Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
File: _-Q3vK2brPo7drfdBFQTP7TYyz4.mft (raw, json)
Hash identifier: vH4KR/xc8UieJ9jmNACS1fJ8rAir6gs+cKxpJzh/ZzM=
Subject key identifier: 62:86:DB:95:58:3E:64:70:F6:BB:CD:9E:B7:7B:1F:F9:D8:76:CA:4D
Authority key identifier: FF:E4:37:BC:AD:9B:AC:FA:3B:76:B7:DD:04:54:13:3F:B4:D8:CB:3E
Certificate issuer: /CN=ffe437bcad9bacfa3b76b7dd0454133fb4d8cb3e
Certificate serial: 01A191D56A9882219237CB12B327B0A5ED47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
Manifest number: 04C9
Signing time: Sat 31 Oct 2026 12:00:45 +0000
Manifest this update: Sat 31 Oct 2026 12:00:45 +0000
Manifest next update: Sun 01 Nov 2026 12:00:45 +0000
Files and hashes: 1: _-Q3vK2brPo7drfdBFQTP7TYyz4.crl (hash: g5T+WTL+gC3ITd1DCcVQ5XOvTc3OexuQ4y51m9F8yIs=)
2: k9k26h_wk2KwXBbexASmBckIdio.roa (hash: IkgLudWAy48LS7n3a0wG6CHVGFDidThlfHrJKCCT1wM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:91:d5:6a:98:82:21:92:37:cb:12:b3:27:b0:a5:ed:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe437bcad9bacfa3b76b7dd0454133fb4d8cb3e
Validity
Not Before: Oct 31 12:00:45 2026 GMT
Not After : Nov 1 12:00:45 2026 GMT
Subject: CN=6286db95583e6470f6bbcd9eb77b1ff9d876ca4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3f:30:52:1b:f6:76:5d:5e:d0:21:bd:9e:27:
6b:9c:30:0b:3d:60:56:ed:ae:4e:8d:99:1f:74:57:
9b:72:46:13:2e:d7:77:dd:fd:71:0d:1c:1c:65:40:
fe:26:2c:f7:38:ce:f2:91:20:fa:7e:f6:e2:8d:72:
17:6b:52:80:8d:07:ee:47:e4:65:d9:cb:61:bd:97:
a7:92:75:05:7b:25:8e:83:fe:87:0b:5c:82:7a:7b:
2e:b5:70:64:95:88:1f:02:88:a6:06:08:c9:2e:dd:
99:9b:93:3f:f7:14:14:db:b6:46:2d:09:35:f2:d0:
af:36:7c:39:44:f6:df:2c:c4:10:14:e9:53:86:d6:
83:b4:d1:d3:aa:ac:3d:48:52:20:16:6b:bc:9b:fa:
62:03:ed:1c:3b:d8:a0:5d:02:19:a2:b1:58:ba:5e:
37:74:4b:15:e5:b2:f3:8f:2a:b9:aa:9f:5c:4b:49:
52:25:4f:11:56:8a:af:22:44:8f:4d:07:7c:b3:27:
de:79:85:54:49:fe:28:26:0a:93:19:cf:27:79:d2:
55:e6:82:ff:da:73:37:fd:12:74:f7:84:0b:1c:b0:
21:db:7f:cd:09:ea:ec:c8:44:b1:56:4f:35:c6:7a:
dd:02:2f:ef:81:d8:4a:a0:81:ff:77:e9:32:d3:9e:
d0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:86:DB:95:58:3E:64:70:F6:BB:CD:9E:B7:7B:1F:F9:D8:76:CA:4D
X509v3 Authority Key Identifier:
keyid:FF:E4:37:BC:AD:9B:AC:FA:3B:76:B7:DD:04:54:13:3F:B4:D8:CB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:fa:de:06:07:fc:9c:1d:4e:bf:6e:2d:25:86:b5:b4:71:f9:
b7:c5:b2:05:5c:76:61:ed:ef:40:d3:7b:66:ae:85:57:a0:77:
b9:bd:d1:19:7a:8c:95:bf:7a:94:38:b0:be:cc:e3:f9:55:64:
83:70:a8:b5:cd:0c:4a:bd:9a:12:e6:bb:09:d1:a3:a9:11:fb:
e9:6b:31:21:1f:e1:52:ec:1f:c5:b7:03:48:36:5a:19:f9:f3:
40:22:44:96:b6:5a:0a:8a:36:74:44:98:43:d8:1e:bf:85:ce:
8e:25:78:6a:4a:cd:ce:fc:82:23:bc:00:cb:5c:5a:06:89:f7:
7a:17:3e:27:11:c9:31:a0:f0:bb:0b:e5:8c:e0:7b:be:70:31:
63:16:78:fe:13:eb:e9:16:48:bb:f6:71:e1:ce:a2:f1:84:72:
c5:37:e6:26:d9:44:61:90:8e:4c:09:0c:80:bf:cf:8b:d5:fa:
77:5e:81:7f:5e:25:d8:c8:ca:56:08:4e:3d:08:2e:e1:ec:f4:
83:7e:bd:3e:39:78:e6:03:b7:24:0e:24:c5:94:9a:72:6a:70:
4d:8a:87:ab:78:3c:1e:c2:1c:b2:f5:49:42:f7:55:67:98:b3:
76:ba:2f:c2:ef:d5:bf:7f:a3:a1:df:29:a0:4a:f1:65:be:03:
f3:01:47:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:49:04 2026 by rpki-client