Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
File: QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft (raw, json)
Hash identifier: lBQkX2J6NeC9RfPWttg9xgwkFyJ2BANrruIrCHpUQPE=
Subject key identifier: 6D:25:BB:B1:23:23:D3:D2:DA:96:AD:C4:8E:29:B2:FE:5C:FF:7E:B2
Authority key identifier: 42:43:2A:31:9F:54:B0:58:37:2F:D3:25:28:EA:E5:1F:C9:0C:15:B2
Certificate issuer: /CN=42432a319f54b058372fd32528eae51fc90c15b2
Certificate serial: 01A1DE0277E31D1D657D357C562D3768B3E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
Manifest number: 07A7
Signing time: Sun 15 Nov 2026 07:01:05 +0000
Manifest this update: Sun 15 Nov 2026 07:01:05 +0000
Manifest next update: Mon 16 Nov 2026 07:01:05 +0000
Files and hashes: 1: 1V2N8PP3W6pg2dn86MMXMCFavbg.roa (hash: 6GyZmIlJdg5hYdJcaopJTcDcXE9f3YbiakWtgZ82HCg=)
2: QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl (hash: kW9KcsjKZ4MpR0pf+t/uF8LmgNOyoRONXxkynFU+Ty8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:77:e3:1d:1d:65:7d:35:7c:56:2d:37:68:b3:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42432a319f54b058372fd32528eae51fc90c15b2
Validity
Not Before: Nov 15 07:01:05 2026 GMT
Not After : Nov 16 07:01:05 2026 GMT
Subject: CN=6d25bbb12323d3d2da96adc48e29b2fe5cff7eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d5:c8:fc:9c:24:e1:74:93:1e:16:ee:cc:1e:
7d:fa:4d:a6:49:d9:5d:f7:29:ed:32:29:82:05:17:
63:4a:34:69:76:e3:f0:5b:62:65:24:72:53:59:cf:
df:d3:87:df:5d:27:94:24:df:44:8b:ad:e9:03:56:
0a:5c:17:6a:95:9c:d1:26:ba:c3:36:b7:0a:72:7e:
9c:4f:e9:2b:f6:52:a3:6d:b1:d6:64:05:d3:a3:f6:
6b:32:90:64:f5:84:11:ac:38:10:2e:d8:43:b4:e1:
05:84:64:47:b2:89:b3:cf:26:b6:3c:63:0a:83:e4:
c6:e0:1b:b4:21:98:43:c1:5b:ee:6b:e2:76:81:6c:
36:df:4b:eb:e8:73:df:ea:e9:e7:b2:66:79:9e:eb:
f2:73:d9:38:d2:28:34:96:e5:13:e4:88:a3:b0:55:
5d:ea:43:66:e5:02:e9:89:e3:dd:2b:73:52:50:dc:
c4:93:95:ba:b0:28:4c:3c:3d:60:f9:b3:bc:d5:26:
86:3c:e6:6d:d6:ee:65:2d:02:e4:6c:06:b1:cf:3b:
6a:79:ce:15:8d:44:27:8d:de:b0:fb:2c:38:f3:5d:
b7:35:39:f1:0d:4d:17:a5:c4:3b:50:dd:f7:6d:1a:
ba:de:54:da:ad:ac:04:75:ee:41:21:eb:db:4c:c5:
4a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:25:BB:B1:23:23:D3:D2:DA:96:AD:C4:8E:29:B2:FE:5C:FF:7E:B2
X509v3 Authority Key Identifier:
keyid:42:43:2A:31:9F:54:B0:58:37:2F:D3:25:28:EA:E5:1F:C9:0C:15:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e7:8a:b8:16:91:88:d8:7f:28:57:db:0d:75:51:f2:ae:c8:
76:a4:21:97:3e:41:3b:39:d1:14:76:7b:42:7f:e3:40:dc:47:
65:a2:84:e3:36:4e:1d:f1:ca:6e:89:77:ff:d0:63:98:4b:43:
4e:a7:ee:f1:f3:43:5e:82:80:51:50:a4:d7:35:7f:06:44:15:
bf:29:55:48:05:0e:ad:ff:9f:99:ff:ef:e5:5a:0a:ff:55:88:
4a:07:7a:c9:21:7d:54:be:c6:42:9d:8f:b8:72:6b:1b:82:0e:
43:8b:61:63:a0:ef:86:4f:6d:b2:ff:94:c9:6b:47:76:59:55:
61:06:7a:d6:67:94:8d:f4:5f:90:4b:da:47:c4:99:dd:70:1b:
1b:4d:80:b3:13:32:1a:af:19:aa:02:9e:81:2a:b3:9a:2a:d7:
8e:b5:cf:af:30:e5:f3:c3:e5:8b:56:74:9a:24:ed:46:2e:84:
cd:fb:ad:0d:5b:9e:70:55:4e:fd:c8:db:34:75:d1:9f:21:30:
42:b1:75:c5:62:96:d4:b7:0d:12:60:81:6c:2b:f3:02:04:f3:
ed:1d:55:3f:b3:2c:83:14:6a:f4:62:40:06:fa:bf:b7:4e:8f:
69:a4:ae:5e:46:1a:b3:8a:c6:df:80:66:fb:7b:7b:cd:04:39:
d2:a3:06:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:54:01 2026 by rpki-client