
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
File: qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft (raw, json)
Hash identifier: yCEF33Ta6kCyqJlU8GxcFIhLbe2ZCnP4QdDQhsaztjg=
Subject key identifier: 07:64:64:4A:B4:A7:88:98:0C:2F:83:96:6D:A9:A8:36:F5:28:5D:31
Authority key identifier: A9:D2:9F:70:3B:8E:C8:E9:3C:A4:84:05:DE:E4:73:0E:ED:93:C6:B2
Certificate issuer: /CN=a9d29f703b8ec8e93ca48405dee4730eed93c6b2
Certificate serial: 01A08AFA87CE0E164DC83F8FC38F673D8520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
Manifest number: 18A8
Signing time: Thu 10 Sep 2026 11:01:09 +0000
Manifest this update: Thu 10 Sep 2026 11:01:09 +0000
Manifest next update: Fri 11 Sep 2026 11:01:09 +0000
Files and hashes: 1: D14MO7BIQvaHAdeDBscgN5omBJ4.roa (hash: r6jJ5ch2wUm0LzOkighkT3HkT455ug6IrSIakMtnP58=)
2: qdKfcDuOyOk8pIQF3uRzDu2TxrI.crl (hash: EOMdVzn81E7nfWt2qlpHkYf/YBqLrwY7JnqlzP85/18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:87:ce:0e:16:4d:c8:3f:8f:c3:8f:67:3d:85:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d29f703b8ec8e93ca48405dee4730eed93c6b2
Validity
Not Before: Sep 10 11:01:09 2026 GMT
Not After : Sep 11 11:01:09 2026 GMT
Subject: CN=0764644ab4a788980c2f83966da9a836f5285d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5b:c3:e2:9b:75:34:a1:ca:49:98:bd:74:a1:
d9:b3:4d:47:9f:9a:57:89:4f:73:b3:00:9a:27:d8:
db:9b:9a:0e:47:6d:a0:68:6e:67:83:98:bb:a2:a2:
0a:91:30:e5:7e:1a:57:c6:f7:8d:8e:16:16:7c:7f:
16:f1:13:bc:e1:bd:43:70:1f:e7:f8:7c:00:11:71:
2e:cd:4c:e8:3b:ae:61:00:95:92:c5:22:a0:15:0d:
bf:e6:9a:dd:cb:9d:d2:eb:b2:b8:31:b6:81:bf:1e:
19:75:bd:ef:c2:e5:84:63:57:0b:ef:4a:c6:92:fe:
c8:f3:66:ae:7f:85:6b:3f:04:d9:dc:8e:08:6f:2b:
ed:52:2c:2d:4d:fe:e3:10:99:c4:32:1c:a9:ed:ae:
de:d9:7f:f6:a8:87:2d:32:66:54:ee:d7:eb:5d:c3:
d2:dc:8e:2f:28:aa:ec:61:a1:15:f6:3b:d1:2e:15:
9f:c9:b8:b0:0b:83:ab:33:ed:e2:09:da:61:cc:fd:
45:78:17:a0:af:43:61:1e:d8:36:51:16:3b:20:17:
cb:2d:8f:3d:ed:59:e2:e6:4a:bf:79:fc:3e:a5:79:
a8:49:03:d9:21:d6:87:f6:9d:16:12:7d:f8:73:de:
f4:37:44:b0:fa:6e:06:59:4f:a5:cd:ca:ed:49:39:
d2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:64:64:4A:B4:A7:88:98:0C:2F:83:96:6D:A9:A8:36:F5:28:5D:31
X509v3 Authority Key Identifier:
keyid:A9:D2:9F:70:3B:8E:C8:E9:3C:A4:84:05:DE:E4:73:0E:ED:93:C6:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:74:9c:3c:53:2f:b3:93:ce:35:10:67:72:0b:c7:78:56:f6:
0a:69:dd:e7:85:ca:05:fb:62:10:54:f0:3d:12:e6:fc:a2:4d:
1c:e8:b2:77:ac:73:a9:ff:87:a6:8c:52:29:be:a9:22:66:ed:
6a:8c:15:2f:f2:0e:db:c6:f9:84:de:dd:e4:21:51:ff:23:9d:
d6:25:60:4f:71:df:e5:18:2f:66:8d:0a:ea:78:c2:88:f7:77:
cb:de:90:ff:07:92:2a:c6:a5:71:50:03:44:cd:e5:1d:2c:86:
4d:0e:88:18:90:7e:40:62:d8:9c:ed:9a:cd:d6:da:b2:cb:06:
e2:33:da:17:7f:36:1e:89:62:de:88:b5:e4:f9:cc:4b:2d:d5:
f3:12:4d:9a:ee:50:48:44:eb:cc:76:e4:47:f6:bc:37:fb:8a:
5e:12:02:30:34:d6:92:77:c6:65:4e:d5:a4:33:50:de:03:6a:
94:f9:0e:83:58:15:42:87:9f:af:30:1c:78:31:f5:13:9c:03:
b0:5a:e2:f5:aa:ac:11:f6:ea:0d:d5:bf:63:c9:9d:10:2f:b4:
9f:cf:a8:0e:c3:7f:9e:17:fa:a1:5e:d4:aa:31:78:9c:cc:f3:
79:4a:c3:a6:5f:f0:79:68:7b:f5:a0:ba:8b:67:7c:58:b5:e3:
65:be:f5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:34:03 2026 by rpki-client