Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
File: Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft (raw, json)
Hash identifier: w3ttrXIpjMbLSYi3JjH0r+qPrTrmNaftacjDT1LAYOs=
Subject key identifier: 92:BD:E6:16:ED:69:DB:88:7F:67:9A:CF:1A:D3:97:5F:8F:CD:CE:5C
Authority key identifier: 42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
Certificate issuer: /CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Certificate serial: 01A08D565909312CA650B3C7CC9240E39D55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
Manifest number: 08CC
Signing time: Thu 10 Sep 2026 22:00:41 +0000
Manifest this update: Thu 10 Sep 2026 22:00:41 +0000
Manifest next update: Fri 11 Sep 2026 22:00:41 +0000
Files and hashes: 1: Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl (hash: 9NnBemn7Tbes0/McffWsxpPL8qKUu7LnFQOFKPvUbOM=)
2: fX5QoYhC7oWQVw3vDSbjr3GlOMs.roa (hash: glhB4Xck9+EeTURBJmeIzyghgm1Xn7IH7ZSK9Lk029k=)
3: uhmE3at76dYLrtDiQbzMepv_16I.roa (hash: /LKq8mUsMWaHICUc9KVgvqVuRJ8efqGttlCEBaJ+7kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:56:59:09:31:2c:a6:50:b3:c7:cc:92:40:e3:9d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Validity
Not Before: Sep 10 22:00:41 2026 GMT
Not After : Sep 11 22:00:41 2026 GMT
Subject: CN=92bde616ed69db887f679acf1ad3975f8fcdce5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:16:70:e7:ac:b3:e9:14:f2:44:60:9f:cf:8f:
ef:90:e8:0d:e8:f7:37:63:b2:e0:9f:89:ba:a5:dd:
81:1c:bb:76:01:91:4c:6e:41:10:4c:c0:5d:de:e6:
5c:7b:4c:c0:8b:0a:1e:fd:5e:24:03:cb:7f:11:fd:
e3:ff:92:e0:5d:f3:fe:79:45:6f:00:b8:94:2e:82:
89:70:76:d7:1b:d6:dc:34:fd:5f:32:fc:2d:8e:f8:
fa:af:bd:10:3f:0e:61:43:38:66:b2:27:3d:b8:71:
1b:1d:ba:b4:a3:39:ca:09:14:56:06:af:c7:35:af:
49:cd:46:f0:eb:a5:58:c3:a8:3a:17:d1:0f:e7:93:
b5:f6:03:dc:5a:5d:13:1c:df:52:71:a1:84:50:b0:
98:39:37:02:35:4c:9e:c1:68:8c:ba:00:fe:d0:81:
c3:aa:78:e8:e0:28:d0:4d:63:d3:35:9d:40:a0:8f:
97:03:8e:74:95:f1:2c:aa:bd:93:d6:73:42:f3:22:
08:a4:32:b4:99:5e:f3:00:63:41:8f:18:2a:1a:13:
be:7d:4f:f1:ea:ac:8f:3e:9a:cf:d4:a5:37:65:9f:
07:3c:fa:84:10:02:de:ff:cf:62:9d:83:7f:7a:61:
42:e2:b1:59:b2:ae:93:3f:b4:13:6d:6a:bf:55:39:
8f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BD:E6:16:ED:69:DB:88:7F:67:9A:CF:1A:D3:97:5F:8F:CD:CE:5C
X509v3 Authority Key Identifier:
keyid:42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:11:07:de:17:97:2e:60:7e:d5:2d:73:bd:c2:35:14:cc:15:
1a:02:34:e3:6c:a1:ad:54:25:82:00:1f:fd:49:b3:d4:cf:d8:
56:b8:29:d1:72:6f:bc:86:ce:aa:09:f6:45:e4:33:df:93:c0:
2b:7f:ee:c1:6e:ff:c4:94:c0:d9:68:bf:ab:cc:94:db:b2:2b:
03:25:99:89:c3:45:ab:51:bc:ea:92:f4:cf:1c:2a:48:3a:48:
e6:4c:eb:b2:82:70:63:e4:12:88:d2:41:54:4a:df:58:4d:65:
8b:bc:b6:10:05:7c:7c:6f:dd:f0:25:42:44:e6:0b:49:f2:a5:
a4:f2:6a:5c:bc:d3:8a:e6:0c:99:91:a4:bd:4a:db:59:65:09:
ec:24:e7:6b:b6:86:f9:65:4d:aa:62:fe:b9:4c:a8:4d:59:3c:
a0:82:7c:9c:34:fc:ee:93:6d:92:6a:cb:33:5d:5a:70:9d:45:
0d:65:dd:aa:34:d1:01:2a:0c:54:90:a2:2f:5a:d9:f8:6f:75:
4b:82:eb:32:d7:09:be:73:17:96:86:1e:9f:d5:27:a6:1b:fc:
d6:97:a5:37:9b:82:11:58:51:9c:5f:2d:40:a0:38:dc:2b:c0:
21:8d:4b:dc:16:17:3d:1e:57:b8:fa:ab:7a:a4:74:06:da:d3:
08:ee:1e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 04:15:56 2026 by rpki-client