Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
File: qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft (raw, json)
Hash identifier: UNel8RSmvvNDIiwu4rv8SOSCUQzB1TzrkZxSL5FmS1Y=
Subject key identifier: FE:5A:10:01:33:40:AA:75:B4:38:7B:E3:A0:C1:FA:3D:EF:CB:BC:C2
Authority key identifier: AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3
Certificate issuer: /CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
Certificate serial: 01A1DDCBBEA5EA970DD9EDB5C26B8B6D9372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
Manifest number: 1AF7
Signing time: Sun 15 Nov 2026 06:01:19 +0000
Manifest this update: Sun 15 Nov 2026 06:01:19 +0000
Manifest next update: Mon 16 Nov 2026 06:01:19 +0000
Files and hashes: 1: HnCge9v0VMFv4p4n7gbHmPrHGJY.roa (hash: d62k4x4IFTUWXOO9eicQRIOUN/u5FXiup6Gnw1Q4kpc=)
2: M5Pjk3-Iv7owCPOWJdu9RksUoQk.roa (hash: 0apaBVPVgcAHb1VlUzCJsDR4I1XWTpJr/hHmPBPsgfc=)
3: RfnkqIe2fHDUVZT4yILbhKXutw4.roa (hash: GT4F8iAiZzVkJzzHLTAMNw/dN/RUobDqO6F2Kw345n4=)
4: qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl (hash: INAGVGQfyaaQIhmCeXuJq7UsDruunSGUIN0j3fB2w3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cb:be:a5:ea:97:0d:d9:ed:b5:c2:6b:8b:6d:93:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
Validity
Not Before: Nov 15 06:01:19 2026 GMT
Not After : Nov 16 06:01:19 2026 GMT
Subject: CN=fe5a10013340aa75b4387be3a0c1fa3defcbbcc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:59:85:bd:24:2b:f1:95:cf:5c:ef:77:32:45:
a5:f7:45:72:29:73:b6:9d:ce:c6:7e:04:a8:2f:27:
4d:65:15:1c:25:4b:7c:b5:e3:6e:a3:07:18:9f:89:
23:02:cc:30:30:39:f0:d3:ae:47:f3:37:9f:e7:74:
cd:ef:ad:e1:79:ac:cd:e0:65:34:97:6c:33:08:75:
7e:1e:2e:2c:93:ac:4d:57:bf:0e:10:53:8d:8c:b9:
60:f2:cd:38:27:00:46:80:b7:91:fa:ef:1a:e2:d2:
4e:16:e4:9f:5a:4d:cc:e2:58:66:62:fb:ba:f2:8b:
ba:fb:54:c3:7a:02:3f:fb:95:87:23:84:d3:78:94:
40:f2:af:18:32:4b:28:38:01:ec:c7:85:77:75:65:
77:18:68:58:85:97:c4:25:ba:bf:80:49:e2:ad:52:
88:de:73:5e:21:01:bb:2b:b2:82:53:86:0e:ba:83:
20:03:3c:d6:b5:36:f6:14:9c:b6:0f:12:93:f2:92:
a3:c2:f4:97:67:80:55:7a:01:a2:24:3c:0e:e6:2f:
8f:95:67:ac:a6:3f:39:4b:b1:59:b8:9a:ad:e6:c8:
d3:61:98:4c:04:5e:73:0e:9e:65:59:9d:f3:4d:f0:
4e:75:a6:d8:2c:46:85:e3:2a:c3:34:c2:e7:7c:d0:
2f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:5A:10:01:33:40:AA:75:B4:38:7B:E3:A0:C1:FA:3D:EF:CB:BC:C2
X509v3 Authority Key Identifier:
keyid:AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:04:87:63:93:4d:c2:b5:55:f0:c4:50:7b:71:40:26:97:26:
a6:50:78:76:0a:d0:63:c2:41:6f:d1:f1:b5:97:6d:7a:4d:7a:
d8:e2:22:89:cd:a5:99:e4:48:7a:ad:b1:e0:26:44:e7:76:ba:
74:a0:2a:cd:5d:fc:03:4a:78:ed:0b:63:b4:3b:e6:6a:0e:57:
a5:0a:cb:36:b1:45:29:28:ec:35:60:09:17:75:ff:21:b4:aa:
74:22:92:58:38:d8:3b:cf:53:6d:75:f6:52:c3:4c:6a:8d:c4:
15:3a:ad:e6:9f:72:49:24:14:72:32:5a:b1:20:31:44:37:f5:
f2:74:5e:46:94:28:d4:93:58:36:d0:ef:a8:3e:c8:b5:82:36:
16:19:44:aa:43:70:12:5d:ee:63:2e:43:94:d9:14:fb:dc:1b:
6c:4a:df:74:40:56:c5:46:a9:89:f8:8c:39:77:81:7b:c6:a1:
14:2f:c2:ae:fd:6f:25:6b:04:23:47:37:17:9f:79:aa:88:e7:
20:97:d5:ab:48:69:93:33:fb:d4:83:5a:6a:43:71:67:db:f5:
46:ef:7d:a3:6a:40:8e:d5:6b:0e:25:15:cd:07:f0:18:9d:f6:
15:1e:29:db:1d:6c:65:47:1a:33:fe:b7:53:c5:3e:33:36:be:
f6:94:78:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:32:48 2026 by rpki-client