Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
File: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft (raw, json)
Hash identifier: BPS4E4wfJly5SXXjOeroxYn+G4yVcUCDS35bnpqcnMs=
Subject key identifier: 4E:CE:7F:7E:17:A7:3E:E5:1E:24:6E:4E:D4:76:F8:A1:5C:F7:43:8C
Authority key identifier: 43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C
Certificate issuer: /CN=439137befe8bc55903690c7c46af197cc91a703c
Certificate serial: 01A0F78DBA8865BB15262926C281CB55E24B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
Manifest number: 066B
Signing time: Thu 01 Oct 2026 13:00:55 +0000
Manifest this update: Thu 01 Oct 2026 13:00:55 +0000
Manifest next update: Fri 02 Oct 2026 13:00:55 +0000
Files and hashes: 1: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl (hash: AKbIaBptn3g+4O9dV3/pCbIJSnityrqXiAMgxNMYJdA=)
2: _7YkQnir_Fs7RdN8jRsXRuKitU0.roa (hash: eG23lB/DnSZrnvg06TYWuaxCxD+hbMjkA+ocC1LtuGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:8d:ba:88:65:bb:15:26:29:26:c2:81:cb:55:e2:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439137befe8bc55903690c7c46af197cc91a703c
Validity
Not Before: Oct 1 13:00:55 2026 GMT
Not After : Oct 2 13:00:55 2026 GMT
Subject: CN=4ece7f7e17a73ee51e246e4ed476f8a15cf7438c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:81:be:9a:cb:a4:74:b6:14:5a:73:75:c9:5a:
ff:5a:8d:61:09:33:c6:35:4d:8e:5b:41:dd:3c:a3:
99:13:6f:d6:40:fd:98:ea:d6:c4:18:0b:c2:42:33:
b7:38:5e:44:26:84:c3:14:c2:02:d7:43:72:bd:1f:
21:5f:c2:8c:bd:be:c0:51:83:93:c8:8f:b4:ca:e5:
db:0c:4e:35:07:9b:18:e5:5b:e1:2d:c3:c2:12:b2:
a0:dd:37:71:a1:28:91:42:40:cb:d4:0b:d7:1c:52:
0d:c9:f1:a1:6b:48:7f:5e:4c:8e:b2:0e:d3:31:51:
3c:d7:bb:4a:e1:d3:76:e9:0a:38:4c:1a:f6:4b:0c:
b1:76:39:e0:bc:1b:6a:2f:ee:33:77:17:fd:9e:28:
2f:d0:4f:8d:05:4e:1a:e7:4e:83:9e:e0:4e:39:3d:
37:0b:9e:7f:39:9a:95:4f:79:1a:a1:fa:3e:c1:d1:
58:a5:87:af:c9:c0:b8:8a:b4:08:aa:09:5c:04:82:
68:58:35:be:9b:f4:d1:d2:89:1d:66:05:dd:c0:d1:
51:da:ca:81:98:a8:b6:06:2a:d0:24:04:51:f5:4c:
79:85:fb:f8:fe:08:dc:43:30:d3:e9:ee:2e:30:3b:
0b:37:0c:fb:e2:8e:ca:7c:85:a3:a0:b3:9c:94:90:
54:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CE:7F:7E:17:A7:3E:E5:1E:24:6E:4E:D4:76:F8:A1:5C:F7:43:8C
X509v3 Authority Key Identifier:
keyid:43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:d3:8b:d5:61:0e:00:f0:e8:03:52:90:86:a2:d8:bf:9e:ff:
0b:2b:14:7e:dc:3d:b2:f3:d5:ff:9e:ab:db:ee:77:09:04:4b:
1c:00:38:5b:9e:1c:7e:58:02:12:21:d6:6d:41:6d:1d:5a:f1:
a3:ee:78:ee:e5:e7:e1:d8:99:02:fe:7f:a0:3f:bd:7f:e2:7d:
8d:f5:91:58:10:a6:10:22:47:fc:ec:ff:08:c3:62:b2:8c:bc:
dc:19:a7:91:17:c7:05:ab:a9:08:3d:c5:6a:2e:67:7e:03:cf:
c5:2d:23:6f:8e:70:f7:9d:5f:df:c5:98:58:c4:7f:9e:26:e8:
27:5f:37:ac:be:f8:3c:4d:a3:ee:af:9c:5d:0e:9d:82:76:91:
cd:d8:00:ac:d5:d0:79:94:28:30:1c:2a:5e:b4:60:89:35:f5:
14:93:fe:4f:f3:f3:4c:b4:80:1f:b4:9e:28:3a:93:92:a7:f2:
1a:f7:18:85:33:cc:3d:1f:64:0c:9f:4e:80:21:f9:00:5b:8e:
a4:27:3f:e3:bc:f9:b9:39:c0:3b:ce:16:80:89:8e:71:05:52:
8d:67:00:5f:d0:51:6c:e8:e5:ad:16:b5:49:b2:62:32:ce:f2:
55:48:df:18:42:02:7b:a2:21:5e:9a:04:fd:93:3e:5f:7f:07:
92:c5:94:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 18:59:29 2026 by rpki-client