Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
File: Qy_nD0zvEDdoNhUvOOTghTLMe58.mft (raw, json)
Hash identifier: f0QUbLg/wf3wryLTd5FIt/WaWkBrwb4cHAEIrXc8Fpk=
Subject key identifier: DC:14:07:43:7E:23:89:2C:82:43:E7:BC:24:27:DA:86:85:84:41:9D
Authority key identifier: 43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
Certificate issuer: /CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Certificate serial: 01A08A55CB3D7A14D95FFFE6698D6B57F0F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
Manifest number: 08F1
Signing time: Thu 10 Sep 2026 08:01:13 +0000
Manifest this update: Thu 10 Sep 2026 08:01:13 +0000
Manifest next update: Fri 11 Sep 2026 08:01:13 +0000
Files and hashes: 1: A9KPkngUXWXwoXMeh9I603GmeJg.roa (hash: dKQV+T7YqY4RYKx4LLE6fQsZ703AeKW3tQVyd7Sv7c8=)
2: Qy_nD0zvEDdoNhUvOOTghTLMe58.crl (hash: KZ+zM4kbSnb6k7tspQjIs0iWccNBh4u/ki6zxqFOyt0=)
3: sKDKorvVElJgqwc1YL9x1RhoYEM.roa (hash: SXIrFPkLP5e0Dojj65FY1WNGEqYxxlyXHUyw6TzDiOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:cb:3d:7a:14:d9:5f:ff:e6:69:8d:6b:57:f0:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Validity
Not Before: Sep 10 08:01:13 2026 GMT
Not After : Sep 11 08:01:13 2026 GMT
Subject: CN=dc1407437e23892c8243e7bc2427da868584419d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:45:d9:df:81:7b:de:c3:47:ca:a6:85:85:d3:
e4:50:8d:b3:ce:f4:aa:d3:96:de:40:d6:67:ab:eb:
94:ce:f8:ed:98:e4:0e:d1:56:c4:3e:2f:05:dd:fc:
32:2e:05:7e:d6:c3:11:1e:22:fd:34:9d:72:c9:38:
7b:dd:bf:ad:35:9a:6c:9f:fd:16:46:28:96:3f:83:
2f:77:56:98:00:8f:89:89:10:c2:c8:48:70:70:b6:
6b:b4:83:f8:c5:b9:b7:fd:6c:6e:7a:d8:99:be:b5:
9a:ad:c3:5d:77:6d:ee:48:fb:ff:f5:49:5d:83:b5:
2d:8f:5a:b9:0e:87:43:66:17:2f:6f:28:7c:0c:ba:
1b:a9:94:3f:b4:a4:f5:37:c3:a5:0c:7b:81:ac:e4:
f2:f4:f6:3e:83:bb:37:14:9a:d3:8b:af:73:5d:7e:
6e:4a:09:4d:cd:81:44:cf:b1:79:7a:06:c8:f3:db:
ae:9b:56:d7:76:bd:aa:32:2a:3a:a8:2a:9a:fe:7f:
d7:d0:2b:14:5d:9e:bb:06:81:47:36:a9:ec:38:be:
67:2d:3b:9e:cb:6d:7a:46:22:0f:79:42:5f:82:97:
db:f1:8a:70:64:ac:89:21:6d:d5:c9:9f:6d:30:27:
61:84:16:a6:91:d2:d0:b2:3a:22:2e:54:34:29:4d:
d6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:14:07:43:7E:23:89:2C:82:43:E7:BC:24:27:DA:86:85:84:41:9D
X509v3 Authority Key Identifier:
keyid:43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:71:67:2f:37:28:4c:24:e0:c7:98:11:cc:7c:8d:02:e6:81:
06:17:1a:d8:1b:38:49:6d:88:74:73:d4:de:9e:1f:44:d4:85:
7e:57:c9:e5:23:bc:0b:bb:be:2f:5b:cc:cf:e2:c2:6f:70:51:
7e:c9:c3:e8:cc:6b:1f:6e:b2:69:0f:82:dc:a4:5d:7d:34:10:
77:70:b5:3d:7b:c7:7d:85:19:54:0a:d3:85:db:f0:7f:b4:ca:
3b:7a:c8:2b:08:9f:93:88:42:59:31:ef:55:5a:98:a8:db:5d:
5f:70:fc:46:9b:1e:f3:5d:39:40:e4:a2:47:99:b8:b0:2c:1b:
5b:e6:2f:ba:07:5a:22:eb:03:59:3c:b0:fd:d6:f5:c7:83:6e:
59:f0:d0:02:fc:86:84:cd:7c:26:a1:26:96:b0:5b:28:0e:ea:
33:21:da:cb:4a:08:c8:83:c9:52:2a:33:83:29:76:6d:d1:1c:
13:a0:94:af:ce:1d:16:34:4b:c9:38:fd:ea:b6:38:b0:aa:4e:
aa:4b:cb:7d:61:05:50:c0:46:f7:ac:3e:5a:ff:41:12:5a:46:
5b:da:50:c1:ef:fc:98:96:81:ca:09:f5:b6:dd:07:27:15:01:
78:01:95:a1:b5:14:9b:4f:31:ce:4d:ba:ed:cd:13:65:db:df:
16:07:24:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:38:59 2026 by rpki-client