Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
File: mQqAlo5MlgPKKxPdHRRlll2PPb8.mft (raw, json)
Hash identifier: GLx3Ay5Fy2jSsOXic0CGFvO0yKPvSPTyzv06uLZHI9E=
Subject key identifier: 3F:D9:89:70:66:BB:A5:65:2D:4D:96:9B:21:0E:CE:8A:1C:67:DB:6D
Authority key identifier: 99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF
Certificate issuer: /CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf
Certificate serial: 01A1396D8792B83CD904AF53A88D80B2EFC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
Manifest number: 1AA3
Signing time: Wed 14 Oct 2026 08:00:41 +0000
Manifest this update: Wed 14 Oct 2026 08:00:41 +0000
Manifest next update: Thu 15 Oct 2026 08:00:41 +0000
Files and hashes: 1: VDiwRo_Dw3VQnAnWwxslVlwLHTI.roa (hash: eyvaXZ1DgOHbc16lk8yXQEwz4POlL+tLjFw5QFZgFv4=)
2: VhZZqyHl4RcvVrDtF9S5qJYdsrI.roa (hash: 8RcjIqSIrUsAtUqmpBMu/l4viLpz4Dni8fqFOKIrXPc=)
3: mQqAlo5MlgPKKxPdHRRlll2PPb8.crl (hash: i/ah4wC+AO07f1db44XuHFryIhOPvQGnYc6GKEOzbjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 07:28:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:6d:87:92:b8:3c:d9:04:af:53:a8:8d:80:b2:ef:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf
Validity
Not Before: Oct 14 08:00:41 2026 GMT
Not After : Oct 15 08:00:41 2026 GMT
Subject: CN=3fd9897066bba5652d4d969b210ece8a1c67db6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:79:ee:90:c6:64:f0:5c:6a:35:f0:73:af:57:
8d:72:10:af:03:46:39:2b:02:02:81:55:ad:e5:af:
83:74:57:07:01:73:d3:81:76:85:2a:55:cc:d7:f3:
11:31:cb:db:00:74:dc:41:19:2b:a1:57:8a:54:fa:
a3:46:6a:94:d9:3b:bb:74:0d:bd:49:1d:65:36:b5:
97:53:4b:7c:76:1f:a8:cb:82:d7:03:54:fd:84:2a:
d6:27:b4:c8:e2:17:05:e5:82:47:ae:f3:d1:92:9e:
d0:37:20:78:0d:b4:42:1a:bd:18:0a:9b:a5:05:cb:
8a:75:8e:70:aa:78:f3:21:3d:38:15:22:51:c0:c5:
a7:6e:37:a2:da:f0:51:2e:46:75:0d:40:13:b3:a2:
03:fb:df:cb:28:3a:54:39:87:80:f0:a7:a5:43:99:
d5:b7:d7:39:d6:21:70:59:bd:13:00:b0:2c:23:b0:
24:4a:83:fe:24:85:11:c1:4b:8e:08:0d:78:47:c3:
7a:41:c3:38:06:50:a9:22:78:e3:00:33:93:9c:af:
eb:35:41:35:b2:96:14:5d:29:f9:28:56:fb:30:e5:
2f:73:c8:4d:40:eb:f5:93:9b:1d:99:64:12:58:20:
05:9d:1c:1a:89:03:9c:35:5d:cf:e5:40:54:af:83:
53:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D9:89:70:66:BB:A5:65:2D:4D:96:9B:21:0E:CE:8A:1C:67:DB:6D
X509v3 Authority Key Identifier:
keyid:99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ce:ea:5c:38:d6:c6:a0:46:97:64:ab:ab:0e:f6:05:ea:45:
94:02:a1:6a:c4:7a:41:c8:67:a9:2e:bf:98:39:a3:4f:c2:95:
83:26:c5:5a:22:25:e8:43:7a:e1:d9:2d:28:b4:b7:d3:87:69:
9f:ab:86:0f:89:28:95:24:03:b9:46:4b:83:35:d2:69:85:a0:
41:d8:b6:5d:1c:bf:c9:4e:a7:8a:5f:e2:31:f9:58:62:97:75:
2c:63:57:5f:d9:f0:9d:d5:66:43:cb:87:d3:ff:26:db:21:bd:
30:fb:d3:03:c5:0c:e9:7d:a1:4f:59:18:44:0d:66:7d:12:bc:
0e:a2:7e:49:d5:e4:5e:f3:39:c6:ac:3d:56:94:14:dc:b1:76:
56:c6:af:52:d6:72:59:f1:5a:55:b1:c4:6c:cc:ac:91:a0:30:
8b:96:db:20:8b:e2:17:25:0a:c7:98:f9:f9:01:13:93:bb:46:
28:8f:2f:a5:a7:c7:00:dc:bf:22:0a:52:3f:13:d8:de:0c:60:
55:e1:d8:29:57:50:83:8b:b0:2f:ec:25:6d:cc:05:a8:47:ac:
44:90:52:f1:3a:fd:bc:86:e8:11:b0:26:e4:db:3a:e5:db:2d:
29:6f:11:ed:da:b9:67:38:15:38:ae:91:62:6c:c9:73:5d:98:
92:9c:59:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 11:55:13 2026 by rpki-client