Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/qkX4D4X2h6ReMMhzqqW0VbSxF7A.mft
File: qkX4D4X2h6ReMMhzqqW0VbSxF7A.mft (raw, json)
Hash identifier: w6NYuufhajW5dkH3NutKsOPpnGQv8tgFvxpfPZaybV8=
Subject key identifier: 75:6E:D6:8A:B2:35:15:7C:9D:60:17:70:25:0D:18:58:A3:86:03:AE
Authority key identifier: AA:45:F8:0F:85:F6:87:A4:5E:30:C8:73:AA:A5:B4:55:B4:B1:17:B0
Certificate issuer: /CN=aa45f80f85f687a45e30c873aaa5b455b4b117b0
Certificate serial: 01A1E05F45F5C0529A332D99FE038864F65D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkX4D4X2h6ReMMhzqqW0VbSxF7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/qkX4D4X2h6ReMMhzqqW0VbSxF7A.mft
Manifest number: 0172
Signing time: Sun 15 Nov 2026 18:01:42 +0000
Manifest this update: Sun 15 Nov 2026 18:01:42 +0000
Manifest next update: Mon 16 Nov 2026 18:01:42 +0000
Files and hashes: 1: U24ztcfwe3Tx-MO4rdSFI0KvV9A.roa (hash: gljBzuHljgAofqghGfm0+QrU01lsOtyBOdrBsukDw8w=)
2: qkX4D4X2h6ReMMhzqqW0VbSxF7A.crl (hash: tsPrMXDZcwZyc7cghl+ihnSsktmpnWds2N+YCuww4WE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/qkX4D4X2h6ReMMhzqqW0VbSxF7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/qkX4D4X2h6ReMMhzqqW0VbSxF7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkX4D4X2h6ReMMhzqqW0VbSxF7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:5f:45:f5:c0:52:9a:33:2d:99:fe:03:88:64:f6:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa45f80f85f687a45e30c873aaa5b455b4b117b0
Validity
Not Before: Nov 15 18:01:42 2026 GMT
Not After : Nov 16 18:01:42 2026 GMT
Subject: CN=756ed68ab235157c9d601770250d1858a38603ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4f:70:d2:17:88:6c:03:96:8d:65:08:98:3b:
2a:84:eb:6b:f5:92:55:bf:fc:b2:98:be:02:df:63:
34:57:ae:8a:39:27:30:b2:42:85:e5:e5:6a:a2:71:
e5:9f:7a:c4:a1:ce:f6:52:17:00:07:29:86:29:e8:
8e:fc:2f:5f:bb:85:b3:27:86:c9:1f:95:93:6c:b8:
2b:d8:be:5c:f6:e8:94:3b:a9:93:22:58:df:ed:33:
5c:2a:c4:f8:6f:45:38:10:db:74:cf:86:4f:40:38:
5a:12:70:3f:c9:c1:f7:50:71:fd:4c:55:ce:16:8a:
df:a5:8b:bc:61:3f:92:b7:a5:3a:c0:29:9e:11:96:
46:1c:40:08:8b:b9:0b:dd:94:7f:02:c2:9a:53:e1:
b8:5c:6e:21:bc:3e:fc:65:87:64:b6:99:72:cc:85:
f4:ba:c1:5f:2e:30:09:52:dd:65:07:33:74:aa:00:
b2:f1:8b:3d:a4:c8:f1:a1:5e:b2:4e:34:49:bc:6d:
df:b0:7b:87:1d:e7:f7:da:42:b4:5b:d1:f8:7b:c7:
3f:a3:84:d3:ba:ff:ea:ef:2c:34:2b:a7:60:91:f0:
31:07:48:48:37:bc:2f:c4:1d:90:e3:6b:3e:c2:aa:
94:3b:c2:23:8b:1d:89:17:51:9f:03:f5:a9:24:04:
f2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6E:D6:8A:B2:35:15:7C:9D:60:17:70:25:0D:18:58:A3:86:03:AE
X509v3 Authority Key Identifier:
keyid:AA:45:F8:0F:85:F6:87:A4:5E:30:C8:73:AA:A5:B4:55:B4:B1:17:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkX4D4X2h6ReMMhzqqW0VbSxF7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/qkX4D4X2h6ReMMhzqqW0VbSxF7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/qkX4D4X2h6ReMMhzqqW0VbSxF7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:b4:5b:02:0d:9e:01:ed:9d:90:52:08:c7:f5:9e:0e:b4:a2:
cf:56:51:3c:3b:f3:ba:96:9e:dc:82:14:77:c4:b1:b4:20:1a:
f2:9e:38:3f:18:f7:69:c3:48:64:d6:6d:64:ba:a6:70:d3:f2:
07:10:16:26:58:ed:1a:1a:f4:07:05:39:22:d9:58:f6:cb:e9:
05:4f:72:5f:b6:1c:f1:7f:79:bc:d0:99:98:51:01:46:58:41:
83:11:70:59:ba:a0:01:44:72:a7:d6:17:1a:9d:91:af:76:1d:
17:25:46:2c:e7:55:1d:82:27:c3:0a:6d:79:c1:85:b5:ba:c5:
5e:a5:5d:69:3a:a2:93:aa:3f:53:d4:f1:29:b4:99:12:ca:64:
73:2f:20:05:37:e4:76:9e:a6:1a:3a:0b:dc:1a:76:80:0d:3e:
d9:ef:b5:3d:6e:cf:bd:bf:20:21:a0:a8:3a:f1:20:c3:c3:fc:
21:8d:50:ba:20:bb:27:18:87:f1:04:7d:ef:93:bf:e8:eb:74:
60:7f:25:35:6a:89:ec:c8:dd:85:12:74:be:97:ec:60:5c:0a:
91:65:a5:a6:60:8d:61:13:55:0b:bf:d0:cc:29:87:da:da:42:
83:3f:2a:f1:df:f2:cb:cc:ad:9f:6d:e6:8f:fd:27:ce:77:25:
7b:49:8b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:14:37 2026 by rpki-client