Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
File: rqAyAc2mqK295P6ARuxl-WrGqWw.mft (raw, json)
Hash identifier: eIttsPDiBYediu44RJd5J6rUUtutLMu3J/FwO5gGLSw=
Subject key identifier: 2F:43:35:B7:ED:B3:D1:FF:73:AA:BA:8F:76:FB:E7:93:A0:1C:EC:EA
Authority key identifier: AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C
Certificate issuer: /CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c
Certificate serial: 01A1A59301DCDB0A4BCFA3520D112765D965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
Manifest number: 0631
Signing time: Wed 04 Nov 2026 08:00:37 +0000
Manifest this update: Wed 04 Nov 2026 08:00:37 +0000
Manifest next update: Thu 05 Nov 2026 08:00:37 +0000
Files and hashes: 1: A_z7T-9m7d_9cFuD6RzeeqQuAAo.roa (hash: CndX469kMgFnIGnFVgAv1uwBMzZ+jqdPFxwbzTu/wnQ=)
2: Trft0mfWMMwOx--8rqClEKwipxA.roa (hash: 3nok9je6KT8Wv4gKkH7HIrIIK5LI+Nl8LWES2R/jXQc=)
3: rqAyAc2mqK295P6ARuxl-WrGqWw.crl (hash: YLhEmrs5v4GKJttCTWk3mUgFTUVhunPRpchMHUwNx7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 01:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a5:93:01:dc:db:0a:4b:cf:a3:52:0d:11:27:65:d9:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c
Validity
Not Before: Nov 4 08:00:37 2026 GMT
Not After : Nov 5 08:00:37 2026 GMT
Subject: CN=2f4335b7edb3d1ff73aaba8f76fbe793a01cecea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ef:67:05:8d:e8:2d:7c:06:2a:8e:33:5d:84:
16:d4:40:8f:5d:62:8e:33:6a:72:01:1f:e7:25:92:
23:9f:2e:6e:29:40:8c:df:6a:99:9a:47:93:7e:c2:
bd:cd:59:c5:8a:f8:ff:49:e9:e9:39:49:d8:c2:6b:
63:e0:ce:b8:01:fe:66:f5:04:ca:68:1d:32:96:45:
94:c1:9b:e9:a3:1c:d5:0f:67:5c:6a:f0:38:ec:c5:
2f:98:a5:4d:c1:07:11:6f:52:b2:04:19:32:67:91:
d9:74:79:f1:e1:a0:5d:8e:ac:1e:ed:fe:ea:62:26:
ea:02:b3:b8:62:af:a0:63:a1:88:bc:83:da:f7:24:
ec:32:e0:1a:d7:24:89:cb:9d:cb:13:6b:d7:85:06:
94:c5:02:07:fa:1d:03:20:e5:f9:f1:1f:38:2c:a3:
71:aa:46:5b:b2:ef:87:93:4f:89:21:d4:c0:b8:c4:
36:45:0d:9f:4d:00:c9:bc:07:13:b2:a1:99:ac:4a:
9f:c7:fb:82:d4:cc:59:43:86:c9:8b:4d:b3:8f:22:
8a:2a:84:7c:e5:e3:c3:65:bf:87:ea:27:a1:fc:5c:
2f:39:fb:bc:6e:e6:bf:b0:c3:ce:61:40:08:7d:4e:
07:57:98:83:c1:d4:e3:fc:d2:c9:fa:50:0d:40:1b:
43:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:43:35:B7:ED:B3:D1:FF:73:AA:BA:8F:76:FB:E7:93:A0:1C:EC:EA
X509v3 Authority Key Identifier:
keyid:AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:eb:52:b3:fd:e6:4e:2f:97:e5:53:d6:a2:43:75:f9:de:da:
d1:37:a5:11:a8:0c:85:0a:a6:0a:21:b8:d3:07:0a:71:5b:37:
99:01:77:97:11:43:3e:a1:65:55:7d:f5:e2:f0:4c:e6:b9:0f:
0f:61:94:17:b1:0b:0c:d4:8c:6d:a0:5a:db:cb:d3:89:f3:72:
87:2e:4e:b7:7d:6d:dd:73:cd:4b:5b:0c:ce:e6:4c:f5:ff:f4:
14:61:9f:7d:fa:ba:b7:31:d4:c4:a6:db:8d:fe:a3:0a:15:7e:
8c:0b:44:8f:9e:b3:b3:df:82:98:2c:52:4b:43:51:ac:7d:8c:
19:f1:a7:6a:76:c5:78:6c:4f:1a:7e:65:9a:d3:1e:df:2b:d0:
3d:96:7c:93:23:ae:91:63:fb:43:d0:09:a2:23:13:84:b0:6b:
b1:6a:3f:bd:81:b9:47:d8:c1:fc:28:40:99:8f:78:55:32:fd:
3a:17:b4:38:29:aa:f6:e0:28:12:23:11:a9:37:fe:8a:e1:1d:
89:d6:a3:53:aa:15:7f:c2:43:a2:7c:ca:ec:cc:71:cf:fd:ee:
11:26:dd:fd:39:00:6f:5a:8a:3f:fa:cd:13:19:d5:75:78:a6:
42:4d:cf:15:46:2a:28:ba:ac:f0:db:b4:15:6f:62:6a:64:61:
81:63:e8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 11:21:39 2026 by rpki-client