Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
File: QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft (raw, json)
Hash identifier: fvg1jy+/emXLVdv2uA7KRYoOX6nfmRZlSXeFux1ey5I=
Subject key identifier: A6:64:AD:1B:F6:0C:08:D0:B0:3A:1F:D4:51:65:CE:2C:00:F1:D4:1F
Authority key identifier: 40:08:C4:86:EF:56:17:0C:41:2F:26:61:5D:0A:40:94:BC:A1:FB:2C
Certificate issuer: /CN=4008c486ef56170c412f26615d0a4094bca1fb2c
Certificate serial: 01A1DE39594D31E37031781D9913EA626CD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
Manifest number: 03A6
Signing time: Sun 15 Nov 2026 08:01:02 +0000
Manifest this update: Sun 15 Nov 2026 08:01:02 +0000
Manifest next update: Mon 16 Nov 2026 08:01:02 +0000
Files and hashes: 1: LJsNdySzgVhzx0jmB1MhskD9sjw.roa (hash: vvBtgWk4yOZ39bGRHX8IHXL1uvrBI1sSum79JzJWzi4=)
2: QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl (hash: uQ+VzSiwN2/sLxqQfLDAfH9wWmhnziQnbeSh7pR86qw=)
3: gwoZZje1uQSgGQlJSX6ThKbi_v4.roa (hash: yNNrupm/CBG1AsTLbQhGB7upwtdrSdYjgUOcddBU48E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:59:4d:31:e3:70:31:78:1d:99:13:ea:62:6c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4008c486ef56170c412f26615d0a4094bca1fb2c
Validity
Not Before: Nov 15 08:01:02 2026 GMT
Not After : Nov 16 08:01:02 2026 GMT
Subject: CN=a664ad1bf60c08d0b03a1fd45165ce2c00f1d41f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:65:73:3d:f5:ce:1e:6f:ac:80:61:da:47:cd:
6b:5f:d4:88:40:9c:44:6f:9e:61:91:dc:e5:91:35:
54:cf:ad:d7:c2:d3:7e:88:29:94:30:c5:fc:70:15:
eb:66:a7:ed:11:b5:6c:da:84:1f:e3:c8:c1:e3:22:
73:9c:44:1e:99:a3:fb:4f:05:7a:fc:0c:c2:38:6f:
a6:36:ba:90:2b:92:3b:6a:4d:28:05:19:41:5a:44:
24:f5:da:f2:f4:b2:18:81:ad:b0:d9:1a:8b:34:8d:
74:8a:36:fd:73:fb:af:fc:7e:aa:26:87:c5:11:5f:
ab:77:1e:c6:e3:c8:9f:d6:ef:69:c5:4e:8e:c8:9c:
d6:7d:f7:fd:15:1e:a7:2b:a7:f3:6d:aa:b0:99:47:
13:7c:98:de:8b:96:c8:f6:86:d7:1e:3d:c2:ea:55:
21:c2:da:ec:a1:f9:dd:32:f2:95:3e:db:a3:d3:1f:
2b:87:36:34:d8:1b:85:5d:f6:a4:d8:f0:89:93:31:
85:aa:b7:0d:35:02:4e:77:20:f8:cc:c1:9a:6f:a7:
6d:3b:e6:25:88:b7:74:a1:3b:82:7c:e8:ef:1b:aa:
bb:b9:1c:98:2e:22:16:90:7e:9b:5f:af:c2:dc:b3:
c2:81:ce:d5:1d:4c:3e:84:14:ed:9f:95:2b:18:e4:
1b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:64:AD:1B:F6:0C:08:D0:B0:3A:1F:D4:51:65:CE:2C:00:F1:D4:1F
X509v3 Authority Key Identifier:
keyid:40:08:C4:86:EF:56:17:0C:41:2F:26:61:5D:0A:40:94:BC:A1:FB:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:7b:20:50:18:09:5a:b0:21:4b:03:c6:73:f8:34:b4:3a:30:
f2:37:f9:1b:ca:46:13:7e:3b:a8:dd:45:c3:e8:3d:b2:4a:f6:
6c:df:e7:48:31:69:70:e3:12:9b:49:e4:bc:36:40:e3:ff:b7:
48:ee:e8:68:cc:c1:7e:15:33:f1:16:08:1f:a6:e9:15:6d:00:
c9:08:25:d4:e7:c1:75:4b:35:79:a1:d8:31:58:fa:83:6b:bc:
f3:17:7d:c2:10:a6:07:2b:e6:63:c1:8f:d2:8e:c6:a7:da:8e:
c3:b7:08:b6:36:a1:8d:00:cf:a9:12:0f:16:b3:60:82:50:20:
56:6d:44:99:36:89:86:e0:78:98:24:c8:bc:76:97:8b:14:de:
96:02:1b:e4:35:cf:0a:cd:8b:be:7a:9d:df:f4:86:b3:a3:90:
6a:58:91:60:f4:e5:62:ed:75:04:b2:74:ec:22:f3:3c:13:b3:
d6:7e:ca:d4:84:8f:80:bd:0e:d1:3d:85:64:ba:e8:0d:b2:92:
27:21:8b:29:ba:fe:79:d5:93:f1:87:f6:35:0a:5a:80:ff:ed:
18:37:50:f7:2f:25:5f:1b:55:0a:c9:6c:de:74:56:fd:60:53:
ec:b6:5f:3d:45:2f:f8:c8:f2:14:00:bb:d4:3e:04:23:6b:9c:
8a:4d:cc:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:30:52 2026 by rpki-client