Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.mft
File: qfNHED7zSa2C8basQ-dsD_o4wvg.mft (raw, json)
Hash identifier: kTRCdFCAf/mq+aKMcHhGVkPIk2Y12QpRKeyoJ0mMZVw=
Subject key identifier: BB:29:D3:47:FA:FA:F7:7A:EA:2D:29:09:85:96:C3:8A:DA:A3:4B:DD
Authority key identifier: A9:F3:47:10:3E:F3:49:AD:82:F1:B6:AC:43:E7:6C:0F:FA:38:C2:F8
Certificate issuer: /CN=a9f347103ef349ad82f1b6ac43e76c0ffa38c2f8
Certificate serial: 01A16C7F1CCEFCA5010B9EF85C3034D089FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfNHED7zSa2C8basQ-dsD_o4wvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.mft
Manifest number: 0136
Signing time: Sat 24 Oct 2026 06:00:32 +0000
Manifest this update: Sat 24 Oct 2026 06:00:32 +0000
Manifest next update: Sun 25 Oct 2026 06:00:32 +0000
Files and hashes: 1: Cegt9gCk36CfyQoZLzS4cnrOmWA.roa (hash: yHvXAS+TMxPI4zuMGTC5jZ53ix1/BV7IdsaANR877aM=)
2: qfNHED7zSa2C8basQ-dsD_o4wvg.crl (hash: 9SYJc754Y24SlbU/FxtmQmRJHsWVfhn25fIow8G7oYk=)
3: voGOvW0BRa27Yr9p1xeqy3udyvc.roa (hash: JKI8fmA0jDEWhuhuTal1D06exvXzvzQH3NDd7ekumtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfNHED7zSa2C8basQ-dsD_o4wvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6c:7f:1c:ce:fc:a5:01:0b:9e:f8:5c:30:34:d0:89:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9f347103ef349ad82f1b6ac43e76c0ffa38c2f8
Validity
Not Before: Oct 24 06:00:32 2026 GMT
Not After : Oct 25 06:00:32 2026 GMT
Subject: CN=bb29d347fafaf77aea2d29098596c38adaa34bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ac:eb:a2:31:37:f2:ac:4f:b2:5c:07:3b:01:
84:0f:3f:dc:3e:fb:5d:57:7b:e6:d0:fa:61:4d:3b:
65:d4:05:8f:55:69:3d:b6:86:af:20:3a:ab:d1:a8:
7d:b0:ea:fd:1a:52:50:30:0d:45:6e:e1:22:63:ea:
8d:7d:40:b9:f0:ec:d6:33:94:ae:48:b5:3a:a0:f0:
9e:1a:75:2d:00:41:e0:bf:e2:c1:c8:91:62:09:15:
12:0c:90:c3:f6:3c:4f:83:c5:95:79:2b:24:01:a9:
9b:c3:60:b9:23:00:36:2b:f1:ec:17:6a:87:3b:5a:
f5:3c:74:fd:af:90:f2:41:e7:3f:21:81:f5:02:0f:
24:73:f0:93:99:a6:21:8e:78:64:be:90:e2:34:7a:
f3:b1:27:e4:43:86:4f:c3:4c:90:f1:c8:31:6b:d4:
d9:50:7d:68:c1:7b:1b:af:bf:ee:62:b0:24:1f:9c:
24:d2:be:c6:a0:36:e4:f2:d5:04:7c:4a:09:dd:8c:
64:6e:6f:2a:bf:77:67:9c:f3:84:b9:5d:c7:10:19:
db:ec:68:4c:71:1d:6a:da:f3:b9:7c:e1:bf:8a:48:
30:d8:b0:dc:4d:f6:ac:1d:6d:9a:f3:39:fd:f4:f0:
a1:6e:c5:61:fb:3e:78:93:8d:7e:b3:0a:c2:85:1c:
29:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:29:D3:47:FA:FA:F7:7A:EA:2D:29:09:85:96:C3:8A:DA:A3:4B:DD
X509v3 Authority Key Identifier:
keyid:A9:F3:47:10:3E:F3:49:AD:82:F1:B6:AC:43:E7:6C:0F:FA:38:C2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfNHED7zSa2C8basQ-dsD_o4wvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:48:23:46:f4:a1:56:af:69:fd:32:2b:f3:0b:1a:f8:b7:02:
ab:5f:41:a6:62:db:8d:e5:07:68:cb:23:23:b5:c8:14:e3:9d:
32:64:dd:27:c4:d0:04:56:b6:0c:9c:2f:c9:82:12:9a:9e:ce:
31:d1:b3:17:c1:37:5d:50:87:36:ee:c3:14:d8:a9:7a:93:b9:
62:22:f1:2e:96:f6:da:28:d7:b9:67:46:fd:cf:e4:47:b3:b9:
10:96:c2:1c:3d:d2:fc:02:86:02:08:e4:15:41:1c:55:c5:9d:
ff:cb:82:b3:ce:ba:13:ca:5a:d6:1f:ed:17:ce:17:27:26:ad:
d7:a9:2e:92:ff:42:70:c4:0e:16:54:6a:37:af:9c:e9:12:fd:
80:e7:ec:6c:0a:5a:24:31:3b:82:e6:28:78:41:ec:a0:7f:1a:
17:9a:9f:fb:49:d7:12:b9:7f:70:a4:c0:ed:e0:d3:82:fd:03:
e5:6c:c3:fe:b2:c1:3c:b7:9a:ac:67:73:b8:3d:10:65:a5:bf:
18:cc:f9:ad:fa:08:a7:b3:65:5e:9d:0a:d1:72:51:33:32:e4:
30:81:69:3d:ee:82:d4:71:4d:7b:fb:a7:d3:9f:3f:0c:3c:a3:
9e:a8:fc:e7:d7:8b:91:db:6c:b5:f0:70:e5:35:30:48:1d:c5:
cf:07:d0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:13:58 2026 by rpki-client