Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft
File: Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft (raw, json)
Hash identifier: bUH+Sk5FbgScECfNZm95sHfjm+lkb/cN8YHmQtIllpQ=
Subject key identifier: E5:C3:C9:EA:69:A6:39:7D:1C:5A:ED:7D:0E:BA:EA:77:E2:BE:B7:EE
Authority key identifier: 43:54:A4:19:22:5D:5D:79:F4:A1:AE:15:20:A3:B1:A5:6D:45:26:8C
Certificate issuer: /CN=4354a419225d5d79f4a1ae1520a3b1a56d45268c
Certificate serial: 01A088D4B78C90D6CB12E51726C417032A4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft
Manifest number: 0DBB
Signing time: Thu 10 Sep 2026 01:00:36 +0000
Manifest this update: Thu 10 Sep 2026 01:00:36 +0000
Manifest next update: Fri 11 Sep 2026 01:00:36 +0000
Files and hashes: 1: JXLkT6VnIp-SB5I9EMRZOw0DYZI.roa (hash: l3rRARSXe/Kv5HUcutLJRW5ribdNSHw4ggpcG9Mw0ro=)
2: Q1SkGSJdXXn0oa4VIKOxpW1FJow.crl (hash: wXDVgNE0SusQTtuhEcuhwdytuFyTo7U+oMkL1bXyzm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:d4:b7:8c:90:d6:cb:12:e5:17:26:c4:17:03:2a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4354a419225d5d79f4a1ae1520a3b1a56d45268c
Validity
Not Before: Sep 10 01:00:36 2026 GMT
Not After : Sep 11 01:00:36 2026 GMT
Subject: CN=e5c3c9ea69a6397d1c5aed7d0ebaea77e2beb7ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6b:06:2a:80:bd:d6:6f:49:fe:1d:7d:f2:2a:
8a:95:38:0b:9c:82:8c:5a:1b:fe:7e:bd:86:fa:7f:
e2:5d:91:89:e6:0b:aa:6e:07:91:70:56:0c:fb:e7:
71:59:84:78:f4:10:e6:be:b1:7e:7a:95:ef:69:b4:
57:5a:72:cb:f0:7b:90:71:ca:f6:28:9f:05:40:eb:
c7:81:60:a4:f6:aa:c3:7a:6a:50:dc:7f:ad:78:c6:
81:d2:a3:3c:e6:f9:c6:8b:c4:40:2c:1a:0c:94:a8:
ce:d5:01:21:a3:87:e7:a3:6a:9a:a4:6b:41:9b:61:
6f:9c:9e:1c:c0:53:ec:88:4f:94:ad:59:78:97:4a:
52:3c:6e:6f:fc:43:99:29:bf:4c:7e:12:a1:3b:93:
a7:9e:57:8e:b6:04:ae:c2:4b:84:c5:64:9d:52:05:
6a:14:49:dd:d8:75:d5:21:bc:ae:6f:22:a8:22:28:
35:f0:2f:00:f0:35:b2:0a:ff:57:7d:6c:00:a1:75:
f8:4b:b9:37:dc:c4:64:dc:d3:17:78:52:50:e6:54:
7f:a2:bf:44:b8:01:c3:20:f3:86:c3:bf:0d:d8:1b:
ea:21:55:47:ea:ce:99:0e:b7:be:5b:53:73:b6:41:
e7:c3:e9:3a:67:3a:b5:af:35:77:79:84:a3:2c:29:
eb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C3:C9:EA:69:A6:39:7D:1C:5A:ED:7D:0E:BA:EA:77:E2:BE:B7:EE
X509v3 Authority Key Identifier:
keyid:43:54:A4:19:22:5D:5D:79:F4:A1:AE:15:20:A3:B1:A5:6D:45:26:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:48:f0:c8:63:8b:83:a3:da:f7:3d:33:55:ba:a8:cc:ec:2e:
d3:72:8b:b1:19:33:62:84:db:3f:5b:d7:d9:e8:e7:70:e1:83:
e8:00:ab:33:bb:f1:ab:36:06:cb:b4:81:f3:ae:4b:4b:0b:f5:
d6:96:42:c9:51:4e:31:aa:64:63:dc:95:af:3a:08:f3:ad:75:
67:42:5f:de:6d:74:2b:1e:d0:29:ff:b3:41:59:5d:a6:b2:80:
09:60:7e:23:e4:84:90:a5:56:3a:cc:28:c7:0e:5e:44:10:30:
65:06:90:24:87:2d:60:ab:85:fc:2c:f6:c2:52:c7:cf:17:7b:
31:88:75:a6:5b:ef:13:8e:d0:df:e0:73:10:e0:41:6f:74:9a:
73:31:db:8a:2e:e4:2a:32:c5:62:4b:b4:1d:65:0e:09:72:cf:
fc:5b:7a:51:4a:90:f4:1d:cc:e3:77:30:8f:0d:b0:3d:2a:83:
0c:47:31:14:c2:bd:ec:38:80:b9:de:8a:49:6a:16:56:ac:0f:
8f:33:08:ff:ca:e8:fe:a8:95:8e:e8:34:1a:e2:ee:d9:2c:4a:
b3:2c:aa:88:ff:d2:3f:07:6c:eb:22:90:e3:3b:71:f1:29:b6:
26:40:8b:df:e8:95:c1:af:b9:d7:38:c0:7e:a1:17:53:a7:cb:
71:14:b9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:00:56 2026 by rpki-client