Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
File: q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft (raw, json)
Hash identifier: KgkSZDLbUwn1oOPVo3XPRSws7tCTj9vqw6SxW/7GGrY=
Subject key identifier: 18:B9:23:BD:DE:8F:1E:C6:8A:BB:D3:C9:E8:9F:3C:89:81:B8:DB:C8
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 01A128E84CE6B674336207A7B09AA0C33727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
Manifest number: 1AFD
Signing time: Sun 11 Oct 2026 03:01:14 +0000
Manifest this update: Sun 11 Oct 2026 03:01:14 +0000
Manifest next update: Mon 12 Oct 2026 03:01:14 +0000
Files and hashes: 1: q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl (hash: iL7rUcX8BxJ6n0vKavDANzJn9Gx05p91fmH/lPS5UYo=)
2: seBFYYQv0cvrV-jBttwLxGx-GgQ.roa (hash: ckniHG5YK95jMkTsaGk+p/q7us5X85VQ/bIV+gQNUtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:e8:4c:e6:b6:74:33:62:07:a7:b0:9a:a0:c3:37:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Oct 11 03:01:14 2026 GMT
Not After : Oct 12 03:01:14 2026 GMT
Subject: CN=18b923bdde8f1ec68abbd3c9e89f3c8981b8dbc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ce:26:32:40:ae:05:0b:c0:0e:f5:97:27:33:
51:ac:22:16:f3:72:ee:02:63:27:d0:74:6d:a2:f1:
ab:6f:66:1b:cd:44:63:c6:1b:57:21:53:aa:6e:99:
96:34:05:7d:45:d8:0c:e0:c6:e2:a5:0a:f8:06:07:
ae:27:9b:2d:a0:1b:0f:e8:62:a9:6a:97:a3:a6:a6:
c4:3d:59:69:b5:b6:3d:16:a9:6e:8e:7c:d0:6b:00:
fb:ab:e5:1e:0c:b7:26:84:ae:79:7d:22:55:43:ad:
53:17:e6:06:ea:c9:89:57:15:6c:d9:64:34:ad:a8:
74:7a:f8:27:57:ba:0a:84:db:67:2e:05:d5:ff:7f:
7f:25:87:f5:3d:d6:80:4b:d0:75:e2:5c:72:ac:80:
86:9a:7b:1f:a6:27:83:ca:21:d2:5b:b4:c5:f7:60:
ea:20:0c:ec:7e:81:53:56:f1:a5:76:2c:fd:43:ca:
bb:44:68:c3:a8:51:23:88:18:3d:3d:73:4e:e3:41:
a1:83:be:dc:88:93:ee:26:f5:19:53:ee:2e:7a:a7:
c1:59:d5:19:45:e0:b3:01:e1:4e:98:de:2f:5b:62:
86:09:19:4f:55:f2:46:bf:87:3d:77:20:31:18:7c:
33:bf:9e:7b:1b:66:99:f0:42:41:1b:79:98:33:08:
97:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B9:23:BD:DE:8F:1E:C6:8A:BB:D3:C9:E8:9F:3C:89:81:B8:DB:C8
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c5:38:13:7f:aa:6c:85:a9:ff:0f:45:53:a8:38:52:90:18:
6a:05:35:46:44:5c:6a:07:40:cd:be:8c:cf:44:bb:dd:d5:0d:
37:8e:92:68:0f:ae:27:fd:92:fa:dc:28:6e:a2:f0:f3:57:b9:
51:7f:31:42:4e:8f:44:82:ba:b3:a9:ab:f9:fb:b6:f3:03:fa:
af:75:9f:6b:1f:bd:f6:99:99:cc:a6:92:13:dd:68:26:08:b4:
e2:c6:8f:ab:39:a2:27:e4:88:df:d1:5e:fe:f9:3f:10:48:10:
5a:d3:99:79:1c:60:94:3c:e8:54:d3:9d:be:07:c1:f1:9c:04:
0c:93:94:56:8e:25:dc:51:5a:1f:c2:a7:87:45:bc:7f:31:5d:
70:75:8c:e8:d4:32:28:4f:ea:59:d4:a8:3b:45:6f:f2:2b:2d:
da:65:ab:cf:98:8b:98:28:24:3f:d2:91:6d:9e:04:f5:fd:6d:
10:c1:25:64:65:ac:91:16:7f:61:c3:ce:13:ea:84:b8:3c:8a:
2d:b4:db:d6:7f:96:2d:8a:a3:a0:4a:be:3e:bf:24:48:f1:86:
47:03:82:42:8f:92:03:77:b9:83:97:27:f9:45:96:d3:5b:cc:
0d:53:cc:7d:c7:7b:ef:b8:26:b4:ce:04:23:ac:71:19:76:4d:
5f:c6:d5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:55:30 2026 by rpki-client