Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
File: qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft (raw, json)
Hash identifier: qrOakMmXYEsQe9idvwTMFU5fw+IJaylKeMvWlETMXqg=
Subject key identifier: 9D:6F:05:3F:69:B6:C8:30:97:C7:8F:0A:5D:10:10:BB:6B:C0:F2:BF
Authority key identifier: A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4
Certificate issuer: /CN=a85db8c9b56308cf089021b516cae4c55fd64fe4
Certificate serial: 01A1863F093013A097C51BC549C859D72632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
Manifest number: 0835
Signing time: Thu 29 Oct 2026 06:00:40 +0000
Manifest this update: Thu 29 Oct 2026 06:00:40 +0000
Manifest next update: Fri 30 Oct 2026 06:00:40 +0000
Files and hashes: 1: mRqgMQ1oyI_OLISSLDMm0vHAWUE.roa (hash: Yip22LT0+wHV/CLjrRT+qmDSA0wut/7NqfT12lIPjXM=)
2: qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl (hash: E0a8C8SXgwiuUyaT+//+VIdM9auOlcYNG9vTzTMdTuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:3f:09:30:13:a0:97:c5:1b:c5:49:c8:59:d7:26:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85db8c9b56308cf089021b516cae4c55fd64fe4
Validity
Not Before: Oct 29 06:00:40 2026 GMT
Not After : Oct 30 06:00:40 2026 GMT
Subject: CN=9d6f053f69b6c83097c78f0a5d1010bb6bc0f2bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e3:fc:0d:9f:c2:45:5a:cc:0b:4b:f1:ad:d4:
30:d4:23:95:c4:af:af:05:d5:96:83:08:48:96:05:
46:4c:31:58:5f:f0:f8:6c:97:fd:7d:6a:2b:11:c1:
e6:f2:a0:49:5a:80:ce:b3:14:0e:5c:d6:4c:d3:ee:
83:74:49:15:6c:fe:5f:15:b0:2c:13:ed:63:45:87:
f0:45:c0:53:70:cb:52:58:62:8b:eb:48:93:e3:17:
b7:5c:bd:fb:eb:1b:fe:d6:c8:a0:1c:f8:13:a5:ed:
ed:39:e5:53:54:ac:37:4c:19:6f:50:9a:ad:34:01:
2e:88:6b:7a:dd:91:68:88:50:cb:12:3b:db:d5:e5:
e1:68:60:70:e1:2c:9c:63:48:f3:b6:ca:62:5c:93:
85:5b:b6:7a:76:bf:25:cb:77:32:60:30:8f:2b:cb:
e4:c1:c9:33:fe:5e:c6:9f:9b:50:26:fd:e4:7c:e8:
21:66:9e:ec:ab:8a:5b:52:6b:aa:d6:f4:f8:0d:ca:
75:2c:69:e5:cc:03:9f:85:19:11:11:29:f5:00:b3:
cd:04:5a:cd:8e:a0:e1:c2:da:40:72:d6:41:ea:d3:
95:c4:76:fb:c7:e5:53:33:f0:cf:40:61:3b:7b:d9:
08:b4:6b:25:46:ce:f6:4d:59:2c:6c:ef:99:19:44:
ea:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:6F:05:3F:69:B6:C8:30:97:C7:8F:0A:5D:10:10:BB:6B:C0:F2:BF
X509v3 Authority Key Identifier:
keyid:A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:42:64:cf:50:c2:36:10:20:df:2f:04:a8:31:c4:2a:63:3e:
fe:6f:ae:87:57:4b:bc:91:6e:d6:4a:1d:fa:5f:73:63:6c:01:
25:73:a4:a1:3d:b7:47:09:f2:e6:a5:63:7b:b7:5c:fa:67:db:
1a:50:6e:7b:6f:ed:6c:c0:a3:21:5e:0d:dc:cf:c1:75:5f:96:
4d:eb:ac:af:c4:d0:2a:07:2a:7c:76:16:87:92:f3:e8:ac:9d:
b3:dc:43:3a:26:9c:60:91:84:0f:ff:7c:3b:db:d2:45:0f:ac:
ee:36:e8:9a:99:3f:b6:d0:36:8a:16:64:82:98:be:fb:6d:22:
ba:78:01:de:cd:17:72:f6:e7:4b:a2:9a:7e:56:cc:95:0c:27:
1b:9d:7e:1c:13:4a:e1:ae:b0:bf:49:73:88:8b:fa:0c:e0:a8:
d9:fd:e9:60:85:d6:60:b0:f8:4f:d0:e3:53:f8:9f:15:8e:82:
f3:a9:7b:fb:30:23:97:26:04:5d:ca:8c:2a:b7:07:ef:37:55:
cc:87:b3:da:73:27:17:8b:93:ae:c5:bf:b6:b8:16:cc:6e:26:
ce:5a:ae:49:0e:00:00:da:b2:7d:ff:0c:ca:c5:36:9e:3e:49:
45:ad:88:d6:04:a7:42:90:0c:e8:d1:b6:be:92:ad:8d:64:88:
4b:b7:69:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:55:12 2026 by rpki-client