Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/rQi0bfZb4nNiokb0hsKtxovi2F8.mft
File: rQi0bfZb4nNiokb0hsKtxovi2F8.mft (raw, json)
Hash identifier: YT6zjR61uHag1dS0/adgxTejLDGC8MM4v6nG7WIWWBw=
Subject key identifier: 68:F3:8C:96:CB:52:AE:86:1C:0B:82:30:E6:4F:8B:3B:20:25:B2:30
Authority key identifier: AD:08:B4:6D:F6:5B:E2:73:62:A2:46:F4:86:C2:AD:C6:8B:E2:D8:5F
Certificate issuer: /CN=ad08b46df65be27362a246f486c2adc68be2d85f
Certificate serial: 01A1AABA6B7032CDF5BB2B99760880724F32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQi0bfZb4nNiokb0hsKtxovi2F8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/rQi0bfZb4nNiokb0hsKtxovi2F8.mft
Manifest number: 0157
Signing time: Thu 05 Nov 2026 08:01:46 +0000
Manifest this update: Thu 05 Nov 2026 08:01:46 +0000
Manifest next update: Fri 06 Nov 2026 08:01:46 +0000
Files and hashes: 1: VPuF-R7IXqDOSMscdlS2exzjJWw.roa (hash: JUT0B10VpEwMEaMw9rWg1rfFqBapj3b2tZoxUHuNQMo=)
2: l9Ccp-JYjYmEALFjc3qOk5Kyk74.roa (hash: DRfJOyhaELl7MOYsehZC5o5blG/GWaEr/9NIFNrtqNU=)
3: qi5LVB5gXlStFWVILBjM_yqmadk.roa (hash: Iw8HXEXpyXosCwzZ7QS0KTAalIl+EJXKln5afK3vrTw=)
4: rQi0bfZb4nNiokb0hsKtxovi2F8.crl (hash: /HvTgFjkt8lV7uLUybi4BB7PUbIRa23J+xCGALKf8qc=)
5: zLNgc3v8QN2hfk981LRhXkJ8ndo.roa (hash: 1VioYi7E9CddPQCRr1J1wmkaLLp0bmtEaxlGWUhGe2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/rQi0bfZb4nNiokb0hsKtxovi2F8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/rQi0bfZb4nNiokb0hsKtxovi2F8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQi0bfZb4nNiokb0hsKtxovi2F8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:ba:6b:70:32:cd:f5:bb:2b:99:76:08:80:72:4f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad08b46df65be27362a246f486c2adc68be2d85f
Validity
Not Before: Nov 5 08:01:46 2026 GMT
Not After : Nov 6 08:01:46 2026 GMT
Subject: CN=68f38c96cb52ae861c0b8230e64f8b3b2025b230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4b:26:3a:35:89:20:fd:32:cf:ea:8e:5a:6b:
69:c0:9e:a3:a2:6a:f2:54:f4:6a:94:da:e8:7b:2a:
d6:67:31:2b:8d:20:1a:65:ff:5b:87:98:7f:86:8b:
d9:b9:89:86:f8:35:fd:18:16:22:af:30:17:2d:09:
5e:f4:6c:1d:66:8c:90:1f:da:6b:7d:68:41:5f:05:
db:c4:1d:38:6d:58:63:d9:c7:19:43:ce:a8:53:07:
a4:14:b6:b9:f5:fb:73:a9:9a:e1:fc:42:a8:7f:37:
f3:d7:e3:81:50:55:ea:5a:9f:27:66:e9:ef:09:98:
ca:e0:72:46:2d:a4:7c:b6:05:63:ee:2f:3b:04:19:
d4:b0:c3:6d:a3:7d:2d:89:76:8d:f8:b3:16:db:83:
1e:83:c4:d1:98:5c:f4:70:2d:72:20:b7:bb:49:08:
84:ec:b2:93:65:2a:8e:72:bc:26:99:b2:f8:9d:50:
6e:b2:d5:ee:2d:a8:45:69:6c:e6:91:f4:93:2e:ac:
51:08:71:d0:7d:d1:11:7f:a6:f6:c8:14:32:f0:4d:
39:6e:85:fc:25:c4:ae:a4:dc:6d:67:65:4e:4f:9e:
cc:b5:e0:44:4e:4a:62:5c:ea:cb:3e:73:67:2b:53:
57:15:33:ab:9f:0e:86:19:51:63:24:ef:33:a5:55:
43:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F3:8C:96:CB:52:AE:86:1C:0B:82:30:E6:4F:8B:3B:20:25:B2:30
X509v3 Authority Key Identifier:
keyid:AD:08:B4:6D:F6:5B:E2:73:62:A2:46:F4:86:C2:AD:C6:8B:E2:D8:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQi0bfZb4nNiokb0hsKtxovi2F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/rQi0bfZb4nNiokb0hsKtxovi2F8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/rQi0bfZb4nNiokb0hsKtxovi2F8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e9:4f:94:e9:83:3e:05:d0:34:c1:c6:d8:ee:c4:fa:79:b9:
5a:14:b3:39:f2:07:78:ee:ad:e2:a8:4d:75:c6:0c:ab:0b:c2:
c1:57:0d:13:5e:ef:c0:62:95:08:c8:06:1e:9f:0e:46:ff:c7:
d3:ed:de:a8:aa:4f:30:3c:8c:fb:c6:64:0b:b7:07:d8:1e:60:
25:0e:d0:c3:7f:39:6b:72:7c:8d:57:1a:cf:0b:b3:2b:2c:7a:
b8:ba:21:f7:80:a0:cd:c4:e4:cf:03:4e:81:f8:87:5d:f1:00:
91:85:24:26:a2:cc:e5:a0:93:4d:f9:4e:0e:1d:83:cc:f8:65:
cf:77:94:36:59:77:9f:99:cb:48:19:c3:38:95:5d:f6:f2:83:
8d:2d:b3:7c:9d:49:b5:c5:13:97:f5:ec:4c:85:e3:58:c0:bf:
d0:ee:7c:03:47:19:3b:21:48:cf:44:f4:b5:33:e9:0e:56:21:
db:5d:23:a9:2d:5f:76:9a:2a:a6:11:cc:63:8c:62:83:9e:c0:
fd:87:cd:a8:07:76:a8:31:d5:82:fb:91:01:32:23:0e:1d:58:
58:ff:55:3b:4c:4c:50:7b:00:07:d2:55:92:17:54:11:39:87:
83:70:0d:01:a4:36:aa:43:ca:ba:99:39:3b:f1:4d:85:48:f9:
f2:7b:c6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:52:00 2026 by rpki-client