Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
File: qyt5QmiS7R2nsuYYZ3DPsErmA80.mft (raw, json)
Hash identifier: HojFeBCrr459beYYs/aqyPcEzoXzXYKrHmZOcuTaNG4=
Subject key identifier: FB:A0:91:71:37:7D:E4:B3:A0:D7:DD:2A:A2:7B:28:59:75:48:42:43
Authority key identifier: AB:2B:79:42:68:92:ED:1D:A7:B2:E6:18:67:70:CF:B0:4A:E6:03:CD
Certificate issuer: /CN=ab2b79426892ed1da7b2e6186770cfb04ae603cd
Certificate serial: 01A1DFF17B361CE81A71A5AA741E95CF01FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
Manifest number: 0D9F
Signing time: Sun 15 Nov 2026 16:01:47 +0000
Manifest this update: Sun 15 Nov 2026 16:01:47 +0000
Manifest next update: Mon 16 Nov 2026 16:01:47 +0000
Files and hashes: 1: Ep1UdBXzCWlqSTpFzem1RUVZTHA.asa (hash: f0L/PAFatn0IgaIhqoEyZoZ0cRFuKV57J/o6cZd4vJM=)
2: UVwGUstyqvelkq37jwrCyB34k94.asa (hash: E7qX0L3M0NDAHs6Gtk5Rp5Gs8S25rdSfJnVG4BtVL6w=)
3: qyt5QmiS7R2nsuYYZ3DPsErmA80.crl (hash: EkipHW9RW5J6qHUojgDVA6PB8a58+ySHsWEpxErfMuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:f1:7b:36:1c:e8:1a:71:a5:aa:74:1e:95:cf:01:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2b79426892ed1da7b2e6186770cfb04ae603cd
Validity
Not Before: Nov 15 16:01:47 2026 GMT
Not After : Nov 16 16:01:47 2026 GMT
Subject: CN=fba09171377de4b3a0d7dd2aa27b285975484243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:91:b3:c1:d0:4b:4f:37:a4:fc:36:35:27:75:
23:50:aa:2c:b7:30:c0:39:fe:ac:a6:42:09:62:3f:
2a:9d:c1:64:46:c5:7f:a8:1b:83:55:9b:10:4d:e3:
ae:85:5f:c2:07:db:08:45:7c:d8:6e:be:d4:95:6b:
4c:d7:07:f4:37:63:1a:fa:a0:9c:86:9f:11:d4:89:
1e:d2:15:67:ef:6a:eb:fd:65:28:c0:a2:a8:18:13:
7a:c3:a5:7a:62:1b:05:a6:e2:11:0a:bf:8e:8f:bf:
49:73:1e:3d:10:4f:f7:be:75:29:32:3b:94:28:2a:
2b:dd:1e:29:66:ed:f2:ae:a5:34:c4:ba:2f:f1:58:
79:33:a1:21:76:f7:35:8a:23:cf:12:1a:f7:b6:43:
03:65:f3:1a:2a:79:52:43:8b:b5:0b:f2:28:51:1d:
84:9b:86:36:d8:a8:53:91:db:9a:9c:a8:11:87:14:
dd:b3:af:02:9f:9b:c1:b6:f2:e4:84:eb:e9:a1:1a:
14:c8:cd:ec:cc:38:d2:9e:bd:30:08:ef:ce:4f:46:
cf:32:f5:a2:cc:99:99:71:1c:93:e2:c9:3c:dc:f4:
dd:39:a3:16:64:c5:0c:6e:61:3b:12:f0:8e:e7:b7:
5d:35:e5:94:36:ee:25:f5:35:e0:da:de:fb:a1:32:
d9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A0:91:71:37:7D:E4:B3:A0:D7:DD:2A:A2:7B:28:59:75:48:42:43
X509v3 Authority Key Identifier:
keyid:AB:2B:79:42:68:92:ED:1D:A7:B2:E6:18:67:70:CF:B0:4A:E6:03:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:bc:10:51:3e:2b:62:7b:eb:e5:95:b3:ae:54:bf:bc:8a:78:
0d:9f:7b:22:53:15:fb:08:95:75:7d:bb:ab:42:9b:7c:73:03:
86:20:f5:47:2b:38:8b:b5:6b:a7:a9:df:ec:e1:a9:0d:3b:83:
36:8e:2a:bf:53:d5:72:65:ed:95:17:3d:52:94:46:82:0b:32:
b1:8a:09:2b:e4:fa:81:01:85:56:36:2e:08:6b:13:5a:3a:06:
25:44:7f:86:cb:68:9d:f4:98:dd:98:5d:fe:97:08:f9:a8:d9:
eb:82:24:fb:d1:24:a2:32:bf:7b:66:21:4f:e8:f1:c5:07:fc:
ef:40:a1:d5:24:ab:45:f7:57:ee:68:95:f9:70:0a:a9:f1:01:
12:89:53:3d:54:b2:9c:99:36:2b:86:a3:33:92:47:16:a6:f3:
93:fe:03:61:6b:7d:d5:cc:8a:c5:a9:96:dd:db:08:d7:8f:6d:
34:d9:d4:16:4e:41:2b:29:e1:58:cd:9d:31:7f:e2:e2:b5:21:
4e:ed:b7:9b:76:65:82:06:95:e7:0e:df:4d:0e:83:a5:7f:8d:
0f:0f:b7:57:c9:6b:cb:dd:00:66:63:55:30:6c:07:4e:80:ec:
03:7e:a7:1e:05:f9:06:aa:00:95:ff:b8:c6:91:7b:3f:fb:bd:
80:73:4b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:33:30 2026 by rpki-client