Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
File: bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft (raw, json)
Hash identifier: qbdVYJq0hegHmPczsuTyHUFTl4WGZWojAz2Ju7mKcOg=
Subject key identifier: E9:8B:0C:A5:37:0A:52:3E:CC:17:88:4F:A0:56:53:42:97:33:62:8E
Authority key identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
Certificate issuer: /CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Certificate serial: 01A1754B81D8D2D9D9A5E02739C506EB2CDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
Manifest number: 1ADA
Signing time: Sun 25 Oct 2026 23:00:44 +0000
Manifest this update: Sun 25 Oct 2026 23:00:44 +0000
Manifest next update: Mon 26 Oct 2026 23:00:44 +0000
Files and hashes: 1: Qlnk-TU3emncuI4U9LFebnP07e0.roa (hash: HdDucwYSpeHdchyohiZw3Ulfi4Ms+K1/9jYumPe+XtY=)
2: R-Ms9tnwVFr5zGPdMpveWYmvzTU.roa (hash: 4hVn6BmRDmF60zXMMdHkc2jChJsAngJEvYhtXGC9Vjo=)
3: ZK9ALarqOpzm0i2rpLZ-rHOMzdo.roa (hash: RllCIZ6AldL0IOvShUd1+ZNf+viS99vPh52YLrvbtJU=)
4: ZmcfgQVw9WznPpWT9yLghomma18.roa (hash: dwEz5IwUCOta4WNqfA1M1PPK2wh9BaQxA/M28+Mkwpk=)
5: bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl (hash: YqrhLJRHlqnDfIsXsYGpbEuA+V7jdOCVoI8WPb8JoFw=)
6: ks2_IkZaAakd1-3jQOWLy85dDy8.roa (hash: mLEy/InkNukmfeS2zm1mvXpvR+u6dmdc0Mw1w4KWFN4=)
7: ocrWH4LXI5AcanxmF84LShRjSnA.roa (hash: IvINQVuazfHHpSQNQUlXHe0rPDP3TKBhqPqw+YoqC5E=)
8: vcHdvq4j0MZDMpwY_Sh1_lhpemE.roa (hash: TJZuXEOOt0r/V9EaRl+qnNfFa6UZgYtOnc2ci1AuANA=)
9: yO-faN1p6CDhjtBsMnJFSamd0b4.roa (hash: f5cjUT10BBqhpOr6X0AO88BjDl80sXjlHTe7MTa/7YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:4b:81:d8:d2:d9:d9:a5:e0:27:39:c5:06:eb:2c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Validity
Not Before: Oct 25 23:00:44 2026 GMT
Not After : Oct 26 23:00:44 2026 GMT
Subject: CN=e98b0ca5370a523ecc17884fa05653429733628e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:54:03:13:e6:5b:97:f9:38:4b:4a:8c:7b:26:
b5:d9:91:51:b7:74:49:66:36:bb:3a:40:0f:e7:e0:
ec:35:50:7e:04:ad:64:85:9d:3c:b1:3c:f0:84:1a:
b7:d9:6a:01:14:10:3f:85:3c:b2:8e:8d:05:ca:94:
53:85:72:20:a7:35:0a:f1:2b:98:04:29:c4:0e:7b:
ea:05:99:0f:c8:7d:85:13:f5:34:c8:78:5a:0a:3e:
b8:42:8e:91:eb:4a:c1:4e:80:14:f1:80:4a:6a:f3:
b8:84:f2:42:61:4f:af:eb:f1:fb:93:16:38:17:68:
f8:12:7b:05:50:a6:f3:d3:fd:b5:73:97:eb:e8:86:
85:5a:45:5a:90:1b:40:58:b7:b3:7a:84:58:f7:27:
45:24:48:ea:d8:5b:c8:b0:48:f3:ee:87:23:24:59:
c8:db:8a:6e:8a:88:4a:ef:92:64:f2:1b:73:b4:7e:
09:0a:be:b0:1f:99:d4:5e:61:26:85:03:17:f4:09:
af:e4:5a:ce:05:b0:b4:d9:b8:12:04:0d:4a:75:93:
e0:db:1b:6e:f2:70:30:c7:d3:05:50:1f:5e:27:79:
be:28:d3:63:93:66:ed:e2:5e:78:5b:ef:0a:00:7d:
b5:d7:9a:ad:19:53:c0:59:be:b9:d3:9f:83:37:23:
5d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8B:0C:A5:37:0A:52:3E:CC:17:88:4F:A0:56:53:42:97:33:62:8E
X509v3 Authority Key Identifier:
keyid:6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:37:1c:2f:6a:82:fc:3a:66:45:56:ef:de:01:2a:96:5a:cb:
bc:e0:20:d8:31:75:46:d9:79:1a:82:ce:6b:68:58:53:f2:83:
aa:81:f2:ba:e5:5a:89:86:3e:ac:6d:98:09:31:83:70:0c:ec:
7b:72:db:f6:f1:58:2a:94:5f:d4:3b:8d:a0:94:e0:46:f2:8b:
f2:39:72:9e:d2:a2:e5:f6:53:1f:5a:07:2c:a7:55:a0:b2:b3:
8e:72:17:91:5b:c0:72:62:d2:a1:8e:b6:87:05:9a:8f:c3:e2:
2e:d6:24:b4:44:a8:28:da:8e:4b:ac:7d:75:fc:6e:d1:4b:fc:
e0:79:57:96:5b:42:08:aa:cc:b6:df:68:f0:6a:7b:fe:d8:bb:
58:ba:7d:e5:ad:92:35:ff:2d:81:96:5c:a5:9d:0f:60:64:b4:
57:c6:dd:86:f8:dc:be:16:6a:17:cf:9a:fc:ca:8d:b1:37:63:
ca:b1:70:47:5a:ab:b8:cf:29:1a:18:d8:52:47:65:99:0f:5d:
11:31:b0:b3:97:4f:04:1c:0e:6e:93:b2:ab:96:62:99:af:c2:
66:b3:c8:d3:2f:ab:69:8b:01:0e:dc:ae:bf:07:75:fd:10:8e:
af:4a:ea:64:73:a2:50:1b:59:36:d2:90:d1:fe:d0:59:2e:98:
96:68:bd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:53:55 2026 by rpki-client