Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
File: qBaZpbxkh70vF0nRM_yi43_U2og.mft (raw, json)
Hash identifier: m4kp6mgNOVGkuVbQrL9iKRGid/x6a8eyUeJ4HJIyHhg=
Subject key identifier: 25:D7:57:D1:21:6E:58:AC:5A:C3:0B:43:A1:28:FD:AE:CF:5F:FA:81
Authority key identifier: A8:16:99:A5:BC:64:87:BD:2F:17:49:D1:33:FC:A2:E3:7F:D4:DA:88
Certificate issuer: /CN=a81699a5bc6487bd2f1749d133fca2e37fd4da88
Certificate serial: 01A0B72DF191B71EC9E05C301DC3BBFCB660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
Manifest number: 1145
Signing time: Sat 19 Sep 2026 01:00:36 +0000
Manifest this update: Sat 19 Sep 2026 01:00:36 +0000
Manifest next update: Sun 20 Sep 2026 01:00:36 +0000
Files and hashes: 1: 0rfYrVviZUVYPptqvM07XCjMZN8.roa (hash: NsAvwSlgjtFhEFUQcFrnr4l17cyyPI73mz93IQlKjBw=)
2: qBaZpbxkh70vF0nRM_yi43_U2og.crl (hash: jVlNC7KtjUate5hLqHL0eif6nEasah/u7HKCv8k3y9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b7:2d:f1:91:b7:1e:c9:e0:5c:30:1d:c3:bb:fc:b6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81699a5bc6487bd2f1749d133fca2e37fd4da88
Validity
Not Before: Sep 19 01:00:36 2026 GMT
Not After : Sep 20 01:00:36 2026 GMT
Subject: CN=25d757d1216e58ac5ac30b43a128fdaecf5ffa81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6d:c2:c4:94:35:bb:46:3c:52:88:fb:57:49:
0a:5c:0d:6b:3f:27:73:c0:c7:b2:8c:43:4d:89:b3:
f1:c3:96:e0:6e:95:86:6a:c6:3b:d4:da:6a:e5:82:
19:c2:5f:98:a5:8e:20:ce:f3:15:b4:ce:43:1d:80:
92:a7:0f:75:7a:bd:c4:24:11:f3:1b:e8:b5:3f:e8:
e9:e4:44:bb:75:25:9a:20:5d:5a:cb:c1:6c:4c:e4:
d3:2b:ce:fc:35:54:c7:c5:a8:e1:94:d3:d6:08:3d:
85:b1:58:e5:72:81:0d:9d:27:f8:1a:6a:5f:62:96:
32:73:2a:47:4b:6c:97:96:30:e3:bc:60:cb:ac:8d:
53:19:30:de:79:67:ab:5f:6c:6b:a2:59:ea:bb:ef:
e2:6d:8b:48:34:83:2e:d3:5c:36:7d:7b:ae:f1:8f:
1a:ad:bb:72:44:cf:50:19:14:90:17:4d:ac:cb:25:
0c:47:e6:da:a8:22:46:c8:c7:62:85:a1:5b:6f:c0:
41:7a:38:dc:fe:eb:f2:69:b2:1d:eb:f5:d8:17:29:
54:c3:7a:81:b5:66:73:7e:7e:79:17:03:f1:37:35:
cd:5e:16:e5:d6:46:54:c5:6f:c8:24:59:78:60:81:
35:d6:f6:b8:0e:c5:58:85:b1:cf:c8:07:21:bc:7e:
8f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D7:57:D1:21:6E:58:AC:5A:C3:0B:43:A1:28:FD:AE:CF:5F:FA:81
X509v3 Authority Key Identifier:
keyid:A8:16:99:A5:BC:64:87:BD:2F:17:49:D1:33:FC:A2:E3:7F:D4:DA:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:d9:c0:3d:52:d0:ab:21:3c:d9:36:4d:eb:4d:76:db:00:31:
71:33:d2:22:fb:84:56:e8:9e:ec:e1:36:38:5a:cb:3e:5a:03:
f0:3e:5e:a2:b5:3c:9f:f6:a7:a8:48:8b:ae:da:cf:91:4c:0b:
6d:39:91:d2:4e:87:81:19:df:ff:ce:84:87:a8:1e:9f:1d:c6:
43:e0:b6:95:b6:c0:1c:a1:6d:80:a5:87:a1:cc:8c:5b:24:d0:
68:13:60:0a:dd:94:00:c8:67:15:0a:15:6f:d4:89:82:af:89:
af:f8:7c:58:31:07:d9:bc:2f:06:b8:db:85:7a:7d:83:0d:86:
d2:be:04:15:1a:32:57:98:a3:d9:62:4d:84:43:ea:23:2c:e7:
34:f3:1d:4c:d0:60:86:71:72:f8:b9:a1:a2:48:69:15:25:f8:
36:f7:e0:4d:40:a8:4f:63:7f:b0:3d:17:77:e5:59:98:07:60:
a3:ca:a8:4a:b6:d3:af:83:d3:22:62:bd:4a:18:b1:9f:08:ca:
5f:43:dc:6b:47:c4:f7:0a:00:b7:20:3d:8f:c3:2c:b3:da:d6:
a9:04:c5:06:a8:ca:3b:58:40:73:be:68:43:f4:ed:6c:ac:a1:
37:ac:f0:84:b4:78:c4:e5:e9:12:40:62:fe:dc:44:92:02:e0:
2e:d2:29:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 06:57:37 2026 by rpki-client