Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
File: r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft (raw, json)
Hash identifier: gzLrfP9yj8yNhj9Tl+szFUl4gDKNo9kPdF6KpZGHZ1s=
Subject key identifier: 65:56:13:58:CE:B0:5E:B6:BA:C3:E8:F4:33:B8:FF:3C:6B:D1:2F:9A
Authority key identifier: AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
Certificate issuer: /CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Certificate serial: 01A0DC17A0ED529A7E15F32C1AECF913D225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
Manifest number: 1767
Signing time: Sat 26 Sep 2026 05:02:11 +0000
Manifest this update: Sat 26 Sep 2026 05:02:11 +0000
Manifest next update: Sun 27 Sep 2026 05:02:11 +0000
Files and hashes: 1: 0llklTGwRpo1D7HWMMbydisxDQ4.roa (hash: 3z2IZ4s8AyOuNF65gLQqbep0m2rYxv6RvjyL7CQP75U=)
2: QWs1csGK8KUFGhfj2QFKlBU8El0.roa (hash: 0iVAN86kduscSDUBK67oi4SEPANLs+DqgTgFkRGgbJQ=)
3: r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl (hash: n/rmojmM0mNlFg4oxUeFmOfHBL/M89WBqroHLo5KUwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 05:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:17:a0:ed:52:9a:7e:15:f3:2c:1a:ec:f9:13:d2:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Validity
Not Before: Sep 26 05:02:11 2026 GMT
Not After : Sep 27 05:02:11 2026 GMT
Subject: CN=65561358ceb05eb6bac3e8f433b8ff3c6bd12f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:71:22:ba:f7:6d:ef:3b:30:30:3b:e2:55:3d:
1f:93:2a:71:93:dd:a6:65:b2:a1:4c:c5:82:5c:59:
38:8b:db:27:c8:79:40:1a:de:0a:d1:12:b4:f8:ba:
67:f7:7d:fd:ab:f9:33:11:4b:63:d6:77:d6:31:0c:
12:7f:b2:e5:74:22:50:15:84:dc:ae:ee:34:b8:35:
bf:dd:9a:75:ca:d0:d8:de:94:74:5a:d2:d1:da:73:
72:61:07:7d:37:7b:54:ce:77:99:91:3a:e6:1a:2a:
47:fc:1a:c6:8b:05:db:23:95:6f:12:e0:66:fa:d7:
b6:cb:9d:08:fc:87:1c:36:64:26:f0:42:1a:4b:3e:
98:23:d5:16:76:27:56:6d:74:26:0b:20:92:72:57:
b0:60:f3:1f:31:5d:6b:e5:bd:b3:dc:bf:63:2f:1f:
a7:96:c4:da:bd:ca:65:10:25:96:39:62:c2:d7:ae:
3c:aa:26:2e:97:0b:a4:53:fa:d9:61:57:d5:f3:e2:
9d:07:c5:cf:0d:5d:d1:ae:89:8c:4a:0e:90:f3:49:
55:37:cc:2a:e3:fc:c7:79:78:84:db:67:34:07:3f:
f1:fc:5a:6c:be:36:b5:19:31:e6:59:17:33:c4:83:
97:21:8d:74:42:21:5c:59:06:04:35:47:fd:22:98:
53:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:56:13:58:CE:B0:5E:B6:BA:C3:E8:F4:33:B8:FF:3C:6B:D1:2F:9A
X509v3 Authority Key Identifier:
keyid:AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e6:62:f7:ac:b5:02:30:55:be:e3:da:dd:82:2a:c1:a2:b3:
9f:86:34:ea:c7:c7:e2:d6:ff:05:47:3d:ce:51:d7:fb:30:dd:
79:33:eb:d3:c3:bf:6d:92:8f:48:fc:70:c0:1a:4b:51:2d:d9:
5b:6c:0f:76:58:bf:1a:a6:84:92:20:8c:e7:35:b9:bb:61:e9:
c4:75:23:bd:2d:bd:a0:e1:4b:bd:30:af:7d:6f:51:c9:9e:05:
0d:55:0f:70:a4:1c:d9:c0:24:1f:26:35:cd:55:42:e4:1e:f7:
30:51:ff:2b:e1:4d:08:74:13:4e:25:3c:9b:88:12:55:a8:50:
57:94:f1:70:18:b0:9e:e8:8a:99:9f:ed:9c:8a:fe:ed:36:35:
3d:03:88:0b:25:81:6e:01:e2:2a:f7:d2:51:a7:48:62:5b:aa:
35:13:87:cb:1d:7c:bb:8b:69:9a:c6:15:28:b9:4a:a6:14:bc:
b1:53:e2:43:55:70:93:5d:18:f8:ce:22:d4:48:3a:e7:41:a3:
a0:86:50:93:31:13:8c:1a:a5:42:48:10:53:c0:d9:ef:17:a3:
d0:25:17:66:29:93:75:01:91:d0:98:f4:79:52:9e:a0:8e:e3:
75:d0:41:19:26:11:91:38:01:a0:57:3b:5c:83:c2:a6:ff:b4:
c1:d6:19:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:15:12 2026 by rpki-client