Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft
File: QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft (raw, json)
Hash identifier: NrT5fbxYiHBINKFmoiCOjBq1yATQgutH8FA+3zZItII=
Subject key identifier: 97:9D:63:37:4C:B2:89:C0:50:95:42:42:25:13:B6:0A:86:DA:14:BA
Authority key identifier: 42:F9:A9:69:52:77:7F:10:74:33:83:03:EC:B6:50:25:C4:E2:B8:B5
Certificate issuer: /CN=42f9a96952777f1074338303ecb65025c4e2b8b5
Certificate serial: 01A08B9F88E04324B9D3515F4A53308DE537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft
Manifest number: 0B84
Signing time: Thu 10 Sep 2026 14:01:23 +0000
Manifest this update: Thu 10 Sep 2026 14:01:23 +0000
Manifest next update: Fri 11 Sep 2026 14:01:23 +0000
Files and hashes: 1: 65LDhkWiOsePvay_daaS19w9IrU.roa (hash: RDR1Bk3idKoyL2q+z5ptGPj51Bc2Dh1ei6t9SnrsQKk=)
2: QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl (hash: P1GUoIQI6cxoLXc/1ZXYYOGfcyA/YlgHDrdiD3C5H8E=)
3: VwG9H-H3BKxa182EuYMKOfW-pDY.asa (hash: VucV4WG0cObsmaD2Gcwxp4U13EVpmlKVeoHtemnYiqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9f:88:e0:43:24:b9:d3:51:5f:4a:53:30:8d:e5:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f9a96952777f1074338303ecb65025c4e2b8b5
Validity
Not Before: Sep 10 14:01:23 2026 GMT
Not After : Sep 11 14:01:23 2026 GMT
Subject: CN=979d63374cb289c0509542422513b60a86da14ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:95:30:6f:bf:23:2b:6b:79:f2:9e:f3:dc:21:
ad:e2:73:97:df:c1:35:9c:aa:8f:17:08:bc:70:66:
0c:74:a1:ad:a7:ef:76:99:8f:bb:09:7f:d3:57:0b:
b8:58:4e:95:3e:5f:21:7a:c5:29:bf:85:db:6e:5d:
21:d1:56:b2:c6:97:45:75:ad:45:14:5e:ec:b9:c7:
6a:f7:33:6a:90:e9:f5:dc:94:9a:19:9e:93:3b:77:
2b:12:9e:08:d9:4e:da:9c:ac:8e:c9:4c:e6:7b:8a:
47:c7:5e:79:b9:cd:63:01:fc:84:eb:1b:65:91:1d:
68:39:be:83:85:a1:82:99:bb:59:8c:6f:9f:54:33:
89:23:43:a2:1c:7e:9a:1d:53:97:c9:83:85:6b:9d:
47:61:dd:84:41:f1:df:21:69:2f:35:b7:22:95:98:
dd:33:48:9f:7f:8a:04:fc:9e:b6:3b:26:04:d8:8a:
6a:16:9f:59:31:31:e4:bc:da:05:3e:52:59:34:89:
df:39:fd:7c:24:60:19:38:9d:8b:13:e3:7e:21:33:
88:03:76:81:4f:0a:74:40:ea:5f:30:da:9d:02:ca:
c2:32:d1:31:05:cd:30:26:e0:19:62:a7:aa:30:89:
27:d9:b1:c9:67:c2:ac:66:2a:55:c3:4a:51:29:72:
3d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9D:63:37:4C:B2:89:C0:50:95:42:42:25:13:B6:0A:86:DA:14:BA
X509v3 Authority Key Identifier:
keyid:42:F9:A9:69:52:77:7F:10:74:33:83:03:EC:B6:50:25:C4:E2:B8:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:19:eb:9b:27:2e:dc:ec:64:72:00:e0:c2:ad:7a:86:4b:5c:
83:a6:a8:85:42:a5:4a:dc:4a:68:35:c7:72:41:4f:6f:5d:76:
dd:c2:02:08:2a:9c:32:98:3a:51:7e:f5:cb:24:24:6a:01:51:
8e:df:9e:f3:1a:8f:d3:01:8e:2a:b6:48:cd:7d:8f:23:55:36:
a8:65:97:4b:5b:5b:0b:04:29:45:37:a4:de:e8:6e:e2:3c:ed:
6b:4c:43:e0:ac:92:6c:e2:57:3e:06:0d:71:d4:7c:e7:41:09:
35:d3:1a:dc:a2:63:c4:85:e4:da:fb:88:32:73:aa:69:ac:d2:
2e:6e:5e:d3:98:8f:c4:21:1c:7e:85:69:eb:9a:76:2e:5c:14:
cb:46:af:80:c9:89:45:de:a2:78:da:2c:18:5b:f0:63:7c:2c:
7c:8c:fc:e7:7e:ea:84:09:34:83:ab:76:63:0d:07:36:98:40:
82:f3:53:41:cf:71:2a:ca:a1:12:55:7a:37:40:22:2c:04:22:
9a:95:fa:1b:a0:31:06:89:d6:4f:b6:6f:12:dd:f2:d5:61:0d:
11:3a:e1:8f:95:84:74:86:0b:de:5c:c1:23:2b:7c:db:b2:db:
24:bc:cf:82:eb:d8:0e:a3:e8:7f:64:ff:21:42:16:07:ba:dc:
c3:8c:93:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:51:43 2026 by rpki-client