Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
File: qx0OfoGLr5p6-5hmEkKSphqvuMo.mft (raw, json)
Hash identifier: KCCpL2J8wA4NBx0/dATuMb0tB4lH9P999dqWPYV9nXs=
Subject key identifier: BE:21:F0:70:C1:21:E7:AA:B0:ED:D8:C4:F1:5F:64:83:21:BD:78:B9
Authority key identifier: AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
Certificate issuer: /CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Certificate serial: 01A17BBADDB55FBD496C67AE051538294864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
Manifest number: 1ACD
Signing time: Tue 27 Oct 2026 05:00:06 +0000
Manifest this update: Tue 27 Oct 2026 05:00:06 +0000
Manifest next update: Wed 28 Oct 2026 05:00:06 +0000
Files and hashes: 1: E_pvlXfH-_8Fl9xtt4-r8I-I2Wk.roa (hash: CAT6hhcy6gNQOJHA0DTluxIpTJS1s6DqnJJcDnZ2tTQ=)
2: HrIDUx_18W3aDcgzp0a-tZsGpP8.roa (hash: cPyVftTbNGSIIN5cX0+FBbwXCXBqNj2p4PsBxHd4Gn0=)
3: qx0OfoGLr5p6-5hmEkKSphqvuMo.crl (hash: jGXWrf6iSAUgQhIdE4bYboO85aM3j29c9H7MCWSO1a0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 03:05:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:ba:dd:b5:5f:bd:49:6c:67:ae:05:15:38:29:48:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Validity
Not Before: Oct 27 05:00:06 2026 GMT
Not After : Oct 28 05:00:06 2026 GMT
Subject: CN=be21f070c121e7aab0edd8c4f15f648321bd78b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2f:96:c9:cd:f6:0f:2f:d6:06:cb:56:32:8f:
de:a5:12:1f:b8:01:01:13:64:89:46:ca:e1:8c:9f:
69:64:ba:17:9c:f8:b5:d3:51:02:39:35:b4:e9:58:
fe:3a:16:6f:01:13:4c:02:84:44:7a:42:9f:ef:0d:
40:52:6f:52:8c:df:60:ea:15:25:e8:1c:ac:9f:9f:
98:e1:f5:e5:64:7d:a0:f4:64:39:fc:6f:19:bb:4c:
62:31:f5:64:29:ee:89:88:2a:b4:95:5a:ae:dc:c1:
9c:d5:71:05:5c:89:57:f4:18:41:4a:bc:13:63:a3:
64:50:2d:c2:7c:4a:e9:96:3f:8b:da:46:aa:53:33:
20:42:38:70:6d:03:d3:72:3e:cf:ad:f4:43:6a:55:
50:0e:73:e3:ab:45:94:21:c6:1e:fa:a1:bc:a7:72:
30:e0:b7:f4:66:75:92:25:1e:83:43:83:f6:42:9f:
d5:ac:39:9e:c4:8e:8d:40:5e:87:6f:da:cf:f1:a2:
98:4d:74:aa:ac:2b:82:20:7e:ac:f6:a7:c7:7e:28:
6b:f9:ca:23:12:43:57:03:06:42:8b:2a:43:2b:a9:
90:b2:9c:20:3d:4f:13:8f:7d:c5:e7:d6:11:a1:18:
51:de:e5:fc:20:8f:aa:4e:f2:14:6c:77:fa:b8:5f:
f8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:21:F0:70:C1:21:E7:AA:B0:ED:D8:C4:F1:5F:64:83:21:BD:78:B9
X509v3 Authority Key Identifier:
keyid:AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:00:74:41:8a:63:69:9b:1c:18:ea:c0:c8:49:3d:94:ad:83:
8e:c4:a6:a5:f5:8f:73:cd:7b:6f:5d:25:3e:19:5e:21:c1:03:
12:f4:85:86:c5:69:0a:66:1d:69:32:f1:f9:20:f6:f8:47:91:
3a:b9:18:4d:4c:f4:f3:77:ef:78:71:83:cd:5f:d4:36:b4:07:
66:4f:c0:e7:a8:ac:17:f3:43:10:38:f3:9f:67:c4:6d:ab:a1:
99:65:13:5e:61:49:47:cf:13:2c:4e:ed:0a:3c:62:bb:83:41:
ab:19:76:c5:94:a7:e8:7d:12:d3:8a:29:e4:b0:1e:7b:62:31:
df:43:e6:95:90:1c:5e:fb:97:76:f1:f2:44:0a:8d:6c:ee:a8:
c4:12:1b:75:bb:64:a1:5c:8e:6e:07:03:26:45:b6:b6:db:9d:
25:06:97:ba:a1:10:be:d3:b3:43:f5:5d:46:f7:be:80:ab:38:
ce:41:61:e3:f7:e6:bc:1d:e3:a0:bc:f9:40:98:01:96:37:dc:
c4:56:16:b7:54:56:77:ab:45:dc:d4:62:31:59:4b:19:3a:25:
c4:d4:ba:8e:96:ac:f2:b1:75:c6:35:13:7d:39:d1:af:07:cd:
0e:4d:b2:a6:82:50:97:78:68:0c:b6:bf:8b:9c:40:e8:ae:c8:
93:76:a2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:52:54 2026 by rpki-client