Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
File: QRoqlAW9oWccEHdvRCYnPJBOStA.mft (raw, json)
Hash identifier: kMc2NtKjU9/XjFHsBMNbrIUEPONdDBFobKj44e2lZr8=
Subject key identifier: 99:0C:42:15:6D:9A:6C:3C:D7:D1:DD:00:53:F5:21:10:E4:04:C0:31
Authority key identifier: 41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
Certificate issuer: /CN=411a2a9405bda1671c10776f4426273c904e4ad0
Certificate serial: 01A1DEDE62A1F0EDAEC437551EE1A6785DE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
Manifest number: 1AFC
Signing time: Sun 15 Nov 2026 11:01:18 +0000
Manifest this update: Sun 15 Nov 2026 11:01:18 +0000
Manifest next update: Mon 16 Nov 2026 11:01:18 +0000
Files and hashes: 1: JhKTt4vHe2Da6Kx5S6KE0aGaD54.roa (hash: nw0ozHE1LZlyAK+hkXXsJOHymcfFOhmuSyMz6eBbqyE=)
2: O5zwSwZaq-PnYfyFgUGaYTtXVCc.roa (hash: EcphMyhwWu+HB1619MCd3HbMcseN3a1eZUs2rmX7LwY=)
3: QRoqlAW9oWccEHdvRCYnPJBOStA.crl (hash: JdzhFnEWiMI4CcwQkfrbuppeesg4JXRhipVfrzkmZTM=)
4: mV0XT4eYWUzPfujoqVHWBgPdVhw.asa (hash: SxQBgXkzl2s7ZSzL5zFHD8gDFNbcwGk2HGZOyqJzEQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:62:a1:f0:ed:ae:c4:37:55:1e:e1:a6:78:5d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411a2a9405bda1671c10776f4426273c904e4ad0
Validity
Not Before: Nov 15 11:01:18 2026 GMT
Not After : Nov 16 11:01:18 2026 GMT
Subject: CN=990c42156d9a6c3cd7d1dd0053f52110e404c031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:21:c3:65:6b:e4:d1:d0:e0:9d:73:d6:78:7b:
cf:4b:e8:6d:1a:b0:07:49:6d:44:ba:09:96:62:41:
ea:51:13:da:4f:14:c1:bf:ec:87:ab:44:61:ee:59:
8e:98:1f:07:f7:d0:ef:b2:97:2f:1f:4f:50:29:06:
6d:37:42:64:fb:48:a2:05:a6:63:e3:72:f1:71:40:
58:9c:2d:39:98:37:0c:8a:f9:91:cc:40:87:ff:c1:
da:29:d4:ef:61:ef:7f:75:9b:36:68:58:e5:5c:e8:
f0:c5:63:33:b3:af:bc:4d:74:06:36:b8:c3:94:ff:
97:e1:7b:f8:86:99:c7:93:c0:65:d1:4d:df:d6:f3:
9f:5b:66:2b:a5:47:0e:f3:1e:de:27:64:83:fa:49:
b3:c3:6f:f4:71:1f:94:8e:cd:cb:83:78:3c:77:25:
9b:80:3e:c1:21:4a:70:8b:ea:44:63:84:7f:82:54:
34:63:ce:8c:c4:cb:e4:c2:b5:78:ea:ba:35:2a:29:
e6:66:66:67:90:db:98:bd:c3:a2:b4:44:0a:2c:d4:
d4:af:83:42:ed:b6:8e:a4:24:64:4a:ea:bf:39:c8:
1d:be:0a:fc:9d:a3:f0:56:47:7b:d0:c4:1e:85:09:
28:60:65:87:59:52:69:9c:94:48:51:00:e0:2c:47:
29:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0C:42:15:6D:9A:6C:3C:D7:D1:DD:00:53:F5:21:10:E4:04:C0:31
X509v3 Authority Key Identifier:
keyid:41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:cf:d8:fa:ed:7f:80:c0:3d:7e:42:d7:b7:9f:72:f5:3c:36:
91:a0:d7:88:0c:ea:ca:47:53:f6:b5:bb:1d:eb:eb:8d:e7:34:
f8:50:a3:13:59:22:66:88:e8:af:b6:15:53:6f:5b:0c:e2:70:
2b:3b:09:cd:22:a5:1f:6a:e2:62:75:ae:55:53:df:cb:7d:e2:
b6:dc:44:fd:00:01:e0:14:6f:5c:5d:b9:cf:5e:10:b3:a1:ee:
f6:fa:82:63:49:72:e2:ff:de:ae:19:3d:0f:15:d2:19:a0:ca:
f6:d1:ea:96:4a:bf:73:57:01:d1:d4:de:ef:bb:ef:54:43:0f:
7e:eb:a1:a3:65:bb:73:53:d5:3f:7f:14:73:6f:0a:c2:b3:0b:
64:68:39:67:ad:93:b3:d5:33:94:c5:b6:1d:2e:05:bb:b5:c0:
d3:01:2f:36:9d:f1:99:75:ce:be:bf:37:37:67:c1:39:3e:bd:
cb:05:ae:f1:f7:5a:50:8b:1e:ce:05:b1:fb:32:61:7f:85:f1:
a1:68:67:6e:47:7c:3f:99:ca:b4:c1:48:c4:a0:d6:84:75:d3:
d1:8a:04:6e:8b:a0:15:67:e4:88:fe:ed:db:85:18:cb:8b:1e:
ca:dd:df:a0:5c:c8:16:34:a1:a9:80:27:0e:7e:8e:36:d6:54:
1f:2e:10:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:50:26 2026 by rpki-client