Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
File: QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft (raw, json)
Hash identifier: v8IuSGMQzxjzvk6D7jpaPxYVNc7QiO1Nf+BFJCvM1Lw=
Subject key identifier: F6:C0:C4:AB:FB:5B:C7:1D:9F:24:31:9A:BA:54:1F:81:24:B4:A1:1B
Authority key identifier: 43:1C:57:E1:92:1D:31:A3:4A:EB:D1:2E:50:7A:13:6F:E0:45:98:C6
Certificate issuer: /CN=431c57e1921d31a34aebd12e507a136fe04598c6
Certificate serial: 01A08C4415CCA3546FFBFD3C9FADD2EB7A99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
Manifest number: 0805
Signing time: Thu 10 Sep 2026 17:01:07 +0000
Manifest this update: Thu 10 Sep 2026 17:01:07 +0000
Manifest next update: Fri 11 Sep 2026 17:01:07 +0000
Files and hashes: 1: QxxX4ZIdMaNK69EuUHoTb-BFmMY.crl (hash: CyeATZtYLMmaN74LKp6rnaAXZguLNo1iHHr1n2GI6/8=)
2: mIEKfqcwzKGnUqM9s4OdPs7YrbA.roa (hash: buVxIPz10EIVfwpYwh+P1ZYqWF3K+n7bUAR0sR0jGqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:44:15:cc:a3:54:6f:fb:fd:3c:9f:ad:d2:eb:7a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=431c57e1921d31a34aebd12e507a136fe04598c6
Validity
Not Before: Sep 10 17:01:07 2026 GMT
Not After : Sep 11 17:01:07 2026 GMT
Subject: CN=f6c0c4abfb5bc71d9f24319aba541f8124b4a11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:de:77:3c:bd:1e:73:6b:ce:5e:28:be:bb:1e:
3d:61:7d:05:e4:db:5d:46:76:a6:28:d8:20:26:e4:
3e:ce:56:a9:58:7d:a8:2b:fb:45:86:08:7d:b4:39:
2c:32:31:b8:e6:ab:8b:b6:2f:9d:96:12:9d:3d:62:
1f:d1:50:50:29:19:f4:3e:18:0d:b6:f8:98:1f:36:
ba:7b:8d:af:ac:0c:2b:5c:cc:2c:0a:f3:2e:d2:9e:
44:35:36:e9:63:d9:68:2a:b7:17:9b:c9:05:97:3a:
25:fe:ed:11:5a:f5:94:20:e4:5c:91:57:cf:19:cf:
73:18:aa:c7:d9:7d:33:a5:b6:c9:b5:f6:93:40:be:
80:fb:e8:db:37:f7:d0:2f:8c:73:cc:21:d9:d5:99:
7b:4a:47:cc:21:e5:90:aa:65:f4:e8:06:97:c6:91:
45:19:a4:c7:20:14:98:38:dc:8b:50:46:9d:4e:f5:
27:06:78:ca:83:74:be:6d:d3:7c:15:d9:90:e9:5f:
d4:4d:91:4e:d2:07:35:01:f5:38:3f:2c:54:77:c8:
bf:29:9d:76:1c:9f:dc:5b:df:ad:15:cc:eb:c6:7a:
84:59:45:cb:54:90:09:79:32:e9:a1:d3:90:7a:a0:
bd:5a:89:97:ad:b5:f2:9d:1f:8c:69:32:e4:82:be:
48:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C0:C4:AB:FB:5B:C7:1D:9F:24:31:9A:BA:54:1F:81:24:B4:A1:1B
X509v3 Authority Key Identifier:
keyid:43:1C:57:E1:92:1D:31:A3:4A:EB:D1:2E:50:7A:13:6F:E0:45:98:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:37:7c:ae:04:63:52:44:5c:23:29:d9:58:58:e7:ac:4b:66:
b4:8a:cd:81:0f:61:f1:c9:dc:b2:7a:1a:73:02:e2:46:a6:e6:
c2:62:09:9a:da:9b:b6:40:4a:e9:66:aa:73:84:cf:6d:99:e9:
81:a8:06:ed:be:e5:3e:3d:8a:b5:0d:f6:4b:2f:15:23:84:8a:
df:16:56:4c:62:e2:e9:49:a1:dd:01:0b:e4:ee:b4:e2:39:33:
2e:de:ec:33:73:62:5a:e3:4f:ab:e9:a7:1c:65:71:fd:f8:97:
6a:38:dd:16:b8:46:a5:c4:26:d1:28:80:5e:e3:aa:5f:19:9a:
f4:77:4d:e6:09:a6:43:21:cb:39:25:29:b9:ec:33:79:60:64:
39:c0:c7:1c:25:f9:84:37:cb:00:35:6a:44:ae:d8:f8:b4:d1:
27:61:60:4f:df:a6:07:39:ce:45:3c:b0:e2:ec:04:f8:78:20:
71:2c:e0:54:9c:80:31:92:93:31:bf:57:91:fe:6b:10:42:ea:
82:b0:10:0e:6e:56:f0:87:28:89:ad:6d:71:98:89:6d:42:6c:
bd:2f:63:54:1d:08:f9:92:a9:a7:4b:32:c6:4d:70:60:b1:5c:
7e:ff:c0:bc:02:21:d6:38:39:bd:ff:67:1f:18:a7:13:24:db:
10:af:ac:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:41:11 2026 by rpki-client