Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/rqN-KBjEt6Ahp3POZ9yuHSgg3u0.mft
File: rqN-KBjEt6Ahp3POZ9yuHSgg3u0.mft (raw, json)
Hash identifier: LLpbjYFjxOV3JmIjiJUVfRmTfreIuBnLVuOehM+hjkw=
Subject key identifier: AA:45:AB:4B:6C:48:5E:C8:F8:17:00:DD:C0:5A:63:FF:8D:DE:24:44
Authority key identifier: AE:A3:7E:28:18:C4:B7:A0:21:A7:73:CE:67:DC:AE:1D:28:20:DE:ED
Certificate issuer: /CN=aea37e2818c4b7a021a773ce67dcae1d2820deed
Certificate serial: 01A17FCF60EEF9D88427D765128A79BE1180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqN-KBjEt6Ahp3POZ9yuHSgg3u0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/rqN-KBjEt6Ahp3POZ9yuHSgg3u0.mft
Manifest number: 0140
Signing time: Wed 28 Oct 2026 00:00:59 +0000
Manifest this update: Wed 28 Oct 2026 00:00:59 +0000
Manifest next update: Thu 29 Oct 2026 00:00:59 +0000
Files and hashes: 1: 5SWtCRFt6WsOjb-tdJ3j5NUNj0s.roa (hash: 8jRo/6ysSzkjLks/pza54/NHIMmLzqF2Z1dcDNEC0e4=)
2: rqN-KBjEt6Ahp3POZ9yuHSgg3u0.crl (hash: qvWkUJYyi9a90PwD7jItx48ngbRLLT6KHLrHZzjzhSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/rqN-KBjEt6Ahp3POZ9yuHSgg3u0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/rqN-KBjEt6Ahp3POZ9yuHSgg3u0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqN-KBjEt6Ahp3POZ9yuHSgg3u0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:cf:60:ee:f9:d8:84:27:d7:65:12:8a:79:be:11:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aea37e2818c4b7a021a773ce67dcae1d2820deed
Validity
Not Before: Oct 28 00:00:59 2026 GMT
Not After : Oct 29 00:00:59 2026 GMT
Subject: CN=aa45ab4b6c485ec8f81700ddc05a63ff8dde2444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f7:e6:38:0c:4f:bc:92:32:00:3c:70:bb:18:
ec:74:ca:be:5d:64:7d:27:02:2f:41:4c:7e:95:3f:
b2:71:05:9d:49:49:26:af:f5:c3:c9:3a:6d:9b:ea:
b9:53:78:d8:5b:39:d3:02:01:fa:74:da:ad:aa:17:
3d:82:7b:14:8f:99:7f:79:c1:c4:9c:4f:ca:c3:7a:
17:ca:02:b1:13:31:eb:c8:96:45:15:24:ee:ea:88:
87:0f:b9:e1:af:7e:20:f3:aa:34:7e:5e:66:96:31:
2a:e5:76:82:66:b5:62:71:d4:40:97:2a:06:09:c9:
8e:21:6a:08:a5:9a:a4:a6:2a:8c:e8:11:82:59:cf:
4a:2d:d2:b6:dc:3e:e4:a5:f2:d0:04:2b:f2:ea:00:
cb:b6:22:41:8a:14:90:56:bc:38:29:2d:40:a6:4e:
c2:ae:09:e2:17:cd:c0:ab:7a:9d:d4:c8:82:95:ef:
ab:ed:69:7b:8a:ef:19:e3:a7:b8:1c:ae:f6:d8:5b:
ed:69:36:2f:a9:bb:6b:42:7a:75:e5:39:f5:af:91:
c6:d1:10:83:37:55:51:0c:d2:a0:22:c2:5d:df:56:
0b:0b:8d:b4:7d:a0:7f:e1:0e:c9:ba:0d:d5:8b:5d:
85:8d:d4:00:da:a0:43:f9:6b:9d:9b:a2:18:4f:2d:
a6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:45:AB:4B:6C:48:5E:C8:F8:17:00:DD:C0:5A:63:FF:8D:DE:24:44
X509v3 Authority Key Identifier:
keyid:AE:A3:7E:28:18:C4:B7:A0:21:A7:73:CE:67:DC:AE:1D:28:20:DE:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqN-KBjEt6Ahp3POZ9yuHSgg3u0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/rqN-KBjEt6Ahp3POZ9yuHSgg3u0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/rqN-KBjEt6Ahp3POZ9yuHSgg3u0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:25:c5:64:37:17:b5:22:12:f6:94:d9:45:29:c8:a4:97:6d:
a2:09:29:91:08:70:37:3a:bc:8d:de:fb:5c:f5:2b:41:a3:18:
87:60:e5:1a:63:92:f7:56:31:a6:96:58:8a:a1:4f:9b:d1:3d:
05:5d:f1:94:31:e0:3c:57:8a:f2:a8:76:3e:32:e7:95:bf:9d:
e7:f9:ac:69:51:1a:06:72:e2:c0:3c:95:20:03:ce:b9:e5:0a:
20:4d:bd:32:ae:70:ff:70:95:e0:26:45:af:24:bd:6d:05:76:
5e:32:30:0d:ce:09:df:a9:4e:78:a3:42:72:27:9c:0f:90:c9:
76:7c:c7:15:e7:b0:bc:9e:4b:23:5a:6e:2c:34:71:3c:83:76:
58:58:1b:55:8c:58:95:cf:a1:e6:f5:82:69:b0:7a:34:62:f2:
46:00:a6:1c:84:ce:d6:09:7a:a8:a4:64:08:43:c9:37:d0:06:
a3:68:90:fc:c7:5b:67:0c:2f:23:cb:29:35:21:67:15:ce:68:
24:b7:86:c0:4a:95:c8:a1:2d:0b:dc:8e:ed:9c:27:5a:69:af:
c2:cd:be:3f:70:a0:07:ca:35:0c:01:44:e1:3e:1f:67:e1:7c:
10:82:3b:61:e9:19:91:2f:03:bc:55:4d:b6:7c:e7:9c:8b:e6:
65:c2:4a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:23:33 2026 by rpki-client