Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/qLLDezil93OVmHikQQ21nhc9wgY.mft
File: qLLDezil93OVmHikQQ21nhc9wgY.mft (raw, json)
Hash identifier: 96L8o50gh//vlfh9K++5aKWgNOTCkYMAhmIckiEfCP8=
Subject key identifier: 0A:A1:3A:18:3F:56:90:15:3B:6F:C3:2F:AD:37:A9:40:E1:72:D2:5A
Authority key identifier: A8:B2:C3:7B:38:A5:F7:73:95:98:78:A4:41:0D:B5:9E:17:3D:C2:06
Certificate issuer: /CN=a8b2c37b38a5f773959878a4410db59e173dc206
Certificate serial: 01A10814375B6E766AE7FD49A0EC2F433890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLLDezil93OVmHikQQ21nhc9wgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/qLLDezil93OVmHikQQ21nhc9wgY.mft
Manifest number: 0102
Signing time: Sun 04 Oct 2026 18:01:44 +0000
Manifest this update: Sun 04 Oct 2026 18:01:44 +0000
Manifest next update: Mon 05 Oct 2026 18:01:44 +0000
Files and hashes: 1: OunyrU6BBdReyTyaGtBOEde3_sk.roa (hash: dT+oapbW+wFYcujVYugQxPifKqhdPs/FWRx90NuTH1s=)
2: qLLDezil93OVmHikQQ21nhc9wgY.crl (hash: 5P9EIZ5eO7rsGpX2F9JISPK8Ruv91n08jZbWCTGkiNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/qLLDezil93OVmHikQQ21nhc9wgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/qLLDezil93OVmHikQQ21nhc9wgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLLDezil93OVmHikQQ21nhc9wgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:14:37:5b:6e:76:6a:e7:fd:49:a0:ec:2f:43:38:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b2c37b38a5f773959878a4410db59e173dc206
Validity
Not Before: Oct 4 18:01:44 2026 GMT
Not After : Oct 5 18:01:44 2026 GMT
Subject: CN=0aa13a183f5690153b6fc32fad37a940e172d25a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fa:4c:d1:c0:85:99:5f:01:48:83:3e:90:2c:
af:ea:17:84:7b:4f:f3:4e:50:71:7e:01:fc:02:ed:
bc:8c:28:8f:be:02:59:98:c7:96:57:b8:fe:0f:a6:
c6:fc:f9:a3:81:f0:b7:c3:56:50:36:3b:4e:c6:dd:
b8:60:d2:ac:74:54:01:83:8e:5d:3a:63:f7:ff:a0:
d2:87:f8:db:ca:f9:22:ae:28:c2:40:5f:f2:32:b4:
28:19:57:89:86:e4:ed:2c:c9:6e:4c:0d:5c:13:be:
fa:0f:7c:4f:3c:27:48:d8:91:f6:cb:4e:1f:20:cd:
79:f5:1d:b7:fb:ee:37:79:d0:c7:db:7c:68:25:72:
ce:8c:bd:fe:f0:e7:4a:3d:03:c9:b2:cd:b0:5a:9b:
6f:4e:21:64:69:76:80:68:0c:d6:e7:21:e4:bc:98:
c6:fe:68:07:bd:fd:ab:04:af:cf:bc:16:5d:00:91:
9f:c9:b5:c0:24:9b:5e:5c:f3:d1:a5:4f:61:96:5b:
3c:6a:d5:fe:d2:f1:a6:cc:18:ae:8a:9b:74:5e:d7:
53:48:79:b3:a7:8d:16:b4:88:cf:40:0d:76:2a:a8:
eb:d3:c2:58:39:00:3f:98:05:de:cf:b3:47:1f:4b:
b7:27:f5:99:bf:15:4a:ca:c2:34:2f:33:5f:50:eb:
0c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A1:3A:18:3F:56:90:15:3B:6F:C3:2F:AD:37:A9:40:E1:72:D2:5A
X509v3 Authority Key Identifier:
keyid:A8:B2:C3:7B:38:A5:F7:73:95:98:78:A4:41:0D:B5:9E:17:3D:C2:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLLDezil93OVmHikQQ21nhc9wgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/qLLDezil93OVmHikQQ21nhc9wgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/qLLDezil93OVmHikQQ21nhc9wgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:6c:b3:0e:62:9d:45:ce:c9:70:f3:8a:ef:8b:b9:63:51:0b:
7d:69:9e:62:36:44:20:63:9a:d1:9b:a3:18:b8:3a:84:d3:63:
46:62:49:b9:de:ac:51:8c:81:75:6b:0a:51:84:fc:78:69:7d:
32:a9:f0:e1:ed:0a:85:52:ba:f6:6f:0e:42:89:b2:ca:c1:a6:
ed:34:1b:b3:2c:c7:a2:8d:18:d9:3a:ae:14:78:9f:bd:b3:2c:
d9:95:49:e3:2a:20:8d:2f:37:12:5c:37:cd:f9:99:bb:cb:6c:
df:33:2c:3a:84:43:8f:b7:b5:e7:f9:ae:d6:52:6d:04:54:d8:
c2:44:c4:9d:38:9a:93:c6:0f:70:55:90:28:63:28:69:df:6f:
f6:b5:22:f1:22:79:18:9f:c5:58:f3:6e:31:91:ac:ad:67:12:
41:34:da:b7:88:63:d9:54:12:11:83:66:fe:03:4b:b6:df:11:
e6:b5:df:d4:6a:f3:b9:9b:90:09:93:38:0a:de:ae:f9:a4:64:
97:7d:e5:dd:eb:48:31:1e:25:d8:c9:94:c4:e1:1a:61:67:f0:
b7:df:1e:08:51:16:f0:af:7b:6e:1a:91:fe:c0:27:4a:6a:14:
f7:32:60:2a:13:d2:fb:fd:7f:d0:c2:1d:e0:69:cf:2f:6c:ab:
0f:b0:bc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:34:40 2026 by rpki-client