Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
File: Q9CWU4TcREh6gxcabV0FqUpq1nw.mft (raw, json)
Hash identifier: 76AlrCm1V7KCL5U0HXtfb50pNNCBka+Zf+ASMI5PNtc=
Subject key identifier: 21:68:D0:3A:BD:70:96:7C:4B:D2:D9:AD:DC:4C:F8:24:42:14:CA:33
Authority key identifier: 43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C
Certificate issuer: /CN=43d0965384dc44487a83171a6d5d05a94a6ad67c
Certificate serial: 01A181F4A92C2971654DAFCEB114B5BD403B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
Manifest number: 0568
Signing time: Wed 28 Oct 2026 10:00:57 +0000
Manifest this update: Wed 28 Oct 2026 10:00:57 +0000
Manifest next update: Thu 29 Oct 2026 10:00:57 +0000
Files and hashes: 1: Q9CWU4TcREh6gxcabV0FqUpq1nw.crl (hash: Cib+63GibWr4cUXQbpaTt79lNy4W/VKAzxqTs8wuY1s=)
2: m_rKth0WblNoPGrjkNfcn6MmMxc.roa (hash: S0D1n4kwGONLCb2yvnuQTTGiDLAbMsWlgwxGBJpbiPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:f4:a9:2c:29:71:65:4d:af:ce:b1:14:b5:bd:40:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d0965384dc44487a83171a6d5d05a94a6ad67c
Validity
Not Before: Oct 28 10:00:57 2026 GMT
Not After : Oct 29 10:00:57 2026 GMT
Subject: CN=2168d03abd70967c4bd2d9addc4cf8244214ca33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c5:e8:40:f4:d6:fd:f3:12:fc:9d:57:2d:64:
6f:81:a4:e0:ba:ea:a0:a4:bf:11:f2:85:bf:5b:bc:
7b:59:59:b3:ae:87:2d:a2:c0:15:fb:8b:7a:ac:ff:
08:88:8c:c4:d8:8c:58:0c:2f:04:4a:3b:cf:38:4e:
d5:4d:f4:47:9a:42:89:74:7b:b3:a9:c2:cd:7e:3a:
54:84:63:d4:cc:22:0e:5c:64:9c:23:25:df:9e:2c:
46:e0:3c:12:2a:39:27:96:eb:ff:3b:c2:73:21:97:
f6:fb:a7:b9:89:09:52:c6:5d:44:7a:40:3b:18:c4:
00:14:a8:1d:87:43:ef:1b:85:0b:0a:4d:50:3c:45:
cd:94:d9:62:2d:c9:26:1f:b4:34:8e:b4:72:9e:a8:
cb:66:f0:34:39:7b:89:8a:0f:c3:a2:30:6b:03:60:
8f:94:36:e2:e5:75:15:a7:4e:65:4e:d6:59:23:ce:
60:cd:fc:0f:c3:77:d0:af:9d:27:c6:e0:6c:1d:c0:
5d:f3:3a:b1:ec:e4:a0:bb:d6:f6:a8:f1:2c:31:eb:
ae:3c:38:b2:c4:04:45:a4:38:7c:af:2a:43:97:57:
ee:22:3f:9e:1b:3e:1d:9b:55:a2:d1:74:87:81:f5:
35:5d:28:10:55:30:17:21:47:ea:19:f0:f2:2e:df:
97:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:68:D0:3A:BD:70:96:7C:4B:D2:D9:AD:DC:4C:F8:24:42:14:CA:33
X509v3 Authority Key Identifier:
keyid:43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:dd:bf:a0:be:3f:70:c7:b5:3a:7d:56:79:6d:a4:23:93:91:
bf:f5:3b:55:8c:32:4a:97:74:13:f4:67:f0:f2:fd:63:43:c6:
b2:c9:12:6a:29:e3:bb:c7:32:db:8b:c8:b1:4e:de:3e:61:58:
56:23:72:ac:59:6b:b9:69:08:af:f7:39:30:6b:48:c9:38:bf:
71:d9:32:5d:f5:a9:c0:5c:77:0e:0a:7e:8d:b7:d0:f8:14:93:
87:ca:4a:07:94:33:90:a2:b5:7e:2b:17:c6:4b:44:aa:6f:48:
ef:47:1b:ed:f7:4e:20:65:03:13:77:1a:08:b2:37:95:76:85:
d2:91:3a:44:af:df:df:8f:0f:cd:43:f9:d0:26:f6:ed:5c:bc:
0c:25:ac:04:f5:9d:8b:96:c6:42:7a:e4:33:3a:0e:6c:70:65:
ea:0a:8a:7b:35:cc:0e:d5:3b:87:3c:8d:93:ad:f6:84:55:7b:
5b:dc:47:7f:d7:07:90:3d:71:25:56:81:2d:bf:ad:ec:1f:5b:
8e:5f:4c:f5:b2:f5:ac:44:d5:24:97:10:90:cb:5b:c6:65:99:
70:3a:3a:50:47:4c:72:c1:12:91:78:e1:75:ea:09:a1:b3:50:
18:9f:66:22:c5:9f:80:99:fa:82:e7:28:d4:d7:e1:ee:2d:f5:
7a:77:62:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:24:56 2026 by rpki-client