Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
File: qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft (raw, json)
Hash identifier: SY+njsXasweM2gcGLhW2KeKyRtqLxp7EvhSQJkW4Lmw=
Subject key identifier: 87:19:77:9E:EE:05:EE:46:17:74:D0:77:62:AE:C0:28:52:96:CD:F1
Authority key identifier: A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C
Certificate issuer: /CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c
Certificate serial: 01A08C44252142F3241E63F99C1924C886B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 17:01:11 +0000
Manifest this update: Thu 10 Sep 2026 17:01:11 +0000
Manifest next update: Fri 11 Sep 2026 17:01:11 +0000
Files and hashes: 1: TG-T28D3sM1IJX9-bR6zimuu3dQ.roa (hash: sKx/GRdEWeKSqR5AF1hTqJiMQ+ztWu0vS1aze4IWqmA=)
2: qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl (hash: uI1EuCNtgYEmcWjb9KDO2OiB5yIGlpbV2tKGBn020qw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 17:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:44:25:21:42:f3:24:1e:63:f9:9c:19:24:c8:86:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c
Validity
Not Before: Sep 10 17:01:11 2026 GMT
Not After : Sep 11 17:01:11 2026 GMT
Subject: CN=8719779eee05ee461774d07762aec0285296cdf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c3:5a:04:79:d9:e1:93:0e:e0:90:11:c5:8b:
d4:7b:d0:55:7a:59:6d:80:f6:16:68:ce:7c:14:0d:
2d:3d:9c:6c:0a:e1:ca:52:4c:b7:a5:a9:c4:22:a2:
c9:2f:e7:06:11:a6:d7:16:ea:aa:81:b3:0f:d0:84:
6e:11:57:d5:c6:8e:48:b6:51:e2:64:a1:0f:57:b4:
e8:05:6e:4d:07:6c:8d:f4:9b:d2:db:75:1b:b6:c7:
dd:6b:05:ec:dd:11:bd:17:6f:fc:85:bd:0c:c1:f9:
0c:4a:da:f8:e4:fd:7a:2f:dd:1b:e2:16:e1:76:f0:
db:87:21:11:00:a9:1c:02:ff:e4:32:47:95:e4:56:
15:b0:f0:ee:f2:e9:d9:b6:99:ea:4b:9a:60:ac:d2:
fc:70:3b:dd:ed:88:62:46:01:4a:a5:2d:e4:29:d4:
a4:5a:56:55:d2:15:a7:1e:87:e8:45:aa:92:7e:ad:
f1:c9:76:d3:0f:a7:16:41:a8:cf:29:74:7e:97:b1:
46:6c:15:88:5e:d6:66:f7:9b:b8:ee:8a:46:1d:92:
99:ec:ee:1b:3e:58:06:41:54:11:2d:be:4c:4b:9b:
fa:cc:e3:6f:ac:57:bd:cc:b2:33:45:f0:00:b9:9d:
dd:4c:c6:af:73:8a:1d:4e:aa:41:2c:91:56:78:26:
7e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:19:77:9E:EE:05:EE:46:17:74:D0:77:62:AE:C0:28:52:96:CD:F1
X509v3 Authority Key Identifier:
keyid:A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:24:f4:cf:78:0e:53:7f:b4:cf:ae:b7:08:7e:1a:3e:5e:e2:
d1:e5:cb:42:72:4e:e8:36:5c:7e:fa:56:05:a0:d9:97:04:ff:
6c:96:41:e3:6b:fd:c4:9a:b0:d0:64:0c:2b:1d:68:3d:51:7a:
e2:68:62:c1:42:12:f4:d8:54:4a:22:27:38:c8:eb:3d:4c:d3:
5e:63:a6:a7:2d:1b:2e:a5:18:91:81:91:fe:41:91:fd:29:2e:
34:cd:91:7a:8b:ba:f3:0b:cf:c2:c3:cf:12:ce:60:35:9f:69:
c0:47:b9:1d:89:94:78:1f:ea:c1:63:9f:6e:9a:09:b8:99:53:
e5:b3:3a:dc:eb:58:68:22:40:05:7b:e3:a5:a1:7f:e8:34:45:
c3:06:5e:88:30:fe:ed:62:e2:f1:72:7c:29:63:ec:6e:c9:b5:
31:ed:ff:84:09:30:fd:a2:39:a3:a0:21:04:40:35:c3:02:55:
ba:3a:98:94:d3:05:62:9b:64:37:f4:b7:df:71:1a:ed:1b:29:
d7:56:23:5b:74:4c:ec:81:67:dc:ce:2b:dc:ad:be:f6:79:c4:
1c:b5:06:86:84:77:0a:e4:fa:af:c1:9d:8d:9a:37:09:b6:66:
a9:88:9c:a3:01:81:5d:d7:d1:bf:00:71:ae:1f:86:eb:cf:87:
93:74:e2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:30:50 2026 by rpki-client