Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
File: qS25uA37nJVniwfvLJU9YxB_X2I.mft (raw, json)
Hash identifier: 0FRG09bL0F4n7XSfeYkhN0FSGWa/MB8EQxJe7tooiEI=
Subject key identifier: 39:D0:01:6A:01:98:E2:EE:9B:43:2F:76:37:73:ED:3B:F5:65:1A:C7
Authority key identifier: A9:2D:B9:B8:0D:FB:9C:95:67:8B:07:EF:2C:95:3D:63:10:7F:5F:62
Certificate issuer: /CN=a92db9b80dfb9c95678b07ef2c953d63107f5f62
Certificate serial: 01A1521A8F5D93A8A4575A92C1DB639015CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
Manifest number: 0D10
Signing time: Mon 19 Oct 2026 03:00:34 +0000
Manifest this update: Mon 19 Oct 2026 03:00:34 +0000
Manifest next update: Tue 20 Oct 2026 03:00:34 +0000
Files and hashes: 1: AHY4ZcpWBg0aIiFkhUXaY2emMvk.roa (hash: XYjuOSawg9GbeUiAsIFDnNUeoKdfUJFTjZesq9ksMa4=)
2: qS25uA37nJVniwfvLJU9YxB_X2I.crl (hash: +pDX4sNhwZaEHYWTsKTM3gJXOxbXfY3StCgWYH++CWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:52:1a:8f:5d:93:a8:a4:57:5a:92:c1:db:63:90:15:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92db9b80dfb9c95678b07ef2c953d63107f5f62
Validity
Not Before: Oct 19 03:00:34 2026 GMT
Not After : Oct 20 03:00:34 2026 GMT
Subject: CN=39d0016a0198e2ee9b432f763773ed3bf5651ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f2:3f:45:29:16:47:15:f3:67:85:ff:3f:a0:
06:56:09:43:a6:a4:9c:b5:e2:74:23:6f:5d:21:ee:
8f:f5:7b:07:94:fd:62:b8:a9:1b:a3:25:b8:62:d3:
bb:9e:ae:d6:9c:f0:16:fd:b7:84:3c:8a:61:a3:3a:
3e:d6:b0:57:98:7f:0c:6c:d3:c8:bd:0b:4e:c4:19:
c0:54:7c:55:44:44:f8:20:81:af:ef:6d:6a:5a:a2:
02:77:6a:45:7c:54:a6:33:3d:aa:24:c8:59:57:3d:
20:ac:44:24:85:10:9b:9c:e0:4f:6b:2a:17:29:b5:
04:61:04:d5:a3:f6:81:49:b7:6a:7f:47:e0:ef:a4:
2d:86:5f:2a:30:91:93:18:8d:83:6d:b2:80:d5:30:
c3:f9:e5:a9:67:89:db:c0:c0:e6:0d:ce:96:d6:58:
ec:37:15:4c:cd:d3:4f:3a:e0:4c:00:d5:63:33:eb:
bf:86:3d:8f:6f:a0:7b:15:af:f0:68:0c:00:73:98:
f7:8c:2a:36:e7:ab:22:ee:02:da:dc:76:a9:65:36:
db:38:ca:8a:42:84:86:72:da:d1:c7:79:16:d9:bc:
c2:69:cb:2e:3a:21:60:22:81:04:1f:15:ca:a7:0e:
ca:1d:26:0a:8a:49:b1:08:38:56:c1:e6:9e:65:d3:
61:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D0:01:6A:01:98:E2:EE:9B:43:2F:76:37:73:ED:3B:F5:65:1A:C7
X509v3 Authority Key Identifier:
keyid:A9:2D:B9:B8:0D:FB:9C:95:67:8B:07:EF:2C:95:3D:63:10:7F:5F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:df:0c:a9:76:7d:d7:16:ad:cc:5c:fd:cb:bb:be:99:81:58:
1f:cb:67:f2:e9:50:91:84:0f:58:17:f5:de:d3:c1:ae:3d:b4:
4c:24:23:c0:0b:6b:f8:88:3b:aa:17:b3:ed:a6:00:36:02:ea:
64:98:24:d8:09:5c:be:73:df:a1:f6:8b:83:ca:e5:47:ec:23:
85:b0:c3:d1:c1:6b:cc:38:3a:a2:14:9a:e8:da:b1:c8:26:eb:
b0:2f:bd:49:f8:a7:b0:d2:94:dc:90:8a:6f:1b:49:16:e8:0e:
8b:93:cf:8c:d9:c1:7d:8d:e7:bc:e9:cf:6d:f8:07:92:0e:50:
42:ce:0e:c8:21:57:a2:78:8a:3e:9d:77:1b:26:7d:98:2a:2c:
a9:58:ed:31:43:7a:7c:a9:ad:77:1c:ca:a1:62:08:06:41:51:
1b:a8:7c:7a:8c:e3:64:a3:f6:04:a0:28:3a:e9:18:36:09:b1:
18:1a:88:46:d6:4a:f4:bf:e2:05:a3:bc:61:8d:f0:81:33:47:
9c:9c:9a:04:1e:07:0a:6d:40:f4:0f:f4:64:aa:8a:b0:5b:a3:
56:5b:36:e4:aa:5c:28:89:e5:01:4a:c5:e9:15:95:13:79:2d:
cb:79:e0:c8:ad:f5:4a:1f:70:1a:19:97:53:03:1c:6c:e7:23:
84:1b:c8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 19:55:58 2026 by rpki-client