Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
File: Q0llhOXPObVodN6Nx3qjpv-eih4.mft (raw, json)
Hash identifier: ejZ/mx15z2ygRuUc5c/HUj/D1aMPnfi9SHOZvB/0XGU=
Subject key identifier: 48:E1:5A:18:68:BC:A7:32:08:CF:FA:13:D9:04:2B:CD:6E:95:4F:69
Authority key identifier: 43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
Certificate issuer: /CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Certificate serial: 01A11605D7C181CB6E716F677E79F1B4EB78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
Manifest number: 172F
Signing time: Wed 07 Oct 2026 11:00:43 +0000
Manifest this update: Wed 07 Oct 2026 11:00:43 +0000
Manifest next update: Thu 08 Oct 2026 11:00:43 +0000
Files and hashes: 1: Q0llhOXPObVodN6Nx3qjpv-eih4.crl (hash: JvtLGPF3KQQ4j1V5pwoCgkEu5zx/0d6/d6ei403dU6w=)
2: eTNkVC7XWRHBzuyFVu3pxnwq3z4.roa (hash: b8ZbPv94PI8PSCuaUsrniKkw7cN6jjfuOqQWfIOj1qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:05:d7:c1:81:cb:6e:71:6f:67:7e:79:f1:b4:eb:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Validity
Not Before: Oct 7 11:00:43 2026 GMT
Not After : Oct 8 11:00:43 2026 GMT
Subject: CN=48e15a1868bca73208cffa13d9042bcd6e954f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:95:9d:cf:ed:39:9d:fe:84:ef:06:70:54:c4:
ce:d7:02:d4:51:c5:7f:c9:69:dc:f0:dd:e6:0b:36:
7b:2d:bf:74:a6:88:1d:c8:44:59:d9:6a:24:7e:4f:
75:ca:c3:e3:1b:fb:8f:f1:15:45:0d:46:b6:41:b8:
23:db:51:19:cd:e9:09:7a:79:67:d7:b7:37:41:8f:
67:2f:42:c3:0b:0e:a1:a8:91:83:5f:e9:09:ee:77:
ac:a7:5b:a2:2a:2c:e0:c1:26:70:6c:16:08:53:a9:
6d:d4:a2:c1:d7:81:2f:63:06:41:e2:40:1b:a3:13:
15:17:ca:a5:72:c8:69:53:e5:2b:02:d4:42:c6:e1:
5f:5f:5c:43:b7:37:6e:f9:89:f6:1e:ac:5d:48:20:
58:56:b8:75:c4:d6:03:20:ab:1a:17:57:d2:41:20:
1b:91:56:df:a0:c1:67:87:a3:86:94:1d:3b:bc:1b:
ec:52:fa:e6:6e:7c:d4:db:b5:ad:b6:40:06:6f:66:
06:37:58:35:51:4d:00:f6:51:5b:c0:c2:b0:f9:15:
1d:c3:4b:12:41:1f:60:fb:42:1d:c4:54:e9:b5:40:
a1:4f:80:60:85:8b:89:fc:36:6e:80:3a:5f:da:4b:
29:1b:2a:cd:50:59:45:d2:9e:3a:ca:ea:91:16:48:
0f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E1:5A:18:68:BC:A7:32:08:CF:FA:13:D9:04:2B:CD:6E:95:4F:69
X509v3 Authority Key Identifier:
keyid:43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:30:d1:76:1a:04:cc:36:46:1b:33:2e:f6:3d:be:36:a1:d4:
06:b1:07:f6:a1:dc:f9:fc:e4:d7:c7:a0:48:45:74:7b:57:73:
2a:65:b0:35:75:7b:68:17:94:74:c4:6a:13:0a:ee:48:ec:f3:
06:62:3d:24:52:7f:85:08:50:47:f3:f2:26:65:c4:1f:ea:29:
13:d6:22:f2:ad:c1:d3:a2:0b:1a:27:75:71:02:1c:97:3e:fe:
f0:0f:28:b9:1b:58:5f:18:0a:8c:4e:d6:ef:a1:58:d7:8f:5a:
b2:38:8c:0c:21:8b:91:ba:96:76:0d:b2:b6:22:d0:b0:43:98:
99:e0:1b:91:08:a2:1c:42:12:a7:3b:4a:08:c4:ab:91:6a:51:
91:91:af:eb:c2:bb:21:81:95:1a:ff:d3:4e:42:bb:27:3d:59:
4c:23:bb:24:c0:ac:6d:fd:0f:82:b8:5e:cc:22:69:d0:72:7f:
45:bd:ce:90:b4:33:32:35:9c:a6:2e:1f:a2:13:4d:b2:70:6e:
53:04:8b:5d:ad:04:70:6a:51:f8:3e:87:9c:23:66:64:0a:05:
50:6a:72:5e:ad:5f:d7:f1:f3:93:99:f2:ac:71:51:ca:ed:f1:
a2:96:17:3b:29:8d:07:31:e0:5f:1f:45:15:f2:51:a1:81:2e:
07:da:fc:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEWBdfBgctucW9nfnnxtOt4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNDk2NTg0ZTVjZjM5YjU2ODc0ZGU4ZGM3N2FhM2E2ZmY5
ZThhMWUwHhcNMjYxMDA3MTEwMDQzWhcNMjYxMDA4MTEwMDQzWjAzMTEwLwYDVQQD
Eyg0OGUxNWExODY4YmNhNzMyMDhjZmZhMTNkOTA0MmJjZDZlOTU0ZjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupWdz+05nf6E7wZwVMTO1wLUUcV/
yWnc8N3mCzZ7Lb90pogdyERZ2Wokfk91ysPjG/uP8RVFDUa2Qbgj21EZzekJenln
17c3QY9nL0LDCw6hqJGDX+kJ7nesp1uiKizgwSZwbBYIU6lt1KLB14EvYwZB4kAb
oxMVF8qlcshpU+UrAtRCxuFfX1xDtzdu+Yn2HqxdSCBYVrh1xNYDIKsaF1fSQSAb
kVbfoMFnh6OGlB07vBvsUvrmbnzU27WttkAGb2YGN1g1UU0A9lFbwMKw+RUdw0sS
QR9g+0IdxFTptUChT4BghYuJ/DZugDpf2kspGyrNUFlF0p46yuqRFkgPfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEjhWhhovKcyCM/6E9kEK81ulU9pMB8GA1UdIwQY
MBaAFENJZYTlzzm1aHTejcd6o6b/nooeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTBsbGhPWFBPYlZvZE42TngzcWpwdi1laWg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mYmMzYTktMDU2NC00YTJjLWFiMTEt
ZTJjOTIyOGFhYzUzLzEvUTBsbGhPWFBPYlZvZE42TngzcWpwdi1laWg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9mYmMzYTktMDU2NC00YTJjLWFiMTEtZTJjOTIyOGFhYzUz
LzEvUTBsbGhPWFBPYlZvZE42TngzcWpwdi1laWg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADjDRdhoE
zDZGGzMu9j2+NqHUBrEH9qHc+fzk18egSEV0e1dzKmWwNXV7aBeUdMRqEwruSOzz
BmI9JFJ/hQhQR/PyJmXEH+opE9Yi8q3B06ILGid1cQIclz7+8A8ouRtYXxgKjE7W
76FY149asjiMDCGLkbqWdg2ytiLQsEOYmeAbkQiiHEISpztKCMSrkWpRkZGv68K7
IYGVGv/TTkK7Jz1ZTCO7JMCsbf0PgrhezCJp0HJ/Rb3OkLQzMjWcpi4fohNNsnBu
UwSLXa0EcGpR+D6HnCNmZAoFUGpyXq1f1/Hzk5nyrHFRyu3xopYXOymNBzHgXx9F
FfJRoYEuB9r8BQ==
-----END CERTIFICATE-----
Generated at Wed Oct 7 19:03:28 2026 by rpki-client