Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
File: r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft (raw, json)
Hash identifier: PhrWzBO9NpG5I7Bf3u6ONom1ZDgP4NnEGyyWXe7B6W8=
Subject key identifier: 72:53:57:85:29:B2:87:FE:CE:78:20:E7:15:86:0D:AE:A2:E5:B7:33
Authority key identifier: AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
Certificate issuer: /CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Certificate serial: 01A1DCF0729FC4F29E95B5EFFF5B46E0A3FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
Manifest number: 17EC
Signing time: Sun 15 Nov 2026 02:01:47 +0000
Manifest this update: Sun 15 Nov 2026 02:01:47 +0000
Manifest next update: Mon 16 Nov 2026 02:01:47 +0000
Files and hashes: 1: 0llklTGwRpo1D7HWMMbydisxDQ4.roa (hash: 3z2IZ4s8AyOuNF65gLQqbep0m2rYxv6RvjyL7CQP75U=)
2: QWs1csGK8KUFGhfj2QFKlBU8El0.roa (hash: 0iVAN86kduscSDUBK67oi4SEPANLs+DqgTgFkRGgbJQ=)
3: r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl (hash: 7Pt0+QHR0jKusUD8lq/kfDBEKZLu84IWPogS+9b35YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:f0:72:9f:c4:f2:9e:95:b5:ef:ff:5b:46:e0:a3:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Validity
Not Before: Nov 15 02:01:47 2026 GMT
Not After : Nov 16 02:01:47 2026 GMT
Subject: CN=7253578529b287fece7820e715860daea2e5b733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:60:90:5d:21:f1:13:51:4e:d0:3f:df:20:42:
83:b4:b1:21:dd:93:3f:2c:33:b2:df:f2:32:32:a8:
c3:31:25:fa:f5:9c:d6:06:6d:40:1d:9b:8a:3b:b4:
02:91:01:8f:3f:eb:6a:81:98:ff:6a:3b:74:21:3b:
7b:18:2b:c9:9e:1a:dc:a0:51:e6:b8:7b:ce:df:93:
8e:82:32:35:22:f3:52:2c:fb:5a:24:38:85:7e:8b:
20:55:65:d2:3f:cb:ea:5b:df:79:57:19:85:96:0f:
5f:1d:ca:7c:8d:33:94:38:4c:ae:96:ba:97:24:39:
61:09:34:24:77:d3:b2:13:91:2e:70:dc:6f:32:f1:
e8:e6:81:b1:43:75:be:de:b2:d9:e8:bd:8c:b8:a6:
58:cf:0f:42:15:dc:62:a5:38:0f:54:48:34:7b:67:
91:4a:09:94:83:68:e2:c1:3e:0d:c4:ec:e7:ac:91:
61:30:06:04:66:71:36:47:77:ec:8c:4a:53:33:95:
89:e2:0a:c7:2c:d8:35:2d:7d:e3:ec:18:86:75:ef:
e5:ae:c8:09:65:56:8c:7a:91:6b:99:b5:c5:a3:70:
a9:8e:46:e8:6d:3b:68:b7:ea:63:41:b1:f8:db:fc:
84:f5:39:85:37:57:4a:30:c3:67:a0:7a:3e:59:63:
b2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:53:57:85:29:B2:87:FE:CE:78:20:E7:15:86:0D:AE:A2:E5:B7:33
X509v3 Authority Key Identifier:
keyid:AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:3a:7e:86:f6:f7:99:2e:14:0d:36:ba:1b:a1:da:d6:4f:28:
93:76:f5:a6:bc:32:f3:e6:d3:48:c4:0a:d5:74:fe:8b:84:d2:
d6:7b:04:c1:57:ab:81:fb:88:d0:ae:25:37:b8:39:62:0d:c1:
fa:23:f9:f4:a6:70:40:be:d9:38:09:d1:63:1e:6c:55:19:49:
ae:0b:7f:e7:7b:27:c2:66:01:ff:c3:4f:fd:44:d6:dc:74:6d:
ad:39:f4:7f:d9:0e:5b:74:ad:98:40:bb:67:9c:4a:01:3a:a5:
b4:56:a9:6f:22:b0:6c:8f:d4:77:4b:11:84:27:26:35:e1:f9:
51:a8:2a:0c:92:6c:a3:94:07:86:be:c4:7d:9e:e5:f2:07:75:
3e:42:2a:0c:26:37:5c:40:8a:4d:99:0a:76:f2:6a:bf:52:eb:
94:16:16:8f:1d:78:79:cb:fb:26:6c:0f:c6:54:97:d8:54:6e:
a3:96:97:e6:91:a7:f4:de:a4:c3:17:ce:4e:d8:e4:0f:80:7c:
05:45:6e:af:04:3b:df:79:5f:91:f6:80:95:e9:92:15:0a:00:
ee:3c:3b:e0:b7:61:f7:3d:e9:6c:cf:8c:30:4d:b9:f0:e6:c1:
b2:d3:16:da:a0:1f:a4:f2:8e:14:bb:8f:11:d7:f3:58:34:db:
9e:18:dd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:49:02 2026 by rpki-client