Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
File: bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft (raw, json)
Hash identifier: b06JriwqHL4XAbuJ5UOhEaJUCLaJvU8bj716tdPN8xA=
Subject key identifier: D7:B4:3A:D7:74:FF:59:22:85:36:68:FD:EC:93:9D:C2:93:93:33:F5
Authority key identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
Certificate issuer: /CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Certificate serial: 01A1AB5E491186FD94F107F02A66F8C77B58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
Manifest number: 1AF6
Signing time: Thu 05 Nov 2026 11:00:45 +0000
Manifest this update: Thu 05 Nov 2026 11:00:45 +0000
Manifest next update: Fri 06 Nov 2026 11:00:45 +0000
Files and hashes: 1: Qlnk-TU3emncuI4U9LFebnP07e0.roa (hash: HdDucwYSpeHdchyohiZw3Ulfi4Ms+K1/9jYumPe+XtY=)
2: R-Ms9tnwVFr5zGPdMpveWYmvzTU.roa (hash: 4hVn6BmRDmF60zXMMdHkc2jChJsAngJEvYhtXGC9Vjo=)
3: ZK9ALarqOpzm0i2rpLZ-rHOMzdo.roa (hash: RllCIZ6AldL0IOvShUd1+ZNf+viS99vPh52YLrvbtJU=)
4: ZmcfgQVw9WznPpWT9yLghomma18.roa (hash: dwEz5IwUCOta4WNqfA1M1PPK2wh9BaQxA/M28+Mkwpk=)
5: bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl (hash: I6/mhprGcmKp5P0Y776spBrWFtEgBVDIivsT0oSnBWU=)
6: ks2_IkZaAakd1-3jQOWLy85dDy8.roa (hash: mLEy/InkNukmfeS2zm1mvXpvR+u6dmdc0Mw1w4KWFN4=)
7: ocrWH4LXI5AcanxmF84LShRjSnA.roa (hash: IvINQVuazfHHpSQNQUlXHe0rPDP3TKBhqPqw+YoqC5E=)
8: vcHdvq4j0MZDMpwY_Sh1_lhpemE.roa (hash: TJZuXEOOt0r/V9EaRl+qnNfFa6UZgYtOnc2ci1AuANA=)
9: yO-faN1p6CDhjtBsMnJFSamd0b4.roa (hash: f5cjUT10BBqhpOr6X0AO88BjDl80sXjlHTe7MTa/7YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ab:5e:49:11:86:fd:94:f1:07:f0:2a:66:f8:c7:7b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Validity
Not Before: Nov 5 11:00:45 2026 GMT
Not After : Nov 6 11:00:45 2026 GMT
Subject: CN=d7b43ad774ff5922853668fdec939dc2939333f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b5:0b:03:1c:fe:e4:2e:68:46:40:01:04:6a:
55:ee:5f:d6:aa:9c:e7:ab:72:19:a3:6a:1e:e4:6c:
fb:8a:6d:e7:07:cf:de:4b:f1:7f:60:87:62:05:a2:
57:11:93:78:d2:1e:62:eb:7f:05:5f:23:a7:95:7a:
ba:88:11:00:98:b5:da:ee:a5:cb:35:c1:93:f0:bd:
c3:fb:55:3f:c8:2d:1b:99:23:d7:a0:e5:5f:10:ea:
0a:45:3f:84:3d:71:54:34:c8:66:53:91:3e:fe:6d:
f4:eb:ec:a6:9b:92:d3:71:26:21:13:6e:82:f7:2c:
08:b9:91:74:37:99:03:df:1a:ba:51:cc:a7:90:5f:
d8:ba:b5:2e:e0:ff:0e:6d:a9:5a:17:cf:82:2e:dd:
0c:de:02:f4:a4:63:52:8a:d3:4c:c4:7c:f6:03:2e:
14:13:6d:2f:e9:c9:5a:96:99:13:84:97:31:61:33:
77:83:13:db:e4:14:21:d6:c3:27:cb:0b:85:ce:5b:
d4:89:fc:ce:0e:91:e6:cd:d8:67:64:97:3a:9d:10:
ae:b1:86:f2:f5:86:77:0f:5a:3d:68:b8:50:97:c1:
dc:9c:2e:8f:9a:3c:b9:dd:1b:cf:e7:9c:08:40:4a:
ad:d2:a1:41:e1:5b:60:84:74:3f:70:12:71:bc:68:
17:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B4:3A:D7:74:FF:59:22:85:36:68:FD:EC:93:9D:C2:93:93:33:F5
X509v3 Authority Key Identifier:
keyid:6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:cd:2a:99:c1:7a:bb:f8:b5:7c:c2:64:48:46:44:a1:8f:dd:
db:68:4e:26:34:3d:1f:81:62:b2:e9:b9:f6:ab:22:65:24:3c:
a4:79:68:6f:91:c6:ec:02:14:32:99:19:27:93:36:6e:25:a2:
85:3a:f0:68:b9:dd:8b:65:7d:43:44:95:dc:ea:c0:97:a8:77:
b0:f2:14:0f:cc:b7:7f:2c:55:63:7a:39:a3:68:06:f3:52:13:
e0:53:6d:09:53:1d:c8:7b:2e:d4:aa:d0:ad:1c:7f:73:11:06:
ae:4f:4b:17:65:90:f4:ef:b7:c0:3e:3a:a5:cf:35:01:db:82:
bf:24:10:73:d4:33:8e:88:56:82:1d:7c:e3:61:33:a8:10:d9:
14:76:51:be:cd:c5:83:c2:c6:34:f6:7c:f1:df:ec:31:80:1d:
9a:a6:d8:40:7f:b1:eb:f2:cc:2e:1c:55:44:61:af:5d:1c:4b:
0b:f8:22:28:27:dd:e2:c4:b5:fb:f2:21:8f:21:36:7c:2b:84:
fb:69:73:0b:7c:88:93:ec:54:49:05:fb:b5:e4:91:86:b1:9c:
04:62:c3:48:6b:41:19:8d:f6:59:71:49:02:1a:70:d5:04:05:
6f:3e:9c:10:bb:70:47:b8:9d:01:d1:84:9e:6b:86:e2:a5:f9:
0a:a1:c1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:47:23 2026 by rpki-client