Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/v02QFSU9d7e4q3m7vrs-_LdCwvE.mft
File: v02QFSU9d7e4q3m7vrs-_LdCwvE.mft (raw, json)
Hash identifier: ZsfEEM5bE7fTDiemjEgiy6swOKhTIuXfML1XaNAuYko=
Subject key identifier: 7A:DE:BB:17:FB:AF:90:85:5D:B4:FF:AF:37:BF:6E:39:F4:72:1D:F8
Authority key identifier: BF:4D:90:15:25:3D:77:B7:B8:AB:79:BB:BE:BB:3E:FC:B7:42:C2:F1
Certificate issuer: /CN=bf4d9015253d77b7b8ab79bbbebb3efcb742c2f1
Certificate serial: 01A1DE70D358293A831B641E4870A4C95C3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v02QFSU9d7e4q3m7vrs-_LdCwvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/v02QFSU9d7e4q3m7vrs-_LdCwvE.mft
Manifest number: 0171
Signing time: Sun 15 Nov 2026 09:01:38 +0000
Manifest this update: Sun 15 Nov 2026 09:01:38 +0000
Manifest next update: Mon 16 Nov 2026 09:01:38 +0000
Files and hashes: 1: LLW6KMEjDdWJNHccooMhS8WkJBo.roa (hash: 4wPZvW7aabauk/AVllnR9557p3pfAAJeEY/OlA5nxV8=)
2: azhaK6p4TY581nFNN0YSc0NYZII.roa (hash: D1i0KlyPZu/BLyg50mMb9PNPD0ML3cRf92lF5p6N+zc=)
3: v02QFSU9d7e4q3m7vrs-_LdCwvE.crl (hash: P8x3OD9lrBSRwWvlKY4QVflyQbXMx5fTy9smucrBCMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/v02QFSU9d7e4q3m7vrs-_LdCwvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/v02QFSU9d7e4q3m7vrs-_LdCwvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v02QFSU9d7e4q3m7vrs-_LdCwvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:d3:58:29:3a:83:1b:64:1e:48:70:a4:c9:5c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4d9015253d77b7b8ab79bbbebb3efcb742c2f1
Validity
Not Before: Nov 15 09:01:38 2026 GMT
Not After : Nov 16 09:01:38 2026 GMT
Subject: CN=7adebb17fbaf90855db4ffaf37bf6e39f4721df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:75:8d:36:31:18:b4:79:e3:c6:66:b1:df:a7:
4a:a3:39:52:fe:72:88:a9:9d:fd:8c:75:45:fc:8a:
4e:6d:12:51:34:8f:7b:56:5d:ac:69:d4:7c:83:df:
bf:1a:6a:93:10:20:77:71:ed:56:d9:d2:83:fa:e1:
09:83:d6:38:21:24:d2:6f:8a:55:43:4c:1a:57:84:
a5:8b:e3:14:df:51:eb:dd:70:a3:15:f2:e1:ec:e7:
f1:df:c6:36:44:aa:47:03:1a:7f:7b:2e:68:bd:07:
07:15:26:06:28:76:32:6d:e4:0b:61:1b:22:87:96:
b3:c6:8e:a0:76:73:a1:75:14:ac:03:35:b6:11:6b:
ac:12:5e:9c:1e:e2:f4:e0:8a:7b:68:b5:e2:54:6c:
a6:31:54:3a:98:06:28:34:7c:35:9c:a8:89:44:bb:
d6:b8:5e:a1:9f:51:e1:f0:de:80:98:e4:4b:80:79:
2d:08:79:dd:a1:34:6b:7e:94:bf:a8:62:76:b3:42:
07:50:9b:43:fe:1b:cb:27:d1:5a:0d:6e:c7:43:59:
31:fb:1d:09:49:bf:1b:8d:bf:6b:01:92:8d:bd:2e:
d6:22:8f:1e:0a:39:dd:c8:07:d8:82:84:cf:d0:68:
3d:f1:0a:c5:72:0f:b4:53:0e:8c:f1:d8:82:3c:87:
93:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DE:BB:17:FB:AF:90:85:5D:B4:FF:AF:37:BF:6E:39:F4:72:1D:F8
X509v3 Authority Key Identifier:
keyid:BF:4D:90:15:25:3D:77:B7:B8:AB:79:BB:BE:BB:3E:FC:B7:42:C2:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v02QFSU9d7e4q3m7vrs-_LdCwvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/v02QFSU9d7e4q3m7vrs-_LdCwvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/v02QFSU9d7e4q3m7vrs-_LdCwvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:3b:54:30:bc:81:59:42:85:40:ee:04:04:a3:90:bb:05:2b:
91:6b:c5:bb:2c:6b:b8:c1:4a:0d:ee:22:31:9e:ca:ce:bf:5d:
93:c6:fb:42:a2:83:d3:5a:e5:bb:fb:bb:fa:5d:b4:63:93:31:
8c:e9:0a:42:3e:ba:fd:10:00:92:9f:4b:c5:5c:b8:79:96:2f:
bc:8b:5b:51:7e:0e:84:bd:b7:98:aa:5c:48:69:f4:3c:6a:8d:
74:d5:40:37:3c:7b:6c:aa:12:58:e8:5b:22:74:ef:60:c5:e4:
f9:c9:15:8d:d9:a5:3e:5c:c1:2f:7c:fa:bf:f9:70:f1:78:43:
9a:27:ff:03:71:63:81:9a:2d:b9:40:a2:14:79:0c:9d:14:2c:
2a:1b:ed:f4:91:2c:6f:bc:34:08:5e:66:89:d1:21:1b:0c:4d:
31:6d:eb:a7:2d:65:6d:44:72:24:7f:0a:f9:c6:a9:cb:06:a6:
62:9f:8e:ab:14:93:f8:0b:d5:86:e4:8b:ff:9f:50:f2:97:bc:
ad:9e:2b:e1:b6:f7:ca:fb:39:19:5a:9d:ca:92:58:77:46:8a:
e6:f4:be:fb:e6:68:e2:e6:54:8e:d8:f7:2e:8d:18:ba:42:68:
61:f1:dd:19:d7:b5:95:fd:d1:c4:f7:32:27:d6:48:27:34:79:
c1:1f:ec:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHecNNYKTqDG2QeSHCkyVw+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNGQ5MDE1MjUzZDc3YjdiOGFiNzliYmJlYmIzZWZjYjc0
MmMyZjEwHhcNMjYxMTE1MDkwMTM4WhcNMjYxMTE2MDkwMTM4WjAzMTEwLwYDVQQD
Eyg3YWRlYmIxN2ZiYWY5MDg1NWRiNGZmYWYzN2JmNmUzOWY0NzIxZGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXWNNjEYtHnjxmax36dKozlS/nKI
qZ39jHVF/IpObRJRNI97Vl2sadR8g9+/GmqTECB3ce1W2dKD+uEJg9Y4ISTSb4pV
Q0waV4Sli+MU31Hr3XCjFfLh7Ofx38Y2RKpHAxp/ey5ovQcHFSYGKHYybeQLYRsi
h5azxo6gdnOhdRSsAzW2EWusEl6cHuL04Ip7aLXiVGymMVQ6mAYoNHw1nKiJRLvW
uF6hn1Hh8N6AmORLgHktCHndoTRrfpS/qGJ2s0IHUJtD/hvLJ9FaDW7HQ1kx+x0J
Sb8bjb9rAZKNvS7WIo8eCjndyAfYgoTP0Gg98QrFcg+0Uw6M8diCPIeTjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHreuxf7r5CFXbT/rze/bjn0ch34MB8GA1UdIwQY
MBaAFL9NkBUlPXe3uKt5u767Pvy3QsLxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjAyUUZTVTlkN2U0cTNtN3Zycy1fTGRDd3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8wYTFiODMtODZiYS00MDFhLWE1NDMt
YmZkZWMwYzExMmUzLzEvdjAyUUZTVTlkN2U0cTNtN3Zycy1fTGRDd3ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8wYTFiODMtODZiYS00MDFhLWE1NDMtYmZkZWMwYzExMmUz
LzEvdjAyUUZTVTlkN2U0cTNtN3Zycy1fTGRDd3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzDtUMLyB
WUKFQO4EBKOQuwUrkWvFuyxruMFKDe4iMZ7Kzr9dk8b7QqKD01rlu/u7+l20Y5Mx
jOkKQj66/RAAkp9LxVy4eZYvvItbUX4OhL23mKpcSGn0PGqNdNVANzx7bKoSWOhb
InTvYMXk+ckVjdmlPlzBL3z6v/lw8XhDmif/A3FjgZotuUCiFHkMnRQsKhvt9JEs
b7w0CF5midEhGwxNMW3rpy1lbURyJH8K+capywamYp+OqxST+AvVhuSL/59Q8pe8
rZ4r4bb3yvs5GVqdypJYd0aK5vS+++Zo4uZUjtj3Lo0YukJoYfHdGde1lf3RxPcy
J9ZIJzR5wR/s4Q==
-----END CERTIFICATE-----
Generated at Sun Nov 15 20:56:27 2026 by rpki-client