Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
File: Qkq4x890A7ViChuBPmrR2g2stE0.mft (raw, json)
Hash identifier: vUzoY+Okr3ylWzGdznaTY837Rc84gt6pEidGIGhJG2I=
Subject key identifier: 87:70:1C:EA:39:CD:2D:16:B7:88:22:E3:69:16:4C:5C:CA:C8:0D:1C
Authority key identifier: 42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D
Certificate issuer: /CN=424ab8c7cf7403b5620a1b813e6ad1da0dacb44d
Certificate serial: 01A0FD221C2059002D7967F85BC53541C926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
Manifest number: 1A85
Signing time: Fri 02 Oct 2026 15:01:06 +0000
Manifest this update: Fri 02 Oct 2026 15:01:06 +0000
Manifest next update: Sat 03 Oct 2026 15:01:06 +0000
Files and hashes: 1: Qkq4x890A7ViChuBPmrR2g2stE0.crl (hash: 2sPXld1ba66FwyLKhXvrQPrypmu+vuMXN2othmWP6e4=)
2: dzTzYf-TKYJMVkOvvaBfstjTJ9w.roa (hash: ZIgS2/isxUOPCfVNIh153dBZ1pmUGjEqXD0BSekDaHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fd:22:1c:20:59:00:2d:79:67:f8:5b:c5:35:41:c9:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424ab8c7cf7403b5620a1b813e6ad1da0dacb44d
Validity
Not Before: Oct 2 15:01:06 2026 GMT
Not After : Oct 3 15:01:06 2026 GMT
Subject: CN=87701cea39cd2d16b78822e369164c5ccac80d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d4:d0:fa:5d:8d:bc:d3:72:6e:2a:ca:32:f7:
3d:a7:f4:05:c4:b0:a6:68:6d:0a:79:94:ab:a2:6a:
17:11:b6:db:b2:d9:7b:f0:a1:26:ea:d9:3f:ef:fc:
33:b6:5f:5c:e2:47:05:49:da:7d:93:2e:3d:5f:0d:
f2:48:3e:e2:81:46:fe:d3:25:b3:a1:10:72:9a:28:
9d:bf:d1:3d:9b:3f:88:d0:62:4e:94:05:e5:c0:8d:
df:18:90:27:cb:4c:60:65:b3:31:6a:51:4b:cd:6c:
a9:b2:4d:23:7b:f0:70:aa:b8:8c:03:bb:5f:84:27:
b7:be:a4:db:5e:a2:4d:85:a7:34:29:7b:10:ba:13:
72:01:04:16:71:78:1b:15:d2:8d:74:5b:e2:ee:3f:
16:85:7f:b2:72:f7:f4:b7:c2:c3:ae:5c:97:86:94:
e3:13:3a:d3:e0:ba:14:80:cf:38:f2:d9:1b:6e:06:
70:98:48:8b:66:d7:b3:80:b2:37:d9:99:91:72:1e:
72:60:a5:f5:57:ea:6f:72:c7:a4:6a:d2:45:83:41:
59:5c:c3:3a:14:5a:22:57:59:2c:c5:f4:62:da:a4:
e7:ac:ab:e8:1b:69:06:74:11:b3:3a:d4:11:2f:d7:
8e:c3:8b:cb:51:a7:bb:07:a2:72:ad:f8:6f:03:64:
0b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:70:1C:EA:39:CD:2D:16:B7:88:22:E3:69:16:4C:5C:CA:C8:0D:1C
X509v3 Authority Key Identifier:
keyid:42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f8:ef:cf:39:cc:05:32:00:8f:8d:9b:dd:6e:95:5c:1a:db:
aa:14:05:aa:4e:e6:86:d0:d8:c6:9e:b6:4e:7d:aa:9d:88:09:
05:bb:cb:dc:da:e4:d2:9e:e7:a9:e2:37:82:13:7f:e4:fb:1b:
eb:a3:a8:65:b8:91:49:5a:d3:20:86:e9:6b:2a:02:46:63:74:
07:8f:c7:15:0d:18:80:b7:13:1f:8c:46:23:2b:3c:61:3b:28:
f6:aa:df:be:41:ca:b6:0d:cc:30:89:83:6b:8b:a5:75:e0:32:
75:61:f9:f1:9b:99:c5:94:81:80:d6:35:51:13:90:f1:ae:0b:
12:51:26:06:2f:8f:d9:1d:96:55:ff:6b:d6:db:3d:79:db:74:
66:c7:d2:b6:35:48:7b:0e:09:e8:46:93:9f:25:72:37:b0:e6:
81:83:33:eb:6f:f6:b0:24:a0:9b:2d:ce:1a:68:d6:2e:e4:1b:
43:e8:f5:81:7f:3d:34:12:74:a3:89:d9:33:6b:fd:0b:7d:22:
d8:70:98:0d:dc:0f:ca:81:45:1f:d7:71:fb:13:9c:50:fd:75:
3e:87:01:63:c1:3f:82:06:21:3e:72:7c:83:d2:7a:4f:af:13:
76:f1:3d:37:e5:6b:53:1e:5b:a8:bf:07:04:ae:40:bc:d1:73:
44:86:b1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 19:03:28 2026 by rpki-client