Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/ec430f-7b70-49d7-8e81-6dab2a4b2a6e/1/Q8xOC1bEDO4y1RXxPprXJSahBr4.mft
File: Q8xOC1bEDO4y1RXxPprXJSahBr4.mft (raw, json)
Hash identifier: 7TI63nmUNPqwdiTU0iKHiECCZyo8PZT8Lv4uGN244oA=
Subject key identifier: B1:E2:06:C1:F8:19:0D:14:B3:11:B7:5F:8F:B1:BD:12:D6:8A:15:55
Authority key identifier: 43:CC:4E:0B:56:C4:0C:EE:32:D5:15:F1:3E:9A:D7:25:26:A1:06:BE
Certificate issuer: /CN=43cc4e0b56c40cee32d515f13e9ad72526a106be
Certificate serial: 01A0EAAE09CCF690728BF65319200B0B30A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8xOC1bEDO4y1RXxPprXJSahBr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/ec430f-7b70-49d7-8e81-6dab2a4b2a6e/1/Q8xOC1bEDO4y1RXxPprXJSahBr4.mft
Manifest number: 96
Signing time: Tue 29 Sep 2026 01:01:09 +0000
Manifest this update: Tue 29 Sep 2026 01:01:09 +0000
Manifest next update: Wed 30 Sep 2026 01:01:09 +0000
Files and hashes: 1: 1-avwUbYkGWAbngQUmLKtkGb0vQk.asa (hash: gdrOpGIWUMbLTjKVbOlssgFFN+ZM/6btb14hBTqgj4E=)
2: Q8xOC1bEDO4y1RXxPprXJSahBr4.crl (hash: PpYHGwjVH1pyYOXNaTEmJjdIOCk2k/DmhKTxzSY0lFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/ec430f-7b70-49d7-8e81-6dab2a4b2a6e/1/Q8xOC1bEDO4y1RXxPprXJSahBr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/ec430f-7b70-49d7-8e81-6dab2a4b2a6e/1/Q8xOC1bEDO4y1RXxPprXJSahBr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8xOC1bEDO4y1RXxPprXJSahBr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:ae:09:cc:f6:90:72:8b:f6:53:19:20:0b:0b:30:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43cc4e0b56c40cee32d515f13e9ad72526a106be
Validity
Not Before: Sep 29 01:01:09 2026 GMT
Not After : Sep 30 01:01:09 2026 GMT
Subject: CN=b1e206c1f8190d14b311b75f8fb1bd12d68a1555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b8:6e:30:f0:c2:03:a2:d2:ee:0c:84:1f:79:
4f:68:98:37:01:e9:73:8f:5d:3a:54:5f:db:e2:4c:
2a:6e:27:31:4b:86:31:9e:5a:09:f6:19:df:02:54:
5c:40:02:8d:9c:00:c8:c6:f4:56:75:93:7b:7a:01:
5b:53:28:42:5e:d2:48:31:e7:c3:4c:ce:bb:ec:ee:
03:3d:a6:2e:63:02:b2:81:6f:e4:97:cd:32:d4:01:
0b:50:7d:ae:35:2d:49:88:d0:c8:aa:18:d0:f3:05:
5e:ae:f7:f5:94:68:11:29:84:e8:59:a8:33:54:b1:
a4:a4:f5:e1:24:79:84:1c:a4:3f:00:bd:9d:79:13:
01:b8:fd:bc:61:9f:68:bb:27:bc:ae:cc:7e:eb:df:
cd:f6:83:e8:89:89:ec:a4:66:49:ed:e2:ae:bd:dd:
2e:36:c1:1f:c7:e0:a2:58:59:86:01:ba:38:92:55:
ef:62:de:3f:2e:be:98:18:a5:bf:32:13:25:66:21:
89:d5:5f:07:9f:e7:c9:e2:6d:e6:d4:fc:91:6e:4e:
93:66:77:95:98:a0:ce:ae:81:92:77:b4:bc:8c:32:
f5:21:8d:1b:41:fd:48:2a:2a:19:86:38:e3:ed:fc:
c2:bc:2d:9d:07:f3:fd:70:ae:a8:b3:d1:ef:2e:a8:
d9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E2:06:C1:F8:19:0D:14:B3:11:B7:5F:8F:B1:BD:12:D6:8A:15:55
X509v3 Authority Key Identifier:
keyid:43:CC:4E:0B:56:C4:0C:EE:32:D5:15:F1:3E:9A:D7:25:26:A1:06:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8xOC1bEDO4y1RXxPprXJSahBr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ec430f-7b70-49d7-8e81-6dab2a4b2a6e/1/Q8xOC1bEDO4y1RXxPprXJSahBr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ec430f-7b70-49d7-8e81-6dab2a4b2a6e/1/Q8xOC1bEDO4y1RXxPprXJSahBr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e0:1d:87:76:fd:d1:f3:bb:78:95:32:05:d1:7b:8e:a2:31:
1e:af:89:0a:f3:a9:fb:37:5c:da:7b:de:1a:25:91:f2:c5:84:
5d:6c:19:98:cc:e9:8c:62:eb:6b:ee:0e:1d:09:21:49:31:9b:
26:8b:86:20:a9:ff:f4:7d:d1:7b:09:87:92:48:9d:26:0e:db:
a9:8a:46:13:15:ff:4c:9c:6a:4e:9f:c1:de:db:59:26:10:ae:
52:bd:d8:34:7e:b0:5a:99:fc:8b:a7:9a:55:3d:7e:e0:c1:be:
1e:70:61:d9:b9:e2:dd:6c:fa:ba:ee:f1:8f:60:fa:d3:68:c8:
ef:b2:2a:2e:3f:c2:2a:45:b0:c6:16:de:f8:36:98:f8:d5:58:
f6:85:d9:11:bc:de:af:73:79:d5:e9:e8:94:06:be:44:94:e6:
c5:59:a6:0b:56:df:46:61:f8:0b:6b:c0:d5:48:3d:0f:a9:f8:
7d:1e:63:96:39:10:a2:94:1f:c9:6f:7e:3c:86:47:0c:9c:a5:
2f:db:0d:e5:e8:45:57:ff:cd:62:d8:9a:03:aa:80:15:07:1f:
85:ae:c0:22:65:24:70:cc:b0:0c:50:32:9b:2d:8b:5d:2b:df:
e0:83:8b:6e:f6:91:3c:4f:11:aa:8d:00:da:cb:ee:8e:28:b9:
4a:e6:ee:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:46:10 2026 by rpki-client