Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
File: tCQBfG4cj_1jly4CRJCYR33fF98.mft (raw, json)
Hash identifier: ITPDtGDfh47kjWm0L/8YzdB7b+4Ym+ZXylxKlviedmo=
Subject key identifier: 61:7F:D3:B2:96:26:F1:99:CD:45:C4:38:79:01:B7:E9:70:FD:15:2C
Authority key identifier: B4:24:01:7C:6E:1C:8F:FD:63:97:2E:02:44:90:98:47:7D:DF:17:DF
Certificate issuer: /CN=b424017c6e1c8ffd63972e02449098477ddf17df
Certificate serial: 01A1AA159D4689EE7277F143967A4A32DB8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
Manifest number: 02A7
Signing time: Thu 05 Nov 2026 05:01:45 +0000
Manifest this update: Thu 05 Nov 2026 05:01:45 +0000
Manifest next update: Fri 06 Nov 2026 05:01:45 +0000
Files and hashes: 1: Z9tAGQF9StCthIO0Pjcyl0N2xM4.roa (hash: 6AWanwgFbNvMqkMl3YCOopQDUI07IMGf93/6aV4ujtg=)
2: h2S5SOYfIdtYgW2lzny0MQ8S930.asa (hash: rCu8Reo7yVY7Fv0iiMibroZtuw9DHcD5SnkWO03YCtk=)
3: tCQBfG4cj_1jly4CRJCYR33fF98.crl (hash: ESsFgkJGH+cGhks64YZj8jbqHhsPjreT7NpJdMXs8nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 05:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:15:9d:46:89:ee:72:77:f1:43:96:7a:4a:32:db:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b424017c6e1c8ffd63972e02449098477ddf17df
Validity
Not Before: Nov 5 05:01:45 2026 GMT
Not After : Nov 6 05:01:45 2026 GMT
Subject: CN=617fd3b29626f199cd45c4387901b7e970fd152c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c2:7d:fa:fd:1b:bc:bd:aa:06:ae:65:9e:b2:
3c:59:24:e4:0d:e7:e3:01:bc:bb:be:ee:81:83:cc:
76:f1:57:e4:65:2e:a8:2b:7e:ac:df:10:1c:37:54:
fd:14:8e:15:c2:42:bc:17:6c:14:3d:18:a6:ef:b8:
ed:9d:f3:18:72:e8:79:67:5b:70:b8:1d:d3:87:7c:
0c:7c:00:f5:81:8c:80:d4:32:fb:a3:1a:cf:64:32:
78:e0:08:d1:75:26:6d:f9:9e:cf:73:36:84:ae:b8:
73:b4:9d:a5:73:01:97:16:6e:5e:72:1c:0f:55:31:
d1:49:f8:26:1f:a3:2d:6b:57:8d:87:5a:e7:2c:81:
7b:6b:8a:4d:25:59:0d:44:d6:1a:f2:f3:67:dc:a8:
e6:e5:19:1c:4c:86:8f:a0:5b:86:90:a9:96:3b:5a:
16:5a:aa:f2:41:7e:7b:9d:d1:d9:69:a0:2a:98:fc:
ee:95:b9:65:f6:97:f2:ad:c4:a9:7d:33:cf:10:44:
be:f6:30:ba:c4:07:95:01:8f:00:de:9e:6a:30:ba:
68:63:94:33:86:ad:b5:c1:c4:57:24:0f:6b:1f:36:
15:be:69:3d:8f:84:f3:4b:13:0c:e7:09:ba:a6:d1:
0d:f9:0e:fa:c9:58:fd:77:d6:c9:88:68:7b:53:71:
bf:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7F:D3:B2:96:26:F1:99:CD:45:C4:38:79:01:B7:E9:70:FD:15:2C
X509v3 Authority Key Identifier:
keyid:B4:24:01:7C:6E:1C:8F:FD:63:97:2E:02:44:90:98:47:7D:DF:17:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c1:aa:f6:23:15:ff:77:37:5a:57:e9:4b:e7:04:7a:9a:01:
a6:f1:32:ba:57:51:15:16:5e:4e:62:67:4c:c7:c8:20:66:3e:
b6:81:b2:9c:88:07:09:1d:39:b3:cb:17:2f:98:26:4b:9a:c7:
68:60:cf:b9:03:ec:f9:a3:01:e0:bd:49:81:cc:ce:0c:b5:47:
af:9f:54:50:c0:29:f4:5f:de:51:1f:45:88:30:a7:f1:d1:44:
84:b7:44:ec:74:c6:88:01:31:80:cc:e8:a1:03:a6:fb:ad:93:
3f:25:db:65:75:a2:a6:ba:4a:02:a7:4c:83:3e:09:73:41:36:
f3:51:c3:9b:02:b1:04:fa:c8:fa:5e:9a:85:bf:ed:61:d8:9e:
b9:76:c3:f0:19:d7:85:80:87:e5:08:37:8a:14:0e:11:d0:06:
88:9f:a4:fa:61:12:22:9e:c1:5c:0f:2d:e9:f6:7b:c4:01:bf:
4b:89:60:e2:1a:2f:7c:cf:fb:c8:e0:bb:e1:a3:31:fc:88:b6:
82:80:80:03:d9:0d:f8:25:58:05:72:ac:4e:4f:db:55:f6:6c:
aa:d9:2c:60:3c:cd:ee:28:ad:d1:cb:ec:4b:50:84:a6:81:c3:
87:49:d3:7d:24:de:47:7d:5d:e5:f3:84:08:9f:f1:cd:6e:f0:
f7:37:06:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGqFZ1Gie5yd/FDlnpKMtuPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MjQwMTdjNmUxYzhmZmQ2Mzk3MmUwMjQ0OTA5ODQ3N2Rk
ZjE3ZGYwHhcNMjYxMTA1MDUwMTQ1WhcNMjYxMTA2MDUwMTQ1WjAzMTEwLwYDVQQD
Eyg2MTdmZDNiMjk2MjZmMTk5Y2Q0NWM0Mzg3OTAxYjdlOTcwZmQxNTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8J9+v0bvL2qBq5lnrI8WSTkDefj
Aby7vu6Bg8x28VfkZS6oK36s3xAcN1T9FI4VwkK8F2wUPRim77jtnfMYcuh5Z1tw
uB3Th3wMfAD1gYyA1DL7oxrPZDJ44AjRdSZt+Z7PczaErrhztJ2lcwGXFm5echwP
VTHRSfgmH6Mta1eNh1rnLIF7a4pNJVkNRNYa8vNn3Kjm5RkcTIaPoFuGkKmWO1oW
WqryQX57ndHZaaAqmPzulbll9pfyrcSpfTPPEES+9jC6xAeVAY8A3p5qMLpoY5Qz
hq21wcRXJA9rHzYVvmk9j4TzSxMM5wm6ptEN+Q76yVj9d9bJiGh7U3G/ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGF/07KWJvGZzUXEOHkBt+lw/RUsMB8GA1UdIwQY
MBaAFLQkAXxuHI/9Y5cuAkSQmEd93xffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdENRQmZHNGNqXzFqbHk0Q1JKQ1lSMzNmRjk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS84NmYzOGQtODY0Ny00MTNmLWE0ZmUt
MzU1ZjI2ZmNhMTI4LzEvdENRQmZHNGNqXzFqbHk0Q1JKQ1lSMzNmRjk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS84NmYzOGQtODY0Ny00MTNmLWE0ZmUtMzU1ZjI2ZmNhMTI4
LzEvdENRQmZHNGNqXzFqbHk0Q1JKQ1lSMzNmRjk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVsGq9iMV
/3c3WlfpS+cEepoBpvEyuldRFRZeTmJnTMfIIGY+toGynIgHCR05s8sXL5gmS5rH
aGDPuQPs+aMB4L1JgczODLVHr59UUMAp9F/eUR9FiDCn8dFEhLdE7HTGiAExgMzo
oQOm+62TPyXbZXWiprpKAqdMgz4Jc0E281HDmwKxBPrI+l6ahb/tYdieuXbD8BnX
hYCH5Qg3ihQOEdAGiJ+k+mESIp7BXA8t6fZ7xAG/S4lg4hovfM/7yOC74aMx/Ii2
goCAA9kN+CVYBXKsTk/bVfZsqtksYDzN7iit0cvsS1CEpoHDh0nTfSTeR31d5fOE
CJ/xzW7w9zcGYQ==
-----END CERTIFICATE-----
Generated at Thu Nov 5 14:32:09 2026 by rpki-client