Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
File: Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft (raw, json)
Hash identifier: J1j8z2lLvfb91IarbBtjGu5W/fuYSLGvGlpPryf/l8s=
Subject key identifier: DE:50:3C:44:6E:97:A0:1F:E1:65:68:43:A9:73:13:2B:1A:C8:A4:7A
Authority key identifier: 42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
Certificate issuer: /CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Certificate serial: 01A1DF4BFA27EFE1DB5193E8892F392484E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
Manifest number: 1B00
Signing time: Sun 15 Nov 2026 13:01:00 +0000
Manifest this update: Sun 15 Nov 2026 13:01:00 +0000
Manifest next update: Mon 16 Nov 2026 13:01:00 +0000
Files and hashes: 1: Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl (hash: lQIdfnr1hyuUyow+24JJJyl4JLMAX/nyxbNz9MPQpe0=)
2: wSVDY4D_BTNkmAglY_HeZ285NQM.roa (hash: ZEnBPvLpoohK2SLbOe4ksZss1TrPkGCglvZY4UbgGD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4b:fa:27:ef:e1:db:51:93:e8:89:2f:39:24:84:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Validity
Not Before: Nov 15 13:01:00 2026 GMT
Not After : Nov 16 13:01:00 2026 GMT
Subject: CN=de503c446e97a01fe1656843a973132b1ac8a47a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:82:a6:d7:f7:b8:47:38:f3:46:b3:ca:d6:94:
eb:5a:6f:2e:af:1e:73:ba:6e:49:4f:57:49:e6:14:
b2:e4:86:71:6c:80:f8:c7:ea:3e:36:9b:45:67:af:
c9:05:53:0a:00:5c:98:fe:0c:48:16:04:4d:71:0f:
2a:f4:c3:46:66:d9:10:83:53:25:92:76:22:79:ee:
19:55:0e:36:05:da:17:b7:52:54:6f:d4:18:8f:ca:
05:71:91:75:d2:45:a3:94:40:19:b9:1f:84:6e:1c:
b1:59:40:fc:14:b7:7c:cb:b8:f2:e3:19:be:d7:80:
eb:65:13:0a:d9:d5:77:64:46:8c:1e:f2:99:68:b8:
2c:13:4d:41:35:8b:88:60:02:3c:c6:22:8e:11:5b:
6d:17:4f:ff:45:9b:f4:96:74:82:cb:d5:cc:5d:09:
20:db:59:57:76:7c:3e:c0:8d:3f:7e:a1:20:00:13:
b4:6d:5f:da:67:17:5f:8c:95:a6:9a:57:d0:e8:4e:
20:ae:d1:4c:d0:3d:bc:de:db:bd:8a:2b:4e:73:2f:
3f:ee:ca:58:13:d9:73:2e:3d:8c:ea:2c:d4:f3:9b:
68:e5:49:ee:db:71:8e:cd:6f:ed:ef:55:ed:93:06:
31:e8:0b:ca:dd:aa:13:8d:56:37:07:8d:a1:f1:2b:
82:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:50:3C:44:6E:97:A0:1F:E1:65:68:43:A9:73:13:2B:1A:C8:A4:7A
X509v3 Authority Key Identifier:
keyid:42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:2a:bc:ff:d5:af:d7:f4:fc:53:92:aa:70:e7:d7:9e:45:af:
3c:b5:a6:0a:3d:17:76:d3:1a:c7:77:08:9a:3d:97:99:0b:8c:
bb:81:8e:81:c3:e4:ac:50:39:20:17:b5:3e:bc:93:25:41:6a:
b8:4a:ff:68:9f:c3:17:fe:12:3b:28:fe:d6:8c:34:7d:ad:68:
7a:b4:c4:5d:af:2a:a8:31:31:8e:c4:1c:28:73:b3:38:75:0c:
50:ed:81:71:d2:82:7c:ba:ed:13:50:ba:db:d7:28:d7:3a:f1:
d9:77:99:2c:d7:6b:2b:68:7f:e1:e7:a7:2e:6e:32:02:b0:11:
f7:a6:76:02:dd:72:0c:12:6c:73:49:55:14:c1:8c:11:1d:f6:
35:10:91:39:ec:ee:7f:ce:75:c2:7a:66:78:6a:37:d6:19:bd:
3a:47:9f:77:51:87:51:8e:52:99:3b:f5:c1:c5:a5:a9:fb:4b:
5b:b1:bc:2f:a3:84:0f:fe:ad:af:19:84:f0:7a:7a:83:e2:e2:
03:21:20:82:b0:a9:95:e0:5a:9e:58:92:8f:a1:2b:02:c3:f7:
43:7e:38:e3:6a:09:7f:cd:89:c7:72:76:3f:6f:48:9c:d3:32:
9e:8d:2c:c4:79:f2:1c:8c:d9:3f:6f:07:04:4e:a2:83:56:04:
eb:d1:78:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHfS/on7+HbUZPoiS85JITgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyY2RlMzY1ZDdkMmI1ODUwNmU0ZDRhYmYwYzJlZjdjZDVl
M2I0NjIwHhcNMjYxMTE1MTMwMTAwWhcNMjYxMTE2MTMwMTAwWjAzMTEwLwYDVQQD
EyhkZTUwM2M0NDZlOTdhMDFmZTE2NTY4NDNhOTczMTMyYjFhYzhhNDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4Km1/e4RzjzRrPK1pTrWm8urx5z
um5JT1dJ5hSy5IZxbID4x+o+NptFZ6/JBVMKAFyY/gxIFgRNcQ8q9MNGZtkQg1Ml
knYiee4ZVQ42BdoXt1JUb9QYj8oFcZF10kWjlEAZuR+EbhyxWUD8FLd8y7jy4xm+
14DrZRMK2dV3ZEaMHvKZaLgsE01BNYuIYAI8xiKOEVttF0//RZv0lnSCy9XMXQkg
21lXdnw+wI0/fqEgABO0bV/aZxdfjJWmmlfQ6E4grtFM0D283tu9iitOcy8/7spY
E9lzLj2M6izU85to5Unu23GOzW/t71XtkwYx6AvK3aoTjVY3B42h8SuC3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5QPERul6Af4WVoQ6lzEysayKR6MB8GA1UdIwQY
MBaAFELN42XX0rWFBuTUq/DC73zV47RiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXMzalpkZlN0WVVHNU5TcjhNTHZmTlhqdEdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC81NDAxOGMtMDFlOC00MTdmLTg1NmEt
MDJlMWJkNjA1MGU1LzEvUXMzalpkZlN0WVVHNU5TcjhNTHZmTlhqdEdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC81NDAxOGMtMDFlOC00MTdmLTg1NmEtMDJlMWJkNjA1MGU1
LzEvUXMzalpkZlN0WVVHNU5TcjhNTHZmTlhqdEdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkCq8/9Wv
1/T8U5KqcOfXnkWvPLWmCj0XdtMax3cImj2XmQuMu4GOgcPkrFA5IBe1PryTJUFq
uEr/aJ/DF/4SOyj+1ow0fa1oerTEXa8qqDExjsQcKHOzOHUMUO2BcdKCfLrtE1C6
29co1zrx2XeZLNdrK2h/4eenLm4yArAR96Z2At1yDBJsc0lVFMGMER32NRCROezu
f851wnpmeGo31hm9Okefd1GHUY5SmTv1wcWlqftLW7G8L6OED/6trxmE8Hp6g+Li
AyEggrCpleBanliSj6ErAsP3Q34442oJf82Jx3J2P29InNMyno0sxHnyHIzZP28H
BE6ig1YE69F4jw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:02:14 2026 by rpki-client