Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
File: Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft (raw, json)
Hash identifier: NQwy2zgpLQMctlmotDTsS3pWltIR4OyWcVnTVJKXYcM=
Subject key identifier: A5:63:22:DC:E8:DE:7C:53:DD:8C:4D:1E:4C:FD:21:CE:5B:28:C8:80
Authority key identifier: 43:CF:41:61:93:A1:C2:ED:30:56:B6:47:E5:A4:65:03:14:8E:38:24
Certificate issuer: /CN=43cf416193a1c2ed3056b647e5a46503148e3824
Certificate serial: 01A0B6F7741EE715F242BD48E409B9F1CE23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
Manifest number: 0B1E
Signing time: Sat 19 Sep 2026 00:01:05 +0000
Manifest this update: Sat 19 Sep 2026 00:01:05 +0000
Manifest next update: Sun 20 Sep 2026 00:01:05 +0000
Files and hashes: 1: Q89BYZOhwu0wVrZH5aRlAxSOOCQ.crl (hash: VvZ2WXGu/V1wNvFAaQu06qoqdjG0kpbzweJ/Q9prtU8=)
2: uRy6lNHq57rdX7_VPdepBDiNmnc.roa (hash: 65Rm9CIooU3CDnzNITl4VhD3i1B6DOi7f6KdO4ec990=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 00:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b6:f7:74:1e:e7:15:f2:42:bd:48:e4:09:b9:f1:ce:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43cf416193a1c2ed3056b647e5a46503148e3824
Validity
Not Before: Sep 19 00:01:05 2026 GMT
Not After : Sep 20 00:01:05 2026 GMT
Subject: CN=a56322dce8de7c53dd8c4d1e4cfd21ce5b28c880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:43:22:76:d3:16:8f:b2:e5:ac:60:2f:bb:25:
5b:72:28:0d:39:6c:e6:14:3f:f5:5b:8e:f5:12:cf:
3b:bf:af:6c:e3:f1:1b:c8:3b:47:a6:07:b3:2a:53:
25:1d:be:ae:39:e5:bc:17:f9:18:a1:60:13:86:8c:
f3:18:22:b3:93:1e:74:a4:f4:45:b9:a3:6c:21:79:
39:d7:27:7e:74:c2:ec:d2:41:49:07:f1:3d:d1:39:
c1:bb:fb:98:d6:55:55:ce:4a:b5:3f:9f:07:ca:24:
fb:df:7e:53:90:8b:b2:43:2d:98:bd:7c:3a:ac:b9:
72:0b:85:5a:87:cb:ad:a9:9b:cf:22:ff:6a:88:7f:
0e:06:ee:7d:4c:1e:b7:72:00:76:6e:6c:66:2a:c2:
90:a1:b4:7d:10:55:25:32:2b:11:96:fe:03:eb:53:
00:18:9b:00:ed:d4:50:81:ae:b7:9f:3b:7c:c6:48:
5c:d9:f2:f5:b4:81:4f:75:7d:77:c3:d0:d1:08:ea:
8b:a4:a3:a6:34:9c:31:cb:f1:f0:8b:82:bb:48:5d:
1c:5f:1d:f6:7d:58:2a:33:2d:cc:4a:10:99:7d:59:
6e:1a:73:db:67:5c:45:f0:a3:8a:89:4d:e2:49:54:
a2:48:3e:56:10:27:74:b6:d2:83:a3:f9:69:cf:78:
9c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:63:22:DC:E8:DE:7C:53:DD:8C:4D:1E:4C:FD:21:CE:5B:28:C8:80
X509v3 Authority Key Identifier:
keyid:43:CF:41:61:93:A1:C2:ED:30:56:B6:47:E5:A4:65:03:14:8E:38:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d1:b0:cc:aa:11:a3:3e:18:6e:55:d7:ef:93:6d:b8:51:0d:
c1:17:ef:db:99:11:c2:06:76:41:3a:08:ac:0f:6d:65:a4:5e:
27:dd:ab:f7:63:7d:65:a0:12:cd:0e:9f:3f:d2:29:54:c1:07:
b3:aa:ba:4e:0d:42:b4:c8:f3:d6:79:72:e0:a4:1e:2a:0d:a2:
1b:d0:de:9a:d8:7a:08:01:a8:3a:46:9f:13:82:01:5f:57:86:
ce:4a:c9:f5:86:b5:84:de:1d:46:96:99:94:ef:d5:bf:6f:a9:
b5:d6:ce:0c:a3:3f:5c:33:10:f8:b7:87:7f:48:1e:94:df:5d:
1c:b9:da:94:6d:0f:eb:9d:b3:eb:d7:15:38:4f:5a:c4:be:8c:
e7:c1:60:20:4e:18:64:c3:91:93:fc:b8:35:41:10:cd:cb:9d:
dc:9d:10:d9:55:b5:f6:4a:f4:5d:30:a8:6e:34:c3:ac:61:4b:
9e:8d:08:0a:81:c7:0a:d3:10:46:95:dc:ce:c9:96:f0:cb:a4:
59:31:2d:4d:f3:1e:ee:9a:cd:ca:6f:ff:00:43:c6:74:63:62:
2d:8d:c8:6d:0f:b5:79:1a:4e:99:a3:84:65:f8:a7:ad:46:63:
ac:a3:b7:4c:00:64:74:51:12:6f:62:94:ef:15:36:7a:fe:89:
99:1e:2a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 10:03:31 2026 by rpki-client