Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft
File: Q0XQdzx63gjUSBnjthG9KXo5idM.mft (raw, json)
Hash identifier: XgE217fahyKoVK02TWiFB7Otw1+rBuyHveV+mT6sLKY=
Subject key identifier: 1F:89:B3:EA:B7:E7:FF:4C:97:29:75:3D:1F:73:E6:7D:A8:D7:1E:43
Authority key identifier: 43:45:D0:77:3C:7A:DE:08:D4:48:19:E3:B6:11:BD:29:7A:39:89:D3
Certificate issuer: /CN=4345d0773c7ade08d44819e3b611bd297a3989d3
Certificate serial: 01A0890BC229998A698EFB2ECE657AF17BDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0XQdzx63gjUSBnjthG9KXo5idM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft
Manifest number: 1760
Signing time: Thu 10 Sep 2026 02:00:44 +0000
Manifest this update: Thu 10 Sep 2026 02:00:44 +0000
Manifest next update: Fri 11 Sep 2026 02:00:44 +0000
Files and hashes: 1: Q0XQdzx63gjUSBnjthG9KXo5idM.crl (hash: L/uYQ/vpF8C0K37/VNYcDo9xOjGd01RFUzTf4hocvTs=)
2: T42ISOzOZCjRJULwv95Ki_1s9aQ.roa (hash: Mey912qaR+jcZwTBP3JL+1sjx7k32kwZ3D6pir+lHUc=)
3: hK81XxwexeAS1Vg0WZOVuuxaXZ0.roa (hash: 1mtzz3B7T8LCh8jy6BmMpwy7jaCIEVijH1m2+CPXt+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q0XQdzx63gjUSBnjthG9KXo5idM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:0b:c2:29:99:8a:69:8e:fb:2e:ce:65:7a:f1:7b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4345d0773c7ade08d44819e3b611bd297a3989d3
Validity
Not Before: Sep 10 02:00:44 2026 GMT
Not After : Sep 11 02:00:44 2026 GMT
Subject: CN=1f89b3eab7e7ff4c9729753d1f73e67da8d71e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:77:9e:f3:37:9e:df:f2:71:09:c6:70:43:f9:
9d:f9:61:58:64:9f:0e:2d:5c:67:62:73:24:79:b1:
65:5b:6f:14:80:3a:99:42:fb:4b:e8:20:e7:86:72:
df:28:75:25:d8:67:3c:a8:6e:fb:74:dc:d1:28:34:
3a:b6:13:d3:19:18:48:89:48:b4:7f:31:99:37:67:
50:82:e5:36:73:25:63:78:b3:d7:ae:71:8c:62:dc:
25:07:43:3c:bc:9e:ec:f9:c8:7e:e6:c5:55:5b:1e:
d1:a8:de:f6:d1:b4:88:8e:77:08:3a:bd:6c:63:97:
77:94:de:69:48:b6:55:f6:7d:ca:64:38:37:45:3f:
7a:60:b4:cb:f2:c6:c4:69:92:cb:19:7b:97:75:5f:
5b:0b:34:d1:87:2e:15:7f:f1:e6:27:bf:ed:59:26:
ca:95:7d:aa:b6:27:93:d8:b3:f9:2a:17:28:cb:41:
54:9c:dc:de:43:27:72:3e:b4:27:7a:8e:49:52:e1:
37:43:9c:dd:a9:bc:6d:48:02:a8:1f:58:2f:0e:d6:
07:d7:2c:84:b5:99:86:10:fe:cc:9c:72:ab:af:76:
ce:81:80:9d:db:91:95:ee:a9:5b:66:66:25:58:9c:
37:ba:65:3b:c0:d9:28:6d:26:9c:69:79:a8:3b:d3:
d8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:89:B3:EA:B7:E7:FF:4C:97:29:75:3D:1F:73:E6:7D:A8:D7:1E:43
X509v3 Authority Key Identifier:
keyid:43:45:D0:77:3C:7A:DE:08:D4:48:19:E3:B6:11:BD:29:7A:39:89:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0XQdzx63gjUSBnjthG9KXo5idM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b7:61:93:74:40:85:91:f8:7b:e9:a5:1e:9b:ac:c1:11:6a:
eb:20:59:a2:74:b8:90:be:5d:4a:1e:c1:f4:eb:3e:f1:b1:fb:
2e:38:24:a2:c9:89:4f:61:ee:c3:83:d1:24:4b:ac:4c:21:5c:
e1:e0:89:47:9f:35:ff:ce:57:57:84:fb:c8:ab:8f:39:e7:31:
67:de:f1:93:e9:45:de:7d:59:2e:af:54:7f:bf:f6:08:01:0a:
7e:a0:7c:fd:a6:ae:d5:80:45:b5:7e:a9:fb:10:1b:1d:45:f7:
ab:f6:c4:85:ce:d4:27:86:58:50:1a:ab:74:3f:b9:08:09:15:
3e:34:72:a0:d8:1a:f1:cb:79:40:b7:42:88:e0:c6:b0:e7:3e:
47:ea:33:8f:6d:74:4b:51:5d:83:77:60:14:c4:77:e3:27:d1:
cb:4c:52:88:90:10:06:8f:90:1b:ca:07:14:4c:45:53:42:b7:
a0:15:89:e2:e4:4a:d0:7f:a6:50:c8:59:5b:2c:e4:dd:6b:ce:
aa:97:6a:82:89:91:93:50:d2:67:35:25:7c:32:ad:18:9c:06:
2a:39:e3:39:e8:41:8a:d4:f7:34:ce:44:c7:08:ce:2e:e4:5e:
19:a8:be:4b:cd:50:fe:81:45:09:62:03:74:0a:ee:f0:a5:54:
c8:bd:f1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:29:09 2026 by rpki-client