:ab:c1:
01:32:b2:7a:69:23:3e:f9:b3:aa:a4:eb:64:d7:33:74:57:9a:
d5:19:37:da:6a:0a:27:98:e0:0d:77:c7:04:b6:a3:14:2d:02:
2a:d5:58:52:3b:16:75:ff:24:0f:71:b5:4e:c5:93:0f:5f:55:
f7:7e:c4:fd:48:db:3d:d7:08:1f:a9:24:e2:40:4a:40:bc:c8:
bf:d9:cb:95:9d:22:ab:ce:fd:00:db:e7:5e:e1:3d:e1:a6:6d:
c8:0f:a2:f3:d0:cd:d0:78:52:88:4f:62:22:70:60:90:32:d6:
bd:80:49:b6:98:8c:54:2a:f7:9e:4c:b6:1e:0e:cf:e0:41:71:
6a:61:cf:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:33:49 2026 by rpki-client