Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
File: QIVi4riWGyLinHYtbJkDMbo2Zm8.mft (raw, json)
Hash identifier: IRZZntTwkCWxDAGaxwOwLwCgNCyIewh3Q+HgfY1FTmQ=
Subject key identifier: D1:7A:83:2E:4F:F5:46:12:4A:CB:3D:3A:71:E2:76:48:E6:25:2F:AD
Authority key identifier: 40:85:62:E2:B8:96:1B:22:E2:9C:76:2D:6C:99:03:31:BA:36:66:6F
Certificate issuer: /CN=408562e2b8961b22e29c762d6c990331ba36666f
Certificate serial: 01A1DD9532863EB35DD6FC59AE562EB3A860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
Manifest number: 17B0
Signing time: Sun 15 Nov 2026 05:01:44 +0000
Manifest this update: Sun 15 Nov 2026 05:01:44 +0000
Manifest next update: Mon 16 Nov 2026 05:01:44 +0000
Files and hashes: 1: QIVi4riWGyLinHYtbJkDMbo2Zm8.crl (hash: W/5wTZ3A6DLbSvcdUupT0EdYrzk/6dHWeWEONSPdn9w=)
2: fJkHv2XKmgf3wdAAPhmkHMSymi8.roa (hash: moVcLbH6Jw6NJ/DI/9GEobHmBwmywaAnRhkWYEC9LnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:95:32:86:3e:b3:5d:d6:fc:59:ae:56:2e:b3:a8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408562e2b8961b22e29c762d6c990331ba36666f
Validity
Not Before: Nov 15 05:01:44 2026 GMT
Not After : Nov 16 05:01:44 2026 GMT
Subject: CN=d17a832e4ff546124acb3d3a71e27648e6252fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:97:72:15:ce:0a:fd:5f:f0:99:39:9e:fa:ea:
e0:a0:a2:15:0e:32:d7:58:de:96:6c:4c:c8:cb:42:
4a:32:91:b6:d3:18:2f:9d:b5:a0:b5:b9:cf:40:b0:
e7:c2:7d:20:5f:fb:07:bd:1c:79:47:c6:73:74:a8:
e3:5f:a1:3b:8d:bd:af:19:16:90:65:36:37:25:3c:
8f:7a:eb:7f:f7:79:f0:60:21:10:cd:5b:40:12:5b:
c0:ae:89:ad:7c:71:a0:18:73:b3:ed:c5:31:9a:0b:
2e:a1:f1:44:57:5b:25:ea:91:75:a9:5c:82:4d:46:
ef:68:b7:81:72:3c:f0:6f:2b:42:9e:41:3f:b6:c4:
e4:a7:3c:45:f8:89:a3:90:ec:92:f7:f2:eb:f6:9c:
3f:dc:d1:8b:be:18:77:03:ba:6b:d0:ec:bb:54:86:
6e:69:41:6b:89:0e:35:ab:0f:d0:29:4c:e9:18:b5:
06:c6:2a:b7:e8:a0:5e:5a:c6:7b:5c:3a:92:65:d9:
ca:36:4d:16:05:09:3f:84:3f:a2:b9:91:fa:f1:a2:
14:5b:9c:73:89:6b:c1:c2:cc:e5:63:f4:9f:c6:a1:
01:5b:73:ba:60:1a:a2:ce:b9:5a:32:05:42:db:36:
a1:ed:4f:c4:2e:83:fb:d4:84:84:92:bb:be:21:0b:
f4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7A:83:2E:4F:F5:46:12:4A:CB:3D:3A:71:E2:76:48:E6:25:2F:AD
X509v3 Authority Key Identifier:
keyid:40:85:62:E2:B8:96:1B:22:E2:9C:76:2D:6C:99:03:31:BA:36:66:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:75:97:5c:32:6c:4a:14:67:53:e0:2c:97:6b:f4:45:9d:41:
d9:57:11:90:5d:ea:8f:86:dd:f9:c2:08:60:e5:fb:9d:ea:b6:
d6:fc:2f:e0:21:82:bc:19:28:cc:3f:ad:1e:84:98:ad:69:99:
93:af:f9:a9:c1:6a:bb:c7:f5:6f:22:5c:3f:27:5e:83:1e:c1:
d9:19:a3:15:8c:0f:dd:17:54:0f:29:25:69:47:5d:61:f5:67:
04:79:64:68:77:55:f7:b2:7c:8d:84:8a:82:a5:dc:92:b7:0c:
e0:0c:f7:20:49:29:a4:82:97:39:93:01:f0:7e:f2:3c:ac:4d:
b0:ac:71:6d:21:42:fd:5c:a8:4d:bc:4b:f1:58:1f:d9:aa:5e:
d1:2a:3c:ea:80:3f:24:61:29:95:76:d9:c2:f1:2c:9c:c8:78:
b7:d0:d7:b4:78:8e:a0:fa:ff:3e:6e:42:7c:f1:59:b6:39:3c:
b8:a5:56:67:20:78:d9:88:0a:01:cc:c5:cd:2c:30:aa:c5:4d:
7f:bb:5d:99:1f:fe:69:fe:33:7b:eb:80:3a:99:f3:28:e3:f4:
f0:8d:1e:cc:f4:e8:d0:5b:ae:4e:b5:ea:e4:c5:5c:4e:8d:d6:
4e:65:17:ad:7f:0d:39:4f:c1:17:13:fa:38:d1:b4:7d:b3:92:
94:9d:1d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:07:45 2026 by rpki-client