Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/qRpLDo8sq7pqJWOUclIH3fPpNDQ.mft
File: qRpLDo8sq7pqJWOUclIH3fPpNDQ.mft (raw, json)
Hash identifier: osZ1gZRJ/j8t0kwRf/3eI0BUtvr5Dd3Go6DoLnLHoas=
Subject key identifier: D7:F6:40:B8:D8:B3:33:B7:D1:D3:FC:EC:FF:B6:AB:90:B4:46:40:6B
Authority key identifier: A9:1A:4B:0E:8F:2C:AB:BA:6A:25:63:94:72:52:07:DD:F3:E9:34:34
Certificate issuer: /CN=a91a4b0e8f2cabba6a256394725207ddf3e93434
Certificate serial: 01A08E69E6D21A1FF1F26903BAADDE074858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qRpLDo8sq7pqJWOUclIH3fPpNDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/qRpLDo8sq7pqJWOUclIH3fPpNDQ.mft
Manifest number: C3
Signing time: Fri 11 Sep 2026 03:01:40 +0000
Manifest this update: Fri 11 Sep 2026 03:01:40 +0000
Manifest next update: Sat 12 Sep 2026 03:01:40 +0000
Files and hashes: 1: 1-uaXjZ6yrrtJqfNtsY2-IfoHC9A.roa (hash: ZnV7OIgyRpJomB9RH+WRj4jIbkVriTkEGmB17bdQUdY=)
2: UiuaMadIa34ZVH4JPpb_7TjTz3A.roa (hash: 81//4wt6oj+yRk5h9sBjg6Uv03FMVzZyifdZ80jFUsU=)
3: qRpLDo8sq7pqJWOUclIH3fPpNDQ.crl (hash: isSSKRHed/yUlevLY0EJH1ctdzp09RERb4W6HCTR1uo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/qRpLDo8sq7pqJWOUclIH3fPpNDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/qRpLDo8sq7pqJWOUclIH3fPpNDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qRpLDo8sq7pqJWOUclIH3fPpNDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:69:e6:d2:1a:1f:f1:f2:69:03:ba:ad:de:07:48:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a91a4b0e8f2cabba6a256394725207ddf3e93434
Validity
Not Before: Sep 11 03:01:40 2026 GMT
Not After : Sep 12 03:01:40 2026 GMT
Subject: CN=d7f640b8d8b333b7d1d3fcecffb6ab90b446406b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:04:82:3d:fd:46:08:2b:0f:75:03:33:4b:62:
15:a3:ce:8f:80:0c:2d:3c:12:c7:aa:11:e9:ba:e5:
74:d1:73:80:8b:b4:ba:b3:2f:e5:c4:98:c3:31:f2:
c4:37:76:88:3f:3c:22:fa:7d:0e:6b:56:be:f4:a9:
16:bc:d6:a6:4a:e7:aa:34:9c:de:31:94:4c:12:2c:
ea:5a:22:a2:d4:da:48:ba:21:d3:ce:03:7d:98:b9:
a7:f4:61:aa:29:de:ad:89:18:1a:02:e2:1d:a8:ca:
35:dc:e5:f0:16:88:46:4a:e1:12:4c:75:6e:ac:b6:
3b:75:b9:68:b3:f2:94:47:1a:0d:a4:53:9f:28:5a:
91:59:4c:81:d8:45:93:73:9d:5f:6d:1e:f2:1f:09:
d5:50:ec:c4:4d:9b:76:ea:a3:81:1a:70:82:10:47:
06:83:f1:97:7c:ca:4c:d8:97:55:85:fd:45:6b:a6:
09:3d:01:23:44:6d:1e:64:b7:5e:2a:bb:b7:1c:24:
cf:51:1f:5c:40:81:95:d0:b4:67:73:7b:b1:b6:c6:
66:84:50:87:d8:1a:b8:9d:7a:b1:e4:07:2a:e8:94:
d9:1e:a2:84:3d:cd:21:6a:72:2f:30:43:90:bb:a4:
26:a4:b6:a0:3d:74:c8:f5:31:d0:2a:49:c2:2f:a8:
b3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F6:40:B8:D8:B3:33:B7:D1:D3:FC:EC:FF:B6:AB:90:B4:46:40:6B
X509v3 Authority Key Identifier:
keyid:A9:1A:4B:0E:8F:2C:AB:BA:6A:25:63:94:72:52:07:DD:F3:E9:34:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qRpLDo8sq7pqJWOUclIH3fPpNDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/qRpLDo8sq7pqJWOUclIH3fPpNDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/qRpLDo8sq7pqJWOUclIH3fPpNDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b5:66:57:19:29:c3:fa:f1:d9:aa:75:98:ef:24:1d:86:a0:
0b:1b:19:77:ec:d0:3e:f9:ce:d9:4c:6a:7e:12:f8:23:cd:b8:
b0:e8:d1:1e:9a:5a:13:6b:db:2c:13:a3:a8:e0:b4:e0:c3:ec:
5b:79:fd:db:8c:d8:08:76:ed:9a:2c:20:8e:73:3b:ed:73:2a:
b2:5d:de:d6:6a:5e:95:6d:cd:c0:04:7e:c3:e9:15:96:c0:9f:
04:dd:53:a4:bf:c6:29:60:91:55:81:47:b4:dd:b6:bc:16:7a:
35:5d:36:40:c4:ef:7e:36:09:5c:03:b2:43:3f:1c:0d:c1:0e:
ff:6e:04:18:ec:cd:0c:b3:a2:fc:b3:6c:09:b6:37:a7:5a:9e:
31:a3:68:b5:5b:e9:44:ce:13:54:d5:f3:a6:e5:87:f9:bb:d8:
83:fd:99:06:f7:41:d5:53:08:40:7d:ad:8f:e0:9d:a8:66:da:
80:ba:a1:5e:43:cb:93:f0:ed:db:da:d6:38:e1:6f:26:ea:48:
a8:2b:3d:f1:e1:e8:88:83:3f:f6:9f:fe:8f:20:47:b3:e6:c1:
cf:2d:f5:d6:35:82:32:c8:97:97:25:1b:4a:da:90:bc:b5:aa:
f3:fd:4f:a8:a1:13:60:c5:38:88:ce:7f:7a:41:9d:78:06:a9:
d8:0c:d2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 06:50:12 2026 by rpki-client