Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
File: Q0llhOXPObVodN6Nx3qjpv-eih4.mft (raw, json)
Hash identifier: zdaBXpkV/cVdCEihxm5eN8KsaSDSb199vmQZskJSuTU=
Subject key identifier: 12:2E:58:42:B0:0C:16:9F:A6:3D:D0:5C:31:7F:6A:C8:75:B8:EF:8F
Authority key identifier: 43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
Certificate issuer: /CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Certificate serial: 01A1DCF01CAB4EFB6EBD24E0D47D8DC3BA75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
Manifest number: 1796
Signing time: Sun 15 Nov 2026 02:01:25 +0000
Manifest this update: Sun 15 Nov 2026 02:01:25 +0000
Manifest next update: Mon 16 Nov 2026 02:01:25 +0000
Files and hashes: 1: Q0llhOXPObVodN6Nx3qjpv-eih4.crl (hash: FpFAs239pNbBtdbSvzfR2iw38afsVbwkKrt7R8UHw14=)
2: eTNkVC7XWRHBzuyFVu3pxnwq3z4.roa (hash: b8ZbPv94PI8PSCuaUsrniKkw7cN6jjfuOqQWfIOj1qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:f0:1c:ab:4e:fb:6e:bd:24:e0:d4:7d:8d:c3:ba:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Validity
Not Before: Nov 15 02:01:25 2026 GMT
Not After : Nov 16 02:01:25 2026 GMT
Subject: CN=122e5842b00c169fa63dd05c317f6ac875b8ef8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b7:4f:0d:bd:14:b5:29:2a:c7:d1:3c:a0:c7:
98:2e:de:e5:de:36:bb:8d:9a:4a:de:c1:73:3d:be:
70:7e:1c:b1:23:0c:30:6d:fe:3d:63:ce:71:cc:a6:
26:c3:29:c3:05:aa:dd:71:f1:cc:ed:6a:83:01:18:
8f:10:b5:3f:8e:8d:83:ae:ca:e5:93:c2:29:5f:f8:
e3:b2:2b:c4:17:30:c7:3f:81:1c:65:1c:46:7a:c9:
6a:97:b6:f4:0c:af:99:31:95:3d:2b:d2:77:ad:9f:
14:3b:1a:96:e1:e2:8a:8e:fb:18:ec:53:74:02:57:
d1:b6:7f:88:e6:d0:85:ac:5b:0d:db:ca:50:c8:a7:
f7:f4:8a:ca:8c:63:50:48:f1:ac:f1:01:d5:46:dc:
5e:26:14:66:a2:bd:f7:0e:71:7f:4c:82:b4:a0:5f:
1c:23:13:c5:9d:5d:84:d2:94:96:7f:ce:fa:7d:f1:
f6:aa:2a:ae:2f:99:7c:7b:03:93:69:fc:74:83:cd:
b6:5e:86:7a:9f:74:39:28:6f:84:93:a3:cf:cd:7f:
16:bc:3e:c0:93:6b:cf:d9:42:57:59:db:8a:10:db:
82:8c:d7:36:f7:a7:94:52:72:80:b7:7c:59:10:5c:
a7:35:ac:ae:8d:5a:28:8b:7a:1f:7c:fe:52:4d:91:
07:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2E:58:42:B0:0C:16:9F:A6:3D:D0:5C:31:7F:6A:C8:75:B8:EF:8F
X509v3 Authority Key Identifier:
keyid:43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:92:14:21:ad:1a:7e:6a:4f:d0:80:91:35:f8:55:aa:f4:77:
62:1f:6a:48:e9:a8:41:a9:85:db:1d:66:f7:6a:f1:01:9d:33:
09:09:d2:99:54:0d:78:22:58:ba:32:c8:0f:aa:47:e8:f1:16:
38:fb:c9:4c:b6:e5:46:b2:39:a1:ec:3a:d9:c7:b1:0e:8f:a5:
b4:4f:58:56:6c:47:ad:0c:34:2e:9e:2e:ea:10:b8:c3:7e:23:
df:da:a8:97:a1:00:42:0f:fd:90:14:45:c2:01:ab:3c:65:bc:
85:b6:72:dc:ec:d9:fe:04:8d:82:35:4a:cd:4b:f0:51:97:e2:
35:91:e5:9b:51:00:9b:17:d9:46:f3:b7:4d:82:80:4f:a4:33:
22:6b:2b:41:d3:60:2c:8f:11:ee:f2:2a:76:64:b1:c8:29:29:
82:9e:91:58:e0:7b:48:ed:4b:68:5c:02:1e:a4:8f:e6:3a:79:
0e:ce:54:f4:09:47:3b:97:9a:dc:3b:84:1e:51:52:cc:74:16:
cb:4e:fe:9f:fe:cd:17:2d:67:e9:6e:3c:1b:09:e5:ac:2e:f1:
fe:b6:0c:db:d3:7a:64:52:f4:75:4d:80:0a:92:9d:64:c6:39:
a7:b5:9a:97:18:92:fc:b5:6c:51:7c:3f:da:3f:0e:a0:57:48:
31:69:47:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:40:55 2026 by rpki-client