Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
File: Q0llhOXPObVodN6Nx3qjpv-eih4.mft (raw, json)
Hash identifier: r8V861ATigf6jbqrZSafTZL6ss9+3GeQB7pMELYIbYg=
Subject key identifier: 35:23:10:3F:A6:8E:B8:52:1B:4E:1F:92:31:88:AD:4D:9D:92:8D:CF
Authority key identifier: 43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
Certificate issuer: /CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Certificate serial: 01A1AABA9E85BA0D07AFB76DCAA34111807A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
Manifest number: 177C
Signing time: Thu 05 Nov 2026 08:01:59 +0000
Manifest this update: Thu 05 Nov 2026 08:01:59 +0000
Manifest next update: Fri 06 Nov 2026 08:01:59 +0000
Files and hashes: 1: Q0llhOXPObVodN6Nx3qjpv-eih4.crl (hash: HhRDzrExTkl46ZJb0BT4eYDIRtcV9aGfUumzdiHjtDM=)
2: eTNkVC7XWRHBzuyFVu3pxnwq3z4.roa (hash: b8ZbPv94PI8PSCuaUsrniKkw7cN6jjfuOqQWfIOj1qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:ba:9e:85:ba:0d:07:af:b7:6d:ca:a3:41:11:80:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Validity
Not Before: Nov 5 08:01:59 2026 GMT
Not After : Nov 6 08:01:59 2026 GMT
Subject: CN=3523103fa68eb8521b4e1f923188ad4d9d928dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:83:9f:b8:f1:74:66:d3:00:a3:0e:1a:3f:45:
77:d6:bd:13:d9:11:42:78:bb:c8:91:81:01:0b:41:
9f:ed:29:0f:f6:12:98:2b:03:f5:73:80:ac:a9:c6:
1e:74:98:e7:22:c4:41:52:97:36:81:e7:7d:0c:8b:
37:d4:67:23:18:b7:76:cf:fe:47:c6:84:8b:50:23:
99:a7:25:3d:c5:3b:c6:99:e0:43:b8:2d:cc:26:5c:
88:e0:ff:4b:89:ac:11:86:4a:ff:a4:94:fb:ac:9a:
28:34:3f:76:d1:72:cb:21:c1:fd:45:20:e7:13:fd:
81:ed:58:e5:fe:f3:37:b4:83:e9:df:e2:d2:d6:bc:
a8:71:68:6b:72:a4:21:23:31:b9:26:38:07:91:1d:
e4:69:f8:dc:81:4a:a4:bc:f2:63:51:8f:4c:2c:17:
e8:c1:20:9c:e5:6b:d7:cb:05:aa:bb:6b:9d:af:65:
0f:75:f7:9d:af:e1:96:41:90:d2:ad:23:cb:33:78:
9e:b6:5e:f5:1b:90:cb:fa:76:d7:35:5a:f4:30:15:
56:9c:04:2a:38:d4:01:c7:a7:18:95:b3:b1:94:75:
9d:38:79:c2:93:40:ee:6f:b5:d3:db:0c:93:7c:41:
d9:89:3d:5b:b3:55:43:7b:8d:1f:a5:de:4c:87:7c:
b3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:23:10:3F:A6:8E:B8:52:1B:4E:1F:92:31:88:AD:4D:9D:92:8D:CF
X509v3 Authority Key Identifier:
keyid:43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:bf:49:8a:3d:ef:bc:67:0a:37:a1:ac:84:ff:f8:b4:5e:1c:
59:0b:b4:d9:ea:c4:ec:ac:1c:6c:d6:ce:24:e5:bc:a9:35:9e:
a9:5a:22:cb:6c:43:3e:0a:c4:3a:f5:99:27:b9:ff:51:58:34:
45:f1:43:08:23:2f:94:53:a9:cf:21:d0:df:a0:8b:ab:66:9f:
e1:0b:34:fc:fa:c9:4d:3e:30:57:0d:1b:34:22:81:c5:7b:3d:
bc:27:0b:ac:8e:07:b4:be:19:06:f7:4a:0a:61:23:9a:b6:b9:
5a:b6:6b:6a:43:f7:e5:28:bc:9a:ce:da:c4:a9:aa:55:7c:0c:
ad:ed:c6:1a:0b:91:0f:6b:18:84:e8:f0:5d:4d:78:87:14:98:
61:f2:82:c0:b6:f1:46:d4:8b:85:c3:0e:df:86:64:b8:52:85:
a8:04:74:a6:8f:dd:2d:03:6b:23:95:7f:79:bb:f6:4c:78:f4:
1b:7b:08:5c:be:d3:52:a2:51:29:5f:03:86:2d:58:33:b2:fc:
c2:3c:54:44:6c:41:3a:98:fa:b3:42:0d:65:80:34:b2:4d:01:
6a:e8:a3:b9:c9:a0:d2:52:9b:7d:26:3b:cb:f4:eb:6f:46:00:
2f:3b:cd:5d:df:bd:9f:3d:a4:24:ec:c8:3f:cd:d7:aa:2c:1b:
81:5c:d5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:53:20 2026 by rpki-client