Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
File: qFfj-rEefTOV3RA9ap-V2SJV9ks.mft (raw, json)
Hash identifier: BJEHk436SRRk5BL9zta0VV3Qy8g3FdEZhNvy47Vfacw=
Subject key identifier: 10:7E:3F:1F:1B:9E:74:38:23:77:E2:D0:C4:16:29:2E:AB:8C:EF:22
Authority key identifier: A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B
Certificate issuer: /CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b
Certificate serial: 01A1382450A6EF0EAB5B180C6C8F27B81D66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
Manifest number: 051A
Signing time: Wed 14 Oct 2026 02:01:06 +0000
Manifest this update: Wed 14 Oct 2026 02:01:06 +0000
Manifest next update: Thu 15 Oct 2026 02:01:06 +0000
Files and hashes: 1: IDbm4BTVJkr2LGXzbqOrz6EVNx4.roa (hash: 6Be3sqYYXs7RhhAxfXcGlT5hWEPDQQflddEPFI3kouc=)
2: qFfj-rEefTOV3RA9ap-V2SJV9ks.crl (hash: Tl1kiOkxDHXeyD8OaPrKeLxSpBBIhLBgKW6iHQaIa7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:24:50:a6:ef:0e:ab:5b:18:0c:6c:8f:27:b8:1d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b
Validity
Not Before: Oct 14 02:01:06 2026 GMT
Not After : Oct 15 02:01:06 2026 GMT
Subject: CN=107e3f1f1b9e74382377e2d0c416292eab8cef22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b2:2f:18:4c:a5:ec:06:e0:f2:20:11:e2:d7:
4d:d1:e9:7a:e0:33:5e:a3:6a:7d:5a:94:a0:1e:06:
cc:31:47:f7:c5:c0:bb:56:21:3a:6d:98:e4:e3:d5:
06:d2:e7:6c:07:83:69:81:7c:fc:0e:85:d9:7f:f8:
37:da:e8:55:40:11:4b:1c:ae:49:d5:ba:0a:9b:c1:
13:4a:44:06:49:c6:2b:67:b4:b8:b4:f4:61:18:08:
55:24:48:46:87:95:63:7f:25:ff:2e:77:d2:3e:66:
6f:2a:21:18:0f:cd:7b:ff:a2:bd:95:62:f3:22:17:
b2:8f:e2:02:7c:81:dd:15:48:80:25:89:23:d8:c2:
aa:68:a5:09:62:be:4a:a8:6e:71:83:6d:f0:49:17:
e4:e8:08:cc:43:c1:d0:10:65:c7:00:5d:d6:b0:40:
21:45:57:45:75:5b:97:6b:8e:3a:86:31:ae:2a:1c:
c5:ae:90:f7:78:c0:ac:05:72:8a:3f:f1:bd:ec:e4:
4d:5e:83:38:68:05:5c:84:f7:2a:f0:c6:52:c6:d5:
7e:cb:51:54:03:d1:67:45:b0:2f:69:fd:a4:17:02:
56:9d:26:86:20:10:46:2d:b5:1f:e9:a3:e2:6a:c8:
fc:ba:8d:9d:50:50:68:d3:22:53:c4:f7:1f:e8:64:
8a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7E:3F:1F:1B:9E:74:38:23:77:E2:D0:C4:16:29:2E:AB:8C:EF:22
X509v3 Authority Key Identifier:
keyid:A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a6:31:ad:f3:df:97:e6:96:04:40:37:b8:58:bd:4d:81:7a:
27:fd:ae:c3:4a:92:c3:e2:de:c1:69:18:6b:cf:99:fa:47:95:
a8:70:27:5c:7f:33:63:2c:a7:ce:b8:93:cd:d6:9f:cc:30:d1:
3d:b0:e3:e6:74:2d:fa:fa:9e:c9:74:93:dc:83:eb:90:64:83:
bd:7e:52:9e:6a:1f:56:ec:31:2e:e2:5f:e8:30:97:ad:50:05:
6d:48:2e:86:49:a0:3b:fe:c7:09:c1:46:68:de:ea:bf:83:19:
ca:74:90:c7:02:09:36:a4:b8:fe:60:c5:5e:ec:70:53:b6:22:
39:ca:f2:b3:fb:dc:58:d3:aa:a6:46:c2:3e:af:16:0f:98:ac:
dc:e7:80:cd:49:45:e5:e4:4b:b5:19:a2:5a:69:89:b5:f9:9f:
cf:d8:bf:91:3e:4a:2a:72:28:1e:bc:66:d0:bf:42:fe:9d:98:
f7:9b:73:a8:f5:bd:e7:ce:e0:e1:4d:40:52:f5:6c:29:6f:7b:
48:3e:ed:58:45:93:91:56:6a:f1:46:a0:8a:7c:3a:2e:47:a8:
72:24:6d:55:96:87:22:05:d1:d0:ac:73:d3:a0:b6:89:69:6a:
7f:a0:c7:f5:80:19:9f:7d:d1:e7:a6:73:ba:ac:99:f4:da:f3:
db:8d:33:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 13:07:56 2026 by rpki-client