Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
File: Q_BsNphySzf-GhcRQX29iOu_CpE.mft (raw, json)
Hash identifier: dfgdYDZ7x1mQMDMcRLrf+HNU4CSJD1KWZXoO99Lzdgo=
Subject key identifier: 9F:FC:67:AE:2B:56:BB:B0:DB:75:EA:12:80:CF:B6:59:FB:A8:01:CD
Authority key identifier: 43:F0:6C:36:98:72:4B:37:FE:1A:17:11:41:7D:BD:88:EB:BF:0A:91
Certificate issuer: /CN=43f06c3698724b37fe1a1711417dbd88ebbf0a91
Certificate serial: 01A08CE9373DCFA4DC489D1D5A0FE24FED14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
Manifest number: 039D
Signing time: Thu 10 Sep 2026 20:01:29 +0000
Manifest this update: Thu 10 Sep 2026 20:01:29 +0000
Manifest next update: Fri 11 Sep 2026 20:01:29 +0000
Files and hashes: 1: 9i2FNq-ilnO82a12KCx8bZf9uj0.roa (hash: e5YuVWmmuJUMRKFIac15BKkt/ujz30drSZUPYaFPPoE=)
2: Q_BsNphySzf-GhcRQX29iOu_CpE.crl (hash: q7BFJ/NPi8EtopVD37D6nQpPmqlyQYMZPIGFnWeasr8=)
3: WGgjc9Dg0G9csDwIMq1t0ZtJTWA.roa (hash: cVZmg6mqBIAtl689EL6CUc0A6vHkHLnQ4WlcU+2etIc=)
4: tvttSBr7BAYjU6B6SYrmyrXgmPc.roa (hash: cY0rsNXodbspFudhEGa5CSODCsQ4WfZrUF/qlRWnO7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e9:37:3d:cf:a4:dc:48:9d:1d:5a:0f:e2:4f:ed:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43f06c3698724b37fe1a1711417dbd88ebbf0a91
Validity
Not Before: Sep 10 20:01:29 2026 GMT
Not After : Sep 11 20:01:29 2026 GMT
Subject: CN=9ffc67ae2b56bbb0db75ea1280cfb659fba801cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f9:b4:15:eb:ea:35:83:9f:45:15:21:06:e4:
27:5d:3b:27:07:ac:1e:ff:1c:fd:21:a3:cd:02:5a:
b1:26:be:60:d3:f8:a5:a8:b8:df:89:a5:d9:ae:97:
2a:4b:3b:58:7a:0a:6c:6a:0b:42:26:36:c2:ba:f6:
20:cc:0b:a8:55:d5:7c:35:8a:2a:25:f2:44:ab:25:
cd:fd:7b:85:04:3d:d8:86:31:ff:25:8c:3d:bb:ae:
06:83:0d:52:84:52:e1:ec:fe:44:96:2b:de:e8:47:
17:05:b5:58:0f:f2:74:1b:48:2d:10:69:b6:0c:5a:
05:0e:62:63:44:47:2c:b3:e8:43:ff:6c:16:a9:c0:
39:c7:18:dc:61:ed:30:45:a7:bf:a1:df:32:84:60:
66:30:66:1c:78:b4:db:33:08:53:e2:32:14:ef:dd:
cd:c3:83:40:c5:69:58:ce:73:85:ff:cf:c9:f2:43:
36:5e:c0:f1:16:34:d1:c8:0c:18:0f:b1:60:99:17:
bc:e8:6d:27:cc:d7:02:a1:1c:79:eb:49:d5:7b:08:
98:b6:8e:38:f4:60:ae:c9:a0:62:15:82:6c:7e:3a:
b8:95:e0:72:76:ef:f9:55:8d:83:dd:b6:a2:60:ce:
d0:5d:95:8c:63:17:80:52:9a:7b:2c:70:7b:c5:b5:
f6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:FC:67:AE:2B:56:BB:B0:DB:75:EA:12:80:CF:B6:59:FB:A8:01:CD
X509v3 Authority Key Identifier:
keyid:43:F0:6C:36:98:72:4B:37:FE:1A:17:11:41:7D:BD:88:EB:BF:0A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:89:f9:6b:a4:6f:f7:90:fa:28:1f:4d:0c:e4:78:b4:49:99:
87:e4:6d:ba:1c:de:28:ed:3d:b6:91:6c:dd:e0:8b:3d:94:88:
d5:db:ca:1a:58:e4:3d:7b:37:46:fc:a4:00:1d:12:28:a3:c6:
10:30:6b:43:d9:1a:6d:71:8b:11:17:a2:27:b0:a9:b6:7f:fa:
bf:3c:01:51:02:0d:69:7c:8a:82:0b:af:40:79:87:01:1b:b2:
53:bb:f4:b2:55:55:4e:d4:85:3e:76:1e:e9:70:19:4a:45:87:
6a:f4:e9:d9:11:f0:84:37:a7:79:6a:84:76:f2:75:d5:6b:79:
78:dc:0e:8d:9e:f3:fd:77:93:09:5b:29:53:d0:09:ab:d3:38:
fa:0f:8d:aa:4e:cd:55:f6:ff:14:f8:ae:f5:87:30:c1:2b:dc:
44:3e:98:60:c3:ae:f8:ab:c8:e4:68:a2:2e:1d:00:b4:d1:fa:
5c:cd:b7:39:e6:a7:4a:1d:14:47:f7:e0:0b:b8:72:9f:e7:45:
35:96:56:82:42:2d:a4:24:a0:85:47:a3:c4:49:27:6b:1f:97:
15:6c:a0:5f:6c:ff:25:85:ae:ed:13:45:45:db:20:0d:88:17:
4c:33:84:c0:5d:47:55:28:b3:7d:93:26:17:3a:63:52:8e:81:
93:f1:a7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:38:07 2026 by rpki-client