Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
File: qBfHRT83fpy2-uXIk8Bno-HTUUU.mft (raw, json)
Hash identifier: X4jjp1P9PSte/foPU5zxd04ByW15YRVLc3F8Uu7aWtY=
Subject key identifier: 0A:5B:26:00:63:F0:E1:6E:1D:4A:04:BF:2B:CE:19:D6:F0:74:C3:20
Authority key identifier: A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
Certificate issuer: /CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Certificate serial: 01A1DCB8FC77C30DC16B55FEA0833F24C55A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
Manifest number: 1318
Signing time: Sun 15 Nov 2026 01:01:13 +0000
Manifest this update: Sun 15 Nov 2026 01:01:13 +0000
Manifest next update: Mon 16 Nov 2026 01:01:13 +0000
Files and hashes: 1: bDniOy7bJDqEB7j18XhIORHd9P4.roa (hash: 7UeZ8ffZs41TrgD9TFvep3setoYXza5q1+hwG2ZnLPc=)
2: ce9B0xiqGv3-6XVsohVP_4mQ2nc.roa (hash: bZXcOl6PpFz9za7K+EZymB9rux3LD9nnlgPnINrzVx8=)
3: qBfHRT83fpy2-uXIk8Bno-HTUUU.crl (hash: jucpwQ/HlVErDLtS7bomuffW/cMY38Do2KSOhHZSO/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:b8:fc:77:c3:0d:c1:6b:55:fe:a0:83:3f:24:c5:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Validity
Not Before: Nov 15 01:01:13 2026 GMT
Not After : Nov 16 01:01:13 2026 GMT
Subject: CN=0a5b260063f0e16e1d4a04bf2bce19d6f074c320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:74:72:81:5f:55:fd:6e:f2:04:81:43:fc:85:
fa:b7:79:6d:1b:c3:ec:8e:2f:57:44:45:45:3f:52:
24:4c:68:37:2e:6a:e1:23:df:3e:22:aa:6e:a4:40:
d2:8d:93:f5:12:8f:55:81:b2:70:75:b3:b3:61:08:
d6:b3:fc:64:3a:c6:58:0f:f3:ba:6f:af:9d:e3:ca:
ed:bc:35:3d:21:28:4d:c0:6d:13:87:56:90:87:60:
0b:65:63:27:bd:dc:fc:48:8b:fd:24:85:5a:c3:a4:
83:19:14:27:c3:35:19:f3:42:3e:e6:94:26:98:73:
5e:ef:48:31:20:ef:2f:94:7d:69:a5:5d:6a:28:0c:
39:cb:de:8a:d9:fc:4a:4d:b4:36:cd:b9:48:d4:68:
3c:70:23:11:f2:ea:91:ef:57:79:2c:eb:0e:ff:0e:
9c:4d:b8:34:7a:bc:2c:06:37:ce:fa:01:fb:96:f1:
10:96:3e:b5:2b:a9:68:1f:0d:ea:9d:3a:fa:76:81:
13:35:97:8a:fd:c6:6e:bc:ed:1b:9c:61:31:ef:02:
42:cb:47:11:51:0e:43:eb:ef:37:62:f9:c0:b6:23:
73:b3:49:8d:0d:b0:bc:8f:73:7f:e8:07:15:4f:03:
e5:82:2c:e0:3b:49:4e:05:1a:38:63:7f:4f:ee:82:
d8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5B:26:00:63:F0:E1:6E:1D:4A:04:BF:2B:CE:19:D6:F0:74:C3:20
X509v3 Authority Key Identifier:
keyid:A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:1f:3e:a0:5e:18:00:59:6b:a1:a2:c4:63:96:0e:d9:32:63:
78:87:3c:5a:1d:2b:3f:62:ef:d0:75:52:ed:0b:2f:56:64:c5:
06:27:67:b2:7d:98:63:d3:3a:50:52:00:b2:ad:ad:ca:f5:e9:
c1:50:80:b9:4d:c6:26:3c:48:d7:06:a0:09:9c:bf:4b:96:03:
25:8d:50:85:a1:2e:57:3e:13:4e:65:3c:40:7b:7b:ca:a4:37:
03:f4:9c:27:06:62:31:1b:b3:86:04:1d:41:bf:4f:19:eb:3a:
f0:12:ae:a1:80:3d:38:ae:a3:ed:c3:fb:08:e6:3c:40:1d:86:
5b:7f:04:02:77:e2:ad:4f:66:83:ed:0d:7b:4c:eb:2f:29:c0:
72:cc:b7:78:fc:32:6b:0e:01:9f:8c:ac:3b:3a:03:a8:10:64:
e8:01:18:a7:94:49:40:3c:2b:23:1a:10:65:d3:47:b8:86:1c:
e5:9f:c4:47:ff:1f:78:8c:47:c8:98:3c:d2:98:64:f9:3a:a3:
11:5a:b1:08:1f:ca:a8:68:b6:39:eb:43:7a:6d:6c:69:ab:a6:
ba:24:18:f1:39:78:ba:c0:bd:8d:3a:67:38:2b:12:ca:6a:4d:
7b:57:08:f8:ca:6a:3c:fe:72:cb:f7:fb:ec:60:23:56:dc:0e:
2d:4e:2b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:33:40 2026 by rpki-client