Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
File: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft (raw, json)
Hash identifier: +ZseEV/J43emJv/CsuMleC0jPket5yuo60OU5vrf1Ps=
Subject key identifier: DB:CE:32:E0:9F:D9:BC:81:7F:9E:EE:71:0E:DE:79:9F:8D:61:E1:3D
Authority key identifier: 43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C
Certificate issuer: /CN=439137befe8bc55903690c7c46af197cc91a703c
Certificate serial: 01A12F8F68495D4C0B4BC26E67BE274987C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
Manifest number: 0688
Signing time: Mon 12 Oct 2026 10:01:29 +0000
Manifest this update: Mon 12 Oct 2026 10:01:29 +0000
Manifest next update: Tue 13 Oct 2026 10:01:29 +0000
Files and hashes: 1: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl (hash: w9wNhhcyvVku0HqeYoQcbXa+gTd2K3d3i7coIDmjiHw=)
2: _7YkQnir_Fs7RdN8jRsXRuKitU0.roa (hash: eG23lB/DnSZrnvg06TYWuaxCxD+hbMjkA+ocC1LtuGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:8f:68:49:5d:4c:0b:4b:c2:6e:67:be:27:49:87:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439137befe8bc55903690c7c46af197cc91a703c
Validity
Not Before: Oct 12 10:01:29 2026 GMT
Not After : Oct 13 10:01:29 2026 GMT
Subject: CN=dbce32e09fd9bc817f9eee710ede799f8d61e13d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c2:78:83:e9:38:b8:91:96:2c:17:50:ec:27:
ed:64:3d:1b:be:d2:17:13:6a:f6:7c:eb:7f:c0:34:
90:b8:54:97:3c:1e:9c:46:24:e8:8f:cf:d1:f2:df:
28:d4:23:bf:fc:be:9d:7c:c9:f4:0a:cc:fd:43:ed:
eb:8e:32:d9:05:22:13:f5:8d:76:f4:b7:8a:bf:15:
36:bf:c2:92:65:55:2e:6d:14:ac:34:53:3f:ad:fa:
6f:81:1e:73:7b:5c:97:8b:ae:3e:62:9f:81:97:dd:
7b:6e:e6:c5:50:c8:d9:df:8e:03:47:42:a4:6e:81:
cd:7d:62:c0:0a:98:4b:c1:7a:40:1b:9c:8b:e2:f5:
48:22:6e:50:12:eb:49:9a:1e:20:90:52:24:90:b0:
71:66:72:73:20:e9:c7:29:63:d2:84:7d:ad:f1:1e:
fc:89:d0:ca:e8:bb:13:bc:06:ce:9b:27:24:4a:a8:
9b:d9:c3:6d:d8:fb:26:09:3c:d3:c5:a3:b6:6a:1d:
3c:a5:73:96:7f:f8:05:80:bd:26:34:80:48:a5:85:
3b:2c:9c:92:f2:b5:5f:0a:84:73:9b:29:ae:fb:51:
09:5e:4c:11:6e:57:67:5e:1d:74:97:e6:80:fd:f2:
d9:c6:62:aa:bf:44:39:75:e0:6e:d6:d5:be:3a:71:
03:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CE:32:E0:9F:D9:BC:81:7F:9E:EE:71:0E:DE:79:9F:8D:61:E1:3D
X509v3 Authority Key Identifier:
keyid:43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:33:4d:68:90:c9:46:4d:cc:54:60:cf:2f:98:f5:85:8e:b1:
f4:da:5f:c7:39:5a:00:72:0d:ba:84:bb:9f:6e:69:2f:66:94:
e4:56:75:1d:c3:2f:43:87:19:23:8f:7f:73:f8:71:4f:51:40:
af:7d:bf:fc:9d:a5:ce:87:ba:39:5a:a8:b0:95:ef:19:1f:ac:
d4:4b:34:58:98:ef:01:f4:90:96:f8:96:41:1c:0b:ce:7b:07:
c6:3d:05:83:91:2e:3c:32:0b:52:1b:77:72:25:b2:65:cf:8c:
c8:59:ce:b9:12:0f:eb:de:51:56:74:89:4f:af:90:3b:4f:ba:
83:e8:72:4a:ca:26:22:a6:ad:90:a4:b7:9a:a4:9d:39:eb:fd:
2c:0a:56:26:f5:34:e5:5a:e8:d9:6f:b5:2e:63:c4:e5:f3:cd:
4b:4a:3d:a1:9c:0c:57:4a:e1:4a:56:2c:4f:4f:66:36:59:82:
c2:02:0a:c7:ad:9d:2c:b3:83:cb:c6:ca:d3:e3:8d:05:57:e2:
33:e0:ca:4e:b8:d5:15:17:64:19:75:cd:88:aa:fe:f3:d3:39:
ea:71:81:e6:59:71:b7:17:ff:6e:1c:1a:34:e9:ee:05:e5:ca:
b0:42:73:71:b6:92:d4:2b:94:d2:60:62:73:7e:80:09:3d:0f:
27:9a:17:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 12:37:51 2026 by rpki-client