Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
File: qYB_bVDZfZcdzy4uUGTpuQets-w.mft (raw, json)
Hash identifier: KykzJpDY41inFfvAkvKiag33liY0014ls30qoxyblDU=
Subject key identifier: 6B:45:F7:CB:7B:9A:A7:E8:3C:43:68:99:A4:E8:F7:15:38:D9:1E:6E
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial: 01A1DA93F8B43B90EB9E413A37F2EC483824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
Manifest number: 1B22
Signing time: Sat 14 Nov 2026 15:01:32 +0000
Manifest this update: Sat 14 Nov 2026 15:01:32 +0000
Manifest next update: Sun 15 Nov 2026 15:01:32 +0000
Files and hashes: 1: MUooZ1Ov9expLMpavng4DbjsbpE.roa (hash: eswDXNZ/AXtbqsm+yzDr7T0oqWysTnskZK6VmBCDemc=)
2: qYB_bVDZfZcdzy4uUGTpuQets-w.crl (hash: HJLuX1oVImGPyGsh9WlS5M3i+oM4wu6qDRHoPSmKSxE=)
3: rX1Ss2CK_g4_GFrLEnzxw6wGXIU.roa (hash: cw+3g+tlflCYhhvX9gDsDKPmWsCROnLpk0xinhWv2AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:93:f8:b4:3b:90:eb:9e:41:3a:37:f2:ec:48:38:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Validity
Not Before: Nov 14 15:01:32 2026 GMT
Not After : Nov 15 15:01:32 2026 GMT
Subject: CN=6b45f7cb7b9aa7e83c436899a4e8f71538d91e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f4:b8:7c:28:c4:47:05:db:a9:20:dd:94:0a:
13:a5:fa:54:39:31:8d:e3:6d:fb:ed:54:3f:98:7b:
ae:fb:b1:02:10:dd:db:9b:b8:21:b7:87:2f:93:8e:
fb:c9:e0:9b:5f:1f:ca:e3:cf:9a:cc:e0:64:9d:8d:
5a:16:11:99:a6:12:dd:61:4c:57:64:ab:75:66:4d:
37:aa:d5:27:2f:64:1f:73:06:ff:1d:7a:3d:8b:b3:
6e:7d:5a:31:d2:a6:9c:0d:f1:36:d1:98:45:47:7a:
41:af:26:23:34:1a:40:f7:45:ac:ca:68:46:e2:e6:
7f:b9:f2:e1:62:b6:d3:6f:98:c1:42:93:24:d4:b4:
27:de:7d:76:f0:ec:e1:24:fc:bd:57:66:72:04:24:
9e:67:e9:5f:d9:74:1f:da:84:17:74:07:8a:56:bf:
3d:a6:e0:8b:c6:a2:d2:ea:ab:bc:c0:9d:4f:e8:40:
2b:1b:6e:fc:67:7d:08:7d:dd:9c:13:39:05:3d:e3:
3b:5e:d1:a1:fc:5a:4e:15:84:54:be:6b:c4:bc:3c:
65:c9:32:3f:f8:17:27:6e:0d:9a:0f:1f:9b:2f:6b:
ef:21:38:f7:37:6b:dc:b1:75:5f:a5:02:a7:f1:b1:
03:bd:e6:f0:8e:4d:34:6c:5f:f3:18:ef:1c:91:4c:
76:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:45:F7:CB:7B:9A:A7:E8:3C:43:68:99:A4:E8:F7:15:38:D9:1E:6E
X509v3 Authority Key Identifier:
keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:7e:6e:dd:d9:48:85:91:d0:b1:68:37:bf:b8:66:61:d2:cd:
88:d7:ee:d8:ec:27:0e:41:e8:7d:82:06:b8:10:c7:d4:c6:24:
1e:90:d5:e8:d6:94:12:10:d7:99:6e:f3:2e:fa:74:14:78:ae:
da:0d:ac:7b:54:c6:49:00:03:22:36:8b:08:21:48:f1:58:b3:
6e:ea:37:d3:bc:5a:11:31:34:ab:7f:77:f4:f3:ec:b4:c7:c7:
a3:74:8a:9c:14:df:74:e1:39:1d:de:ec:65:b9:32:5c:54:7f:
a3:96:91:53:f0:74:3f:86:0a:52:32:4e:98:09:70:51:c0:ca:
9d:7a:4e:91:9e:d3:a7:7b:01:93:6b:8c:36:ab:5b:de:d4:0e:
ab:5a:55:69:c2:85:fb:6c:1e:38:9a:33:e9:99:98:54:6f:13:
8d:23:29:c1:cd:d9:da:19:93:f2:19:58:be:9d:b9:ee:23:6e:
34:8a:4c:eb:e5:97:66:44:16:00:7c:dd:96:3f:f5:15:de:7d:
4f:97:2a:54:71:10:47:2b:0f:91:32:f4:52:df:b3:53:8d:55:
e0:d0:a5:6c:b3:37:33:ea:17:4f:35:d3:d8:ab:31:33:b1:1f:
5b:26:43:05:d3:08:e2:6c:59:6f:21:d3:df:28:ba:00:4e:33:
b3:1a:eb:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHak/i0O5DrnkE6N/LsSDgkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ODA3ZjZkNTBkOTdkOTcxZGNmMmUyZTUwNjRlOWI5MDdh
ZGIzZWMwHhcNMjYxMTE0MTUwMTMyWhcNMjYxMTE1MTUwMTMyWjAzMTEwLwYDVQQD
Eyg2YjQ1ZjdjYjdiOWFhN2U4M2M0MzY4OTlhNGU4ZjcxNTM4ZDkxZTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PS4fCjERwXbqSDdlAoTpfpUOTGN
42377VQ/mHuu+7ECEN3bm7ght4cvk477yeCbXx/K48+azOBknY1aFhGZphLdYUxX
ZKt1Zk03qtUnL2Qfcwb/HXo9i7NufVox0qacDfE20ZhFR3pBryYjNBpA90WsymhG
4uZ/ufLhYrbTb5jBQpMk1LQn3n128OzhJPy9V2ZyBCSeZ+lf2XQf2oQXdAeKVr89
puCLxqLS6qu8wJ1P6EArG278Z30Ifd2cEzkFPeM7XtGh/FpOFYRUvmvEvDxlyTI/
+Bcnbg2aDx+bL2vvITj3N2vcsXVfpQKn8bEDvebwjk00bF/zGO8ckUx2PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtF98t7mqfoPENomaTo9xU42R5uMB8GA1UdIwQY
MBaAFKmAf21Q2X2XHc8uLlBk6bkHrbPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jYTlkYmUtMDA5NS00MGYzLWI5MzIt
MGQ4ZjdkZDhjY2U2LzEvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9jYTlkYmUtMDA5NS00MGYzLWI5MzItMGQ4ZjdkZDhjY2U2
LzEvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW35u3dlI
hZHQsWg3v7hmYdLNiNfu2OwnDkHofYIGuBDH1MYkHpDV6NaUEhDXmW7zLvp0FHiu
2g2se1TGSQADIjaLCCFI8Vizbuo307xaETE0q3939PPstMfHo3SKnBTfdOE5Hd7s
ZbkyXFR/o5aRU/B0P4YKUjJOmAlwUcDKnXpOkZ7Tp3sBk2uMNqtb3tQOq1pVacKF
+2weOJoz6ZmYVG8TjSMpwc3Z2hmT8hlYvp257iNuNIpM6+WXZkQWAHzdlj/1Fd59
T5cqVHEQRysPkTL0Ut+zU41V4NClbLM3M+oXTzXT2KsxM7EfWyZDBdMI4mxZbyHT
3yi6AE4zsxrr8Q==
-----END CERTIFICATE-----
Generated at Sat Nov 14 20:53:22 2026 by rpki-client