Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
File: qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft (raw, json)
Hash identifier: UaBEZZgcMpI1yhFSTAfY5e2D7+uwtCS8yIDKYiWo3uw=
Subject key identifier: FD:53:00:45:9A:11:F7:34:24:58:98:CB:82:7A:C7:2C:E9:BE:22:27
Authority key identifier: A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3
Certificate issuer: /CN=a8153b3d5612234fe260fe60bc7ce028062227a3
Certificate serial: 01A134EC3ECDF53E21CB9809365A30464678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
Manifest number: 1AA3
Signing time: Tue 13 Oct 2026 11:01:00 +0000
Manifest this update: Tue 13 Oct 2026 11:01:00 +0000
Manifest next update: Wed 14 Oct 2026 11:01:00 +0000
Files and hashes: 1: e9ATf5sPxhIIrZkXrfrTWItTCA8.roa (hash: 9bYZXPWqJ0NbEhPnRTTZ2nAWZSD7VDe4KmSotczV1Og=)
2: eJ3EsbBMhzFDB-H0FiABM5_1h7o.roa (hash: 2Gzq+fr47dBnSE3c78QxSTACSN9b6779m8anTE61jss=)
3: qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl (hash: OfN0BLCexGXjfAqmiSuOlo5hhpLk+X4THV4v7hSl5/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:ec:3e:cd:f5:3e:21:cb:98:09:36:5a:30:46:46:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8153b3d5612234fe260fe60bc7ce028062227a3
Validity
Not Before: Oct 13 11:01:00 2026 GMT
Not After : Oct 14 11:01:00 2026 GMT
Subject: CN=fd5300459a11f734245898cb827ac72ce9be2227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d2:1b:b4:22:26:8d:30:5e:49:70:c0:0b:d0:
44:f7:bd:ba:aa:aa:b0:29:02:b0:a1:a3:89:3f:22:
a3:0c:e7:1a:01:a9:36:32:35:24:98:0c:94:c2:f9:
bf:d6:ba:98:0c:68:75:51:eb:7d:ef:56:27:c8:bd:
37:76:c3:fa:2e:06:80:63:f5:0c:3f:ed:34:73:79:
b8:bf:30:20:90:5e:4d:fa:d6:6e:4b:cc:cd:dd:86:
17:5a:5e:bc:9d:08:c4:b4:a1:09:2b:92:83:ab:a1:
c2:e7:70:99:24:bc:a0:91:97:9e:94:a2:fb:7e:b4:
1b:35:f0:81:61:9a:09:37:59:8e:b4:39:f7:0c:b0:
96:1b:c8:0d:69:74:c0:c9:a8:01:0c:40:16:a6:61:
72:20:b2:18:ab:dc:0c:5e:da:6b:0f:bd:ef:86:50:
fa:ac:10:ca:99:0d:51:f0:9a:c7:47:75:75:3e:a1:
b5:49:d3:8b:9e:3f:a9:a3:f1:dd:24:60:1a:6a:a2:
19:f6:19:79:95:2c:51:4c:7b:d3:1d:fd:51:08:f4:
e3:da:21:a5:73:9d:ed:cd:20:4a:ed:2c:aa:a9:5a:
ed:4e:bd:fa:3c:08:f9:c8:96:df:21:e9:c6:a1:6e:
1c:e2:da:32:12:55:0d:72:a9:32:19:d1:b3:51:91:
9a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:53:00:45:9A:11:F7:34:24:58:98:CB:82:7A:C7:2C:E9:BE:22:27
X509v3 Authority Key Identifier:
keyid:A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:59:4e:9d:2d:f3:ed:aa:50:ef:01:40:86:d1:2c:a4:0a:73:
4d:e4:7d:64:85:86:88:8e:57:7d:1c:92:8c:35:74:56:5b:74:
f3:2c:00:a0:49:ee:5d:ab:77:cd:29:48:86:b8:12:8e:df:a5:
66:3e:f1:7a:db:cb:84:ff:14:1b:c5:ad:d7:81:aa:c2:ed:fe:
92:2c:68:cb:09:ca:36:a6:62:82:f8:23:74:cd:29:b3:a1:47:
da:8a:14:5a:c6:61:90:dc:fd:dd:5e:aa:99:66:ff:e7:90:e7:
51:51:d3:18:35:ad:a5:ff:f7:27:f2:21:b9:95:e3:2f:83:e9:
67:ab:03:06:1c:d8:51:60:9d:64:00:42:44:28:5c:fb:69:d8:
16:f8:52:5e:59:0b:24:54:39:7e:6f:c2:c7:75:5e:7a:92:a7:
14:6d:6d:b3:ac:05:93:e9:01:7b:0c:71:82:f6:4b:8c:c1:de:
29:dd:29:45:25:0f:69:40:48:a6:04:e0:18:4c:dd:23:74:ad:
04:b0:46:1e:71:e3:b1:92:cf:a4:bd:39:86:c7:c4:62:58:50:
df:1a:5e:0e:d1:e9:ec:f2:75:08:9f:d6:16:b3:d1:11:45:0a:
62:35:bc:68:6a:6c:67:2a:df:8a:f1:05:94:e2:90:dd:79:fe:
e5:bb:d2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:29:23 2026 by rpki-client