Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/qLLDezil93OVmHikQQ21nhc9wgY.mft
File: qLLDezil93OVmHikQQ21nhc9wgY.mft (raw, json)
Hash identifier: HCPVv9tobuiDFxOpVVdF76gAa4WG7H9UhNQICuoTesc=
Subject key identifier: 2D:E3:4F:2E:6F:FF:02:13:C9:23:38:21:41:21:0F:05:3E:2C:5C:84
Authority key identifier: A8:B2:C3:7B:38:A5:F7:73:95:98:78:A4:41:0D:B5:9E:17:3D:C2:06
Certificate issuer: /CN=a8b2c37b38a5f773959878a4410db59e173dc206
Certificate serial: 01A130A19A30601AA742AF9314136E2B3CDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLLDezil93OVmHikQQ21nhc9wgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/qLLDezil93OVmHikQQ21nhc9wgY.mft
Manifest number: 0117
Signing time: Mon 12 Oct 2026 15:00:59 +0000
Manifest this update: Mon 12 Oct 2026 15:00:59 +0000
Manifest next update: Tue 13 Oct 2026 15:00:59 +0000
Files and hashes: 1: OunyrU6BBdReyTyaGtBOEde3_sk.roa (hash: dT+oapbW+wFYcujVYugQxPifKqhdPs/FWRx90NuTH1s=)
2: qLLDezil93OVmHikQQ21nhc9wgY.crl (hash: Qeod71j9iz/5yOEwNZvADXTmtcw9Ynz9QI/A48D5xa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/qLLDezil93OVmHikQQ21nhc9wgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/qLLDezil93OVmHikQQ21nhc9wgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLLDezil93OVmHikQQ21nhc9wgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:a1:9a:30:60:1a:a7:42:af:93:14:13:6e:2b:3c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b2c37b38a5f773959878a4410db59e173dc206
Validity
Not Before: Oct 12 15:00:59 2026 GMT
Not After : Oct 13 15:00:59 2026 GMT
Subject: CN=2de34f2e6fff0213c923382141210f053e2c5c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bb:07:ae:db:83:5a:e5:a8:07:ae:70:cd:d5:
b3:ea:bd:8f:7b:fc:44:e3:6f:57:a1:31:fc:3b:d4:
47:a8:8f:ec:20:8f:3a:c0:f2:e1:76:96:a8:17:2e:
9d:5c:ca:7f:7a:68:9a:9a:29:62:12:62:0d:c7:17:
ff:a7:ca:71:85:8f:c3:bb:a4:6f:c1:ed:6b:e5:fd:
11:89:ab:70:d2:50:53:65:7c:46:58:db:aa:00:1e:
c4:7f:a3:d5:bb:2b:c7:c5:25:3a:3c:0a:5c:57:76:
9d:d8:ec:43:50:4e:8a:51:d7:0f:35:70:18:db:b4:
f4:e2:98:59:6a:4e:49:62:ba:ad:cd:03:5a:c7:29:
c2:62:2a:d3:0d:7a:72:8f:1c:69:72:bd:c3:89:7f:
54:95:2e:71:05:60:32:00:df:05:7e:76:72:bb:e3:
f9:3a:e2:f4:13:ea:65:69:12:40:83:c7:5b:df:d2:
da:73:fc:a3:ea:a1:9f:6c:5d:8b:55:33:b1:cb:dd:
49:b3:36:c9:8f:f7:93:b9:3a:e0:ea:29:24:5b:07:
e5:e6:03:69:96:e1:58:b1:de:4e:60:4d:ca:a1:f0:
ca:24:dc:f6:69:0b:57:4e:06:53:8f:bd:c1:aa:db:
52:d2:c2:f2:18:9c:c7:42:1a:de:e3:33:90:06:12:
40:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E3:4F:2E:6F:FF:02:13:C9:23:38:21:41:21:0F:05:3E:2C:5C:84
X509v3 Authority Key Identifier:
keyid:A8:B2:C3:7B:38:A5:F7:73:95:98:78:A4:41:0D:B5:9E:17:3D:C2:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLLDezil93OVmHikQQ21nhc9wgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/qLLDezil93OVmHikQQ21nhc9wgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/qLLDezil93OVmHikQQ21nhc9wgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:bb:5c:39:56:ed:66:62:55:99:24:dd:e0:fa:e3:e2:c6:ab:
0a:8a:3a:37:e9:e5:97:51:36:d5:58:80:e5:6e:63:da:8b:57:
fc:5f:d3:4d:ac:3b:41:e1:af:9d:23:ea:84:7f:d9:8e:ee:cd:
ef:a1:a0:44:6a:ce:ea:ce:75:c2:ec:53:6a:7e:ed:12:00:c8:
3f:d4:b3:39:67:5b:f1:bb:5c:9a:25:f6:b1:5f:64:3d:d7:f9:
cf:6c:42:1d:e1:5b:10:f3:4d:35:35:9b:49:18:d4:31:06:1f:
4d:1f:d4:a8:89:86:2e:c0:b3:2f:e8:0d:9b:cb:5f:84:28:49:
f8:f9:51:e0:6d:aa:fa:5a:db:28:93:3c:bc:d8:a7:08:d9:a7:
d6:1c:ae:da:dd:1d:2b:f2:d1:ad:19:a5:bc:03:f9:36:59:db:
6d:07:50:be:08:44:13:77:90:5e:d0:18:56:ef:42:cb:4a:b7:
4a:a4:71:70:dc:58:4f:53:cb:43:4e:36:05:43:88:c4:6e:54:
82:fa:70:5e:46:fb:bc:7b:d2:bc:16:7a:c4:ed:28:83:6e:fa:
32:bc:48:a5:d7:76:0f:05:91:7e:26:ac:3e:83:a9:2e:f2:ec:
f2:1d:65:fa:19:c3:9b:a8:1f:92:e3:f3:bd:7c:a4:96:e1:4f:
dc:a5:0a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 01:21:54 2026 by rpki-client