Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft
File: q3kW82CYNO1AFNqMaVs0CnsKWA4.mft (raw, json)
Hash identifier: UIg67kHLnFipUC/oLxtcudEpVn0Eh4AQhbdGOwMo9V4=
Subject key identifier: D4:94:4D:F2:58:D1:12:CE:6D:7A:55:18:C7:63:FB:33:80:95:AC:50
Authority key identifier: AB:79:16:F3:60:98:34:ED:40:14:DA:8C:69:5B:34:0A:7B:0A:58:0E
Certificate issuer: /CN=ab7916f3609834ed4014da8c695b340a7b0a580e
Certificate serial: 01A131B4ABE975AEBC1A49AF86A5B125C9A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3kW82CYNO1AFNqMaVs0CnsKWA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft
Manifest number: 044A
Signing time: Mon 12 Oct 2026 20:01:26 +0000
Manifest this update: Mon 12 Oct 2026 20:01:26 +0000
Manifest next update: Tue 13 Oct 2026 20:01:26 +0000
Files and hashes: 1: LTVOJrN7tMu87dFspIcmBlzwME4.asa (hash: tHJyxmUmJCWBdZOh74CFjQH4LfeAyi34h5vxnLm7Pjk=)
2: SZY6wsq_78e2nLvWAkeHk1piMW4.roa (hash: crCAmARzqXmw7E9/kb/thI4py7GtbXwH0Xp22Jp2Zrs=)
3: q3kW82CYNO1AFNqMaVs0CnsKWA4.crl (hash: o0qhsdPskw/OdC5GyYaG1IhlsW+IR6x2dNhUKotn6R0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3kW82CYNO1AFNqMaVs0CnsKWA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 20:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:b4:ab:e9:75:ae:bc:1a:49:af:86:a5:b1:25:c9:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7916f3609834ed4014da8c695b340a7b0a580e
Validity
Not Before: Oct 12 20:01:26 2026 GMT
Not After : Oct 13 20:01:26 2026 GMT
Subject: CN=d4944df258d112ce6d7a5518c763fb338095ac50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e3:86:39:69:ec:0b:69:a0:0d:f2:74:50:cc:
79:11:2f:76:a8:41:1d:31:d8:91:d6:a8:fb:7f:36:
db:c5:fe:a6:2a:a3:b0:23:40:66:86:46:bc:47:5d:
13:79:9c:62:38:20:12:73:2a:ac:6c:27:08:cb:fd:
5a:a3:12:0b:5b:36:68:a5:79:84:03:7d:1d:e9:33:
23:95:1e:16:0c:80:95:47:da:ab:b9:e2:f5:8f:68:
e0:cf:71:be:2d:8c:bf:56:a9:08:30:98:d6:50:09:
07:48:83:ec:4a:b4:53:61:e0:40:e2:c0:7e:54:ae:
a8:1e:1d:76:11:eb:42:7a:dd:7c:96:9e:5a:22:a7:
fd:a5:d2:a3:de:93:4c:30:f0:bb:bc:cb:e2:17:ec:
46:1f:7f:d7:fd:21:00:94:7d:98:4f:1a:cb:db:17:
eb:38:46:bf:92:da:a6:08:2b:09:31:bb:b8:dd:3f:
b7:13:35:3a:c6:fa:d8:b5:1b:c7:94:76:8c:e9:7d:
9f:44:9c:09:ce:11:1a:19:fc:14:ac:1e:64:c8:87:
f9:e7:fa:d9:d0:0f:bb:8c:b5:e6:96:07:b0:11:9e:
55:91:52:ff:3f:29:b3:03:c4:ed:73:32:cd:2d:10:
05:48:16:c6:aa:b1:f6:52:c2:23:e6:df:39:7b:e1:
f6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:94:4D:F2:58:D1:12:CE:6D:7A:55:18:C7:63:FB:33:80:95:AC:50
X509v3 Authority Key Identifier:
keyid:AB:79:16:F3:60:98:34:ED:40:14:DA:8C:69:5B:34:0A:7B:0A:58:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3kW82CYNO1AFNqMaVs0CnsKWA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:cb:b8:31:cf:99:25:a2:69:53:fd:62:d7:f6:40:6a:ed:b0:
cc:71:75:1a:4b:d7:20:00:b6:6a:57:85:18:70:55:03:89:5b:
6b:37:e5:87:2b:91:a1:76:44:0d:0f:81:d6:26:ca:af:4f:8d:
eb:4e:f3:5d:cb:47:17:64:d2:9e:26:e1:7a:57:04:68:87:0e:
af:ff:62:a1:f6:f4:40:3e:a2:28:93:2a:32:40:0e:e6:7f:d9:
cc:3d:26:50:44:6f:c2:17:6d:cc:88:1e:36:78:94:49:8f:40:
63:f8:97:48:ff:0c:06:c1:f7:1b:8b:b0:b7:98:89:86:b0:33:
d5:91:dc:c6:ca:ef:61:c7:f6:8d:9b:50:94:21:24:06:7e:93:
6a:24:21:c0:a4:76:1a:96:6d:21:af:e2:20:88:dc:f7:d4:3b:
1c:ee:4a:06:93:e9:86:5c:48:d4:a2:17:dd:2b:41:8f:ef:23:
1b:e8:1d:e2:3c:4a:3f:d5:ec:66:ca:c9:ad:15:d0:65:a7:8f:
86:4a:a9:68:f0:82:90:90:33:52:79:62:56:c1:59:01:9f:ab:
34:11:f3:27:35:ca:69:e2:93:52:73:b8:20:c5:67:e7:d4:65:
6c:0f:d3:55:79:aa:11:47:c6:f1:09:50:6d:c0:3b:d5:5a:e0:
e9:79:d0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:12:41 2026 by rpki-client