Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/a3df8b-69d9-41d9-8c83-f1bd8c6dff82/1/RQi117NzxB3b6pjaW8lxcpDkF_k.mft
File: RQi117NzxB3b6pjaW8lxcpDkF_k.mft (raw, json)
Hash identifier: SLrJudNTiloqF5vdpbrLbgRBvtcdYFMJPuaCQU9gznc=
Subject key identifier: 5A:71:BA:18:3C:1E:A3:6F:4E:89:B9:2C:1D:DC:2A:08:01:8B:E6:85
Authority key identifier: 45:08:B5:D7:B3:73:C4:1D:DB:EA:98:DA:5B:C9:71:72:90:E4:17:F9
Certificate issuer: /CN=4508b5d7b373c41ddbea98da5bc9717290e417f9
Certificate serial: 01A12B0D7CF6AABB422D487EA1C08251E27E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQi117NzxB3b6pjaW8lxcpDkF_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a3df8b-69d9-41d9-8c83-f1bd8c6dff82/1/RQi117NzxB3b6pjaW8lxcpDkF_k.mft
Manifest number: F2
Signing time: Sun 11 Oct 2026 13:01:06 +0000
Manifest this update: Sun 11 Oct 2026 13:01:06 +0000
Manifest next update: Mon 12 Oct 2026 13:01:06 +0000
Files and hashes: 1: RQi117NzxB3b6pjaW8lxcpDkF_k.crl (hash: bN3CclAA822/WRhMHXda0Xnq3Msut4afuDepWyJR1vo=)
2: n96x_KV9AIPo6sljEniHgrYwYdo.asa (hash: MZQfPY2YJsa6skvxi4+gsitkkwqOwZWNNGCWs8mjX6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a3df8b-69d9-41d9-8c83-f1bd8c6dff82/1/RQi117NzxB3b6pjaW8lxcpDkF_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/a3df8b-69d9-41d9-8c83-f1bd8c6dff82/1/RQi117NzxB3b6pjaW8lxcpDkF_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQi117NzxB3b6pjaW8lxcpDkF_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:0d:7c:f6:aa:bb:42:2d:48:7e:a1:c0:82:51:e2:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4508b5d7b373c41ddbea98da5bc9717290e417f9
Validity
Not Before: Oct 11 13:01:06 2026 GMT
Not After : Oct 12 13:01:06 2026 GMT
Subject: CN=5a71ba183c1ea36f4e89b92c1ddc2a08018be685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6a:96:ab:39:ba:00:12:f3:07:b6:65:ba:66:
aa:5a:28:8e:12:ca:44:81:b9:c8:51:1a:ff:97:42:
fe:d9:ce:10:f4:eb:96:5c:91:a4:25:5b:f0:2a:a0:
b0:a9:da:a9:93:06:03:a5:7b:e5:46:1b:f8:ea:91:
f4:dd:7b:63:08:e9:59:be:17:3c:32:c3:dc:c6:4f:
36:22:e7:94:fe:c0:36:5b:ad:bb:75:90:97:ea:af:
4e:75:77:2c:94:52:43:a7:79:36:df:ce:42:a6:27:
f2:54:a9:a0:da:43:5e:4d:0f:f2:29:a7:6e:4f:b9:
a0:dd:18:65:b2:9b:a3:33:c0:8d:ed:4a:c3:f6:90:
52:3d:18:02:22:58:f5:3d:07:ab:d1:51:fe:6c:f3:
bb:d8:85:bf:c1:30:10:88:b1:3c:3d:a8:31:cf:6c:
4c:aa:e2:29:4e:29:b8:f4:bb:95:d0:e3:60:29:db:
b8:3b:5e:66:5e:fe:76:16:f2:2e:51:67:05:62:f3:
09:4d:98:52:4f:9f:b7:49:be:90:1c:92:ab:26:d0:
6c:96:84:fa:4d:ff:ee:0d:66:55:45:79:31:3f:34:
35:6e:8e:64:be:d7:78:8e:01:ea:87:1c:cb:13:fb:
dc:a5:19:78:24:4b:25:b2:ad:37:a4:68:2c:51:76:
a1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:71:BA:18:3C:1E:A3:6F:4E:89:B9:2C:1D:DC:2A:08:01:8B:E6:85
X509v3 Authority Key Identifier:
keyid:45:08:B5:D7:B3:73:C4:1D:DB:EA:98:DA:5B:C9:71:72:90:E4:17:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQi117NzxB3b6pjaW8lxcpDkF_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a3df8b-69d9-41d9-8c83-f1bd8c6dff82/1/RQi117NzxB3b6pjaW8lxcpDkF_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a3df8b-69d9-41d9-8c83-f1bd8c6dff82/1/RQi117NzxB3b6pjaW8lxcpDkF_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:fb:c9:eb:fc:40:09:0e:02:d7:35:38:93:98:8d:83:10:21:
11:bb:2c:5d:88:b0:8e:0c:a8:17:1a:04:ac:f0:fd:59:e1:b8:
5a:08:26:0f:d8:73:a3:5a:0d:84:8b:f7:a8:b5:c5:c8:83:0d:
b4:87:34:95:03:d6:f5:c3:db:5d:67:75:53:4f:99:35:70:92:
dd:cc:85:ce:38:4e:25:1b:b0:9a:be:58:c0:82:f0:cd:08:43:
f6:23:b1:75:d2:56:1d:95:ff:2c:fc:c5:b8:a0:14:c0:14:39:
14:89:4c:dd:79:73:7e:1e:dc:89:2e:73:8a:20:ff:f2:90:b8:
34:d0:a8:e6:46:7f:32:13:a5:a1:e9:de:22:83:ae:68:b9:81:
8c:47:cd:d3:d8:41:c9:64:4a:25:3b:0d:98:7f:55:e7:99:c3:
1f:9c:7f:a1:82:fc:00:ba:73:c1:1d:35:94:ae:65:88:38:29:
c8:16:cb:e8:48:09:45:5e:12:58:99:b5:25:c4:34:ed:c4:61:
02:1d:09:06:9a:c7:b6:cf:1d:22:fe:fb:73:ba:5f:b5:3d:22:
d9:33:d9:b3:42:e5:e7:67:34:36:95:8c:dd:66:4f:25:33:9a:
5c:e9:69:f8:b3:b3:02:31:f4:8a:21:72:e5:76:0b:a7:d8:86:
6e:41:69:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:54:33 2026 by rpki-client