Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
File: Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft (raw, json)
Hash identifier: VMSEispv7I2fHQxkjmE70F+YnGKtN1S27QUdRsRCrVM=
Subject key identifier: 43:C0:5C:55:35:E3:3D:39:F4:FC:6A:DB:E5:0F:D0:83:E1:DA:E3:AE
Authority key identifier: 42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22
Certificate issuer: /CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822
Certificate serial: 01A17C292D6E693BB996B36761421FFB4C13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
Manifest number: 09B4
Signing time: Tue 27 Oct 2026 07:00:35 +0000
Manifest this update: Tue 27 Oct 2026 07:00:35 +0000
Manifest next update: Wed 28 Oct 2026 07:00:35 +0000
Files and hashes: 1: Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl (hash: GZ0xR96oZyvjA/9vAVsLBLM7TMWvETGqMu67YP1DGZs=)
2: gODxSRHwWTf0AdhEf-vZlAdcT8Y.roa (hash: 3YgISHwQEuO0iWUQza0xD+9L4RrntGi+pZDu8veL4Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:29:2d:6e:69:3b:b9:96:b3:67:61:42:1f:fb:4c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822
Validity
Not Before: Oct 27 07:00:35 2026 GMT
Not After : Oct 28 07:00:35 2026 GMT
Subject: CN=43c05c5535e33d39f4fc6adbe50fd083e1dae3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:38:7c:3a:ce:c7:f8:bd:aa:97:4a:78:68:7d:
08:c7:84:3a:23:f2:7d:4f:55:df:25:1e:7f:1a:9f:
60:43:04:36:7d:43:86:c3:af:ec:fe:c8:50:c5:1a:
35:bc:46:75:78:09:90:3a:5a:76:22:ac:bf:8f:7f:
4f:a1:54:8c:b4:bd:6a:ae:00:58:3e:3b:65:c2:4f:
ae:ac:be:0f:96:cd:96:90:f1:eb:92:4e:2b:0c:cf:
56:19:3b:a8:84:b4:2d:8d:fb:93:1c:5a:1f:aa:ad:
68:21:06:6d:8a:06:59:8c:ff:cb:41:bb:bc:54:d2:
bb:88:d2:09:51:d5:5d:79:36:00:86:93:91:5f:44:
ee:dc:da:dd:82:a0:00:49:66:1a:8c:9f:6c:b2:dd:
ec:0b:55:bb:21:d3:d2:ab:55:23:ec:e6:59:48:5c:
ba:b2:31:45:bf:e6:86:a6:e8:ab:70:c7:4e:e7:9d:
c1:5b:47:03:9c:e9:54:ad:fb:07:da:1d:0d:72:c1:
7b:af:4a:20:a2:e4:09:21:20:59:c2:44:56:73:42:
06:aa:4d:76:84:19:12:4e:b7:83:e7:c5:e8:82:3d:
b5:59:ea:24:45:29:3a:ce:47:62:69:77:80:91:f9:
2a:9e:18:54:96:b6:dc:db:ea:c2:41:cb:fd:0b:30:
fd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C0:5C:55:35:E3:3D:39:F4:FC:6A:DB:E5:0F:D0:83:E1:DA:E3:AE
X509v3 Authority Key Identifier:
keyid:42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:7f:39:6d:20:16:e5:25:96:20:25:a6:48:86:d0:37:f1:db:
be:8b:80:04:ca:98:36:e5:27:05:89:d2:e7:38:1c:88:e7:41:
f2:00:fe:e6:97:d5:00:83:0a:dd:81:f1:7a:72:b4:a1:d8:fb:
74:63:53:ac:b3:0c:c4:9f:88:80:fd:92:84:4d:87:d3:1b:db:
dc:d9:51:b0:af:d3:1b:e1:33:f9:0c:3c:56:0c:68:8c:14:82:
67:60:88:c6:f7:c3:a9:a7:b2:a3:4d:b5:61:32:bb:5c:1d:a1:
0e:4e:89:b5:00:91:5e:ea:96:cd:48:7c:50:74:3f:d9:2f:fb:
7a:9e:bd:96:fc:ac:4a:e9:10:d2:02:bf:ea:34:0b:d8:14:59:
ea:33:27:3a:a0:b9:4c:2c:1e:31:36:03:39:3d:06:01:f0:45:
79:2f:db:0b:de:97:3e:99:7b:ff:f4:00:37:8f:f3:d7:fb:16:
00:b5:62:d8:d3:38:b3:e6:06:1e:dc:4a:47:e8:f3:a1:94:d5:
aa:06:26:a7:d1:bb:03:06:98:ba:dc:46:63:a2:fc:41:39:d2:
ce:1c:66:3b:81:7f:b0:5b:e7:c3:e8:69:34:64:59:5a:24:21:
a0:98:38:c1:76:6f:4b:62:5e:28:69:6f:e7:2f:88:c2:0a:b9:
bf:ef:ad:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:41:38 2026 by rpki-client