Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
File: q6gfB6STo-ZDdS5mvYFG9Xca34g.mft (raw, json)
Hash identifier: mPVzOB5tCFmBjvXeX0PzZvIQEp/5YCaMQ+RaTqo1baw=
Subject key identifier: 92:4A:F3:D3:E9:53:7A:1E:C9:59:CC:29:8F:25:37:8F:03:FB:94:E9
Authority key identifier: AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
Certificate issuer: /CN=aba81f07a493a3e643752e66bd8146f5771adf88
Certificate serial: 01A1DE0284ED36AB3D1EE807DBCBD80AE3A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
Manifest number: 1AD2
Signing time: Sun 15 Nov 2026 07:01:09 +0000
Manifest this update: Sun 15 Nov 2026 07:01:09 +0000
Manifest next update: Mon 16 Nov 2026 07:01:09 +0000
Files and hashes: 1: KVyFy8VhCmWDFDfi6hznjqY-CiM.roa (hash: gxDIq6BgrSNUPikORcjw6F0p9+XkSRUjM2gZnMVK/i4=)
2: mHnLIzDp0K0uZ34p1Ju5C7yV-Jc.roa (hash: ndDoF5lyW5EcQE2tsppbm+3E+OkI4cfheb+pzHW2skk=)
3: q6gfB6STo-ZDdS5mvYFG9Xca34g.crl (hash: YWdoSsj4KwtCUsQDvY6uRJwBDFaR98fwzl9EwDpnOv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:84:ed:36:ab:3d:1e:e8:07:db:cb:d8:0a:e3:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aba81f07a493a3e643752e66bd8146f5771adf88
Validity
Not Before: Nov 15 07:01:09 2026 GMT
Not After : Nov 16 07:01:09 2026 GMT
Subject: CN=924af3d3e9537a1ec959cc298f25378f03fb94e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d7:50:fc:8e:1d:59:cb:3d:3e:ea:83:5b:20:
3a:ce:a2:14:c3:76:22:40:61:3c:53:33:6d:cb:60:
43:12:2b:8a:78:22:1e:83:78:31:e6:7d:3d:de:12:
b2:dd:17:a1:e0:7c:c8:fe:3c:76:1d:3c:e8:f1:93:
2c:dc:1e:5c:33:af:be:18:4b:45:25:69:b8:b9:91:
57:e1:9a:ea:22:f3:2e:ef:23:4c:27:f5:10:74:3a:
02:92:6a:5a:b0:26:a5:e0:9b:fc:c9:5c:c1:b6:31:
c4:7f:a9:04:0f:ed:b5:c9:9e:28:65:2e:fe:5c:d5:
35:db:40:d9:92:35:83:1d:cd:3a:b4:f4:08:df:91:
ca:17:fa:e3:e8:97:2c:a0:1a:c7:ac:69:4c:68:f4:
72:52:ce:89:24:21:13:e4:68:a8:68:2b:60:ed:b2:
b2:62:36:63:4a:57:2b:56:50:94:ba:00:88:1c:b7:
e7:c5:64:10:c3:66:13:57:c5:6c:9a:e4:7c:75:4d:
16:27:3c:19:ba:7e:51:fa:a9:6e:63:64:88:2d:c1:
ba:64:01:32:3f:f3:87:88:67:6e:08:a3:41:c4:04:
c2:99:9b:59:a0:d8:e1:e3:ce:b8:42:c7:ec:74:fe:
d8:95:6d:cc:60:d7:dd:c0:c0:52:e1:6b:00:c8:a4:
29:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4A:F3:D3:E9:53:7A:1E:C9:59:CC:29:8F:25:37:8F:03:FB:94:E9
X509v3 Authority Key Identifier:
keyid:AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:f3:c0:10:d2:99:75:de:b2:62:a9:46:5e:2d:c5:6d:3d:cb:
57:75:20:08:a9:72:e8:33:ee:10:9d:42:3b:f2:39:0c:e2:9a:
4d:13:fd:8f:0a:56:67:7a:ab:1d:ef:11:9b:3d:b5:d9:97:ee:
34:b9:d5:b4:fc:55:12:f7:77:19:2d:85:4e:8e:54:7c:d7:9c:
f2:e9:46:11:93:37:14:45:86:9d:51:23:0b:4e:c1:96:1d:02:
8f:89:64:82:20:ec:a4:cc:70:a7:66:6a:7c:95:ae:40:f9:2b:
7e:2c:72:48:e3:38:59:50:41:e6:d9:c0:ea:3a:c6:ca:96:4d:
32:ba:d5:ac:1e:c5:de:1c:f3:83:2c:a5:13:63:93:66:be:40:
fa:01:6a:b5:8f:b6:8c:ac:ef:1c:b7:52:9b:78:34:df:dd:bf:
ea:19:2d:c1:0c:a0:4b:d4:03:7b:3d:29:fa:8a:33:16:54:d5:
3c:1c:1d:b2:52:cd:72:a4:99:5a:39:ba:61:4a:b3:5b:d4:25:
77:67:0d:07:0b:df:c1:26:c2:3a:fa:30:7a:60:a4:b5:5b:56:
c0:54:92:b0:25:83:ee:e9:0f:5b:ec:f3:d5:99:c5:69:8c:f2:
56:bd:1a:82:ee:c4:55:39:e4:b2:7d:85:80:0f:96:f8:04:50:
4f:1e:9f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:49:06 2026 by rpki-client