Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/ec430f-7b70-49d7-8e81-6dab2a4b2a6e/1/Q8xOC1bEDO4y1RXxPprXJSahBr4.mft
File: Q8xOC1bEDO4y1RXxPprXJSahBr4.mft (raw, json)
Hash identifier: qK/U5tsQ1zuvebi+zMX5vWzq589Q3G9c38cQgTwCVwY=
Subject key identifier: BE:49:D7:ED:9F:DB:95:FD:53:01:3A:DD:55:DC:51:02:BF:EB:E7:CF
Authority key identifier: 43:CC:4E:0B:56:C4:0C:EE:32:D5:15:F1:3E:9A:D7:25:26:A1:06:BE
Certificate issuer: /CN=43cc4e0b56c40cee32d515f13e9ad72526a106be
Certificate serial: 01A1DE02CAF54FE4323D1CD9DA1FD86C0357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8xOC1bEDO4y1RXxPprXJSahBr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/ec430f-7b70-49d7-8e81-6dab2a4b2a6e/1/Q8xOC1bEDO4y1RXxPprXJSahBr4.mft
Manifest number: 0114
Signing time: Sun 15 Nov 2026 07:01:27 +0000
Manifest this update: Sun 15 Nov 2026 07:01:27 +0000
Manifest next update: Mon 16 Nov 2026 07:01:27 +0000
Files and hashes: 1: 1-avwUbYkGWAbngQUmLKtkGb0vQk.asa (hash: gdrOpGIWUMbLTjKVbOlssgFFN+ZM/6btb14hBTqgj4E=)
2: Q8xOC1bEDO4y1RXxPprXJSahBr4.crl (hash: 55LD87JilI2Qv4uU1hqTjvS/OS1bgzaiPn1q2aL3CL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/ec430f-7b70-49d7-8e81-6dab2a4b2a6e/1/Q8xOC1bEDO4y1RXxPprXJSahBr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/ec430f-7b70-49d7-8e81-6dab2a4b2a6e/1/Q8xOC1bEDO4y1RXxPprXJSahBr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8xOC1bEDO4y1RXxPprXJSahBr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:ca:f5:4f:e4:32:3d:1c:d9:da:1f:d8:6c:03:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43cc4e0b56c40cee32d515f13e9ad72526a106be
Validity
Not Before: Nov 15 07:01:27 2026 GMT
Not After : Nov 16 07:01:27 2026 GMT
Subject: CN=be49d7ed9fdb95fd53013add55dc5102bfebe7cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:57:87:4c:0a:3d:0e:a6:d1:ee:6d:85:37:e1:
08:3e:b8:02:c8:76:f1:2b:65:20:70:4c:51:cd:b3:
79:11:ab:2e:5c:b8:29:41:ef:9e:c0:75:35:a5:02:
cf:30:b1:9e:f1:6d:c3:c7:4e:34:1a:fb:d8:22:57:
2e:5d:1e:d7:90:c7:6f:d2:94:1b:5a:30:83:01:00:
f3:5b:fd:15:ac:f8:8d:4e:f1:02:29:e5:b1:9c:59:
23:5e:99:ec:ea:aa:2e:ce:e3:82:b2:48:84:97:46:
f6:7d:24:fe:18:b8:f0:ef:d7:1e:14:df:67:4d:89:
28:c8:56:22:77:c8:8e:fb:43:3b:5b:e5:22:1d:52:
15:87:8c:8a:fd:a5:66:57:1c:9d:23:77:e3:41:ea:
bc:56:36:8b:5d:10:28:71:0e:97:36:8f:7d:26:9c:
6c:2f:0c:d8:32:39:a5:5a:65:7c:6e:33:8c:7d:8e:
6a:1e:89:a2:3b:a6:ba:c1:e5:0c:f7:50:f0:a6:1b:
db:13:78:39:50:63:f6:47:7d:89:e9:66:5d:82:74:
fa:3a:05:42:15:16:9e:1b:e4:4a:4e:6d:08:64:c4:
88:de:01:b0:7a:8a:26:c2:66:1f:9d:eb:64:be:c2:
bc:1f:89:a4:7b:a3:4f:d3:a8:89:1b:a1:5b:ad:da:
14:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:49:D7:ED:9F:DB:95:FD:53:01:3A:DD:55:DC:51:02:BF:EB:E7:CF
X509v3 Authority Key Identifier:
keyid:43:CC:4E:0B:56:C4:0C:EE:32:D5:15:F1:3E:9A:D7:25:26:A1:06:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8xOC1bEDO4y1RXxPprXJSahBr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ec430f-7b70-49d7-8e81-6dab2a4b2a6e/1/Q8xOC1bEDO4y1RXxPprXJSahBr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ec430f-7b70-49d7-8e81-6dab2a4b2a6e/1/Q8xOC1bEDO4y1RXxPprXJSahBr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c6:b1:52:6d:0a:69:91:bd:97:ed:04:df:a5:2b:32:41:64:
38:0f:74:d7:5b:8a:5c:33:15:38:47:49:b4:87:a2:3d:09:8a:
3f:55:8a:89:75:23:40:9f:8c:5c:cd:9b:95:d3:93:91:a7:41:
60:fa:d8:f9:fc:2c:f6:77:6a:72:69:cd:e7:6c:1b:c7:2b:2b:
f4:1d:47:14:1b:31:6b:15:d2:3c:e7:fb:3e:eb:75:5d:7d:ab:
26:96:4b:dc:f7:4a:95:41:73:7a:11:4e:1d:16:6b:5b:ca:01:
b1:88:8b:36:51:ac:bf:6b:19:e6:27:2e:49:d0:25:bb:04:44:
81:3e:8a:1a:13:f2:31:a4:29:71:3c:f5:2a:2f:96:09:c0:03:
f8:7e:2d:95:b2:4b:f2:cf:1c:65:a0:17:f3:53:1d:ee:7b:ba:
1f:d1:45:1d:29:63:16:3c:f1:4e:ec:e1:7d:0c:c0:a4:6d:8b:
41:9b:65:f5:c0:80:e9:eb:3c:4c:cd:d8:8f:9b:64:df:86:88:
e4:d0:7a:f8:73:51:57:62:14:75:fc:3b:26:cb:0d:60:df:61:
1f:7c:63:ab:eb:a3:20:b8:84:56:47:f5:9f:bc:b3:cb:2b:4d:
7b:56:fc:59:05:b5:0e:c3:94:32:fc:03:ea:96:c7:58:c0:32:
fe:16:6c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:41:06 2026 by rpki-client