Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
File: _-Q3vK2brPo7drfdBFQTP7TYyz4.mft (raw, json)
Hash identifier: aAd0F9KiXb5FPZ6Og6t9yIUU3vUWLptpEd01b6ZovAs=
Subject key identifier: C8:83:5A:28:57:C6:25:8F:73:75:21:8B:18:4C:CF:20:05:AA:8E:A2
Authority key identifier: FF:E4:37:BC:AD:9B:AC:FA:3B:76:B7:DD:04:54:13:3F:B4:D8:CB:3E
Certificate issuer: /CN=ffe437bcad9bacfa3b76b7dd0454133fb4d8cb3e
Certificate serial: 01A1DD272909C2CED38F52DA7A9447F46581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
Manifest number: 04F0
Signing time: Sun 15 Nov 2026 03:01:33 +0000
Manifest this update: Sun 15 Nov 2026 03:01:33 +0000
Manifest next update: Mon 16 Nov 2026 03:01:33 +0000
Files and hashes: 1: _-Q3vK2brPo7drfdBFQTP7TYyz4.crl (hash: +6UbH1XOeoMSjfekei1BPv4bjPrfQEGB002U0vijQSE=)
2: k9k26h_wk2KwXBbexASmBckIdio.roa (hash: IkgLudWAy48LS7n3a0wG6CHVGFDidThlfHrJKCCT1wM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:27:29:09:c2:ce:d3:8f:52:da:7a:94:47:f4:65:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe437bcad9bacfa3b76b7dd0454133fb4d8cb3e
Validity
Not Before: Nov 15 03:01:33 2026 GMT
Not After : Nov 16 03:01:33 2026 GMT
Subject: CN=c8835a2857c6258f7375218b184ccf2005aa8ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:91:3a:25:e2:b6:86:78:b6:22:34:37:1d:11:
90:53:57:80:40:52:47:2c:22:d8:40:6d:8b:13:4d:
c0:34:0a:e7:03:f3:d8:81:3c:21:cb:40:7c:69:9e:
fb:de:d6:6f:be:6e:39:b4:0c:94:bd:47:e3:b2:46:
37:11:49:31:a7:99:06:4e:9b:e0:d7:18:f8:7b:12:
12:53:4f:04:20:67:27:55:47:fb:11:65:ea:c5:b5:
79:11:a5:97:54:b0:4c:b5:4b:53:0c:9a:48:3c:1a:
7f:6d:7d:89:0c:d7:7b:e0:ec:58:b7:68:44:c5:c8:
e1:60:86:31:c0:16:93:a2:b7:7e:0d:8e:bf:06:6d:
47:7b:cd:46:a9:2e:42:b2:d5:7c:77:55:2a:61:6f:
d4:c4:b4:81:0c:70:ae:4b:81:dc:11:be:88:16:ec:
63:df:25:c8:dd:fe:d9:00:f9:e7:95:f9:77:da:c0:
ef:85:ed:6d:39:df:3e:3c:8b:94:2c:60:1e:ec:98:
d3:17:77:c4:46:7d:cf:e3:78:a6:70:2a:fa:f2:99:
d3:3b:31:79:62:c0:d6:01:0a:65:78:fe:d7:ba:5c:
97:6d:99:d9:9b:4f:30:ab:70:de:a0:6a:62:63:25:
99:bd:cf:ee:d3:d9:9e:e2:87:04:2e:3c:6d:fb:92:
ac:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:83:5A:28:57:C6:25:8F:73:75:21:8B:18:4C:CF:20:05:AA:8E:A2
X509v3 Authority Key Identifier:
keyid:FF:E4:37:BC:AD:9B:AC:FA:3B:76:B7:DD:04:54:13:3F:B4:D8:CB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:18:71:73:02:77:c9:59:fb:e4:76:af:f9:24:5e:0d:7c:ee:
9b:44:43:5d:ed:49:93:70:08:d2:c8:53:91:7e:25:21:09:a5:
a3:0d:21:d1:2d:0a:95:95:c8:72:20:4e:52:09:fd:6b:b6:1d:
e0:7f:63:aa:9b:79:af:68:0d:9b:85:42:e2:98:a1:9b:66:ea:
78:32:d4:9e:63:c2:dd:7f:e4:93:ac:46:e0:43:d9:28:24:79:
0a:51:72:64:90:1f:b8:c7:c9:35:e7:1f:71:13:e0:b7:1d:d4:
69:47:c6:0b:01:5f:4c:30:b4:76:86:14:44:0b:72:e0:aa:41:
79:af:9d:16:e5:35:39:97:a5:68:60:9a:13:5f:ad:ea:ef:2a:
a2:b9:fe:03:66:13:69:47:e9:ae:cb:db:b9:ba:51:80:0e:d8:
6e:ae:c1:27:1b:fc:93:b3:f1:db:9b:b9:2e:47:84:eb:bb:3c:
66:44:53:7f:b0:28:92:dd:a8:55:c0:4b:88:30:e3:c9:e1:39:
f6:0c:ea:77:cf:3e:64:b5:54:e3:c2:62:66:f5:8f:08:d4:eb:
de:f9:5a:90:ea:a9:e9:0f:99:33:49:2a:4f:f8:1b:be:db:ba:
cf:20:fb:0a:a4:60:a7:23:e3:91:e6:f3:11:9f:8d:64:20:78:
54:ad:31:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 07:17:05 2026 by rpki-client