Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/qaHWsnXkY50IGRt8RqsjlCgod0Y.mft
File: qaHWsnXkY50IGRt8RqsjlCgod0Y.mft (raw, json)
Hash identifier: 9SJ7Thz6q95AYbGMoIupMy3Z1lZwrNSVGLI6sO0G7GU=
Subject key identifier: D8:C7:1E:D0:D7:30:D1:37:EF:A2:F5:A8:07:B0:B5:81:FA:AC:53:CC
Authority key identifier: A9:A1:D6:B2:75:E4:63:9D:08:19:1B:7C:46:AB:23:94:28:28:77:46
Certificate issuer: /CN=a9a1d6b275e4639d08191b7c46ab239428287746
Certificate serial: 01A0B6F6F7D8E59AE1098B16C860F449B8E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaHWsnXkY50IGRt8RqsjlCgod0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/qaHWsnXkY50IGRt8RqsjlCgod0Y.mft
Manifest number: D8
Signing time: Sat 19 Sep 2026 00:00:33 +0000
Manifest this update: Sat 19 Sep 2026 00:00:33 +0000
Manifest next update: Sun 20 Sep 2026 00:00:33 +0000
Files and hashes: 1: ab6rMUVn3A5Dtq5dYI7GOWhDpls.roa (hash: hYA//IrWljegAbclM/Dg53bUXQQ8j8qJOOVapxZlnWw=)
2: e95uvzijUfA8PskqB29MCQITY0c.roa (hash: 5t2e4qTsbvRPuZzQuH0LgBYqoRjK8h1rvy0dZQHvLOQ=)
3: h4HTnmNQ40S0AlgZb0tILyqRtAs.roa (hash: x8PyCmmrpbL3asDF+bPUyXhIWSTsgb0lr6OUsDywpqw=)
4: qaHWsnXkY50IGRt8RqsjlCgod0Y.crl (hash: 4c9AjMi8etJBcPccpOuFxRGuKwZVwrJNPAFJZvwvvSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/qaHWsnXkY50IGRt8RqsjlCgod0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/qaHWsnXkY50IGRt8RqsjlCgod0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qaHWsnXkY50IGRt8RqsjlCgod0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b6:f6:f7:d8:e5:9a:e1:09:8b:16:c8:60:f4:49:b8:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a1d6b275e4639d08191b7c46ab239428287746
Validity
Not Before: Sep 19 00:00:33 2026 GMT
Not After : Sep 20 00:00:33 2026 GMT
Subject: CN=d8c71ed0d730d137efa2f5a807b0b581faac53cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:59:08:de:6d:5e:96:4d:50:9d:83:ce:d1:01:
df:46:dc:7e:54:cb:12:e2:09:a3:89:88:9f:e9:2d:
dc:cd:37:57:1a:5e:78:27:b9:b2:b4:4c:91:90:ec:
6e:ed:6c:32:d1:51:6b:94:88:31:e0:0a:a9:8f:9f:
ee:7c:80:2c:b5:39:0d:82:3f:09:bc:8d:2a:77:91:
eb:49:b6:8e:fe:8e:f0:b6:38:65:6e:69:16:e6:52:
82:2e:a8:7e:88:19:ac:56:60:76:26:c5:fb:31:64:
3e:40:e4:d5:ff:cd:31:2a:bb:cb:54:6e:2c:5d:b5:
cd:cf:8e:74:21:e2:23:7b:87:b9:e1:83:8b:57:a6:
4b:d5:10:1c:de:93:c1:57:b3:d7:20:d5:b8:6e:dc:
e3:07:cf:97:24:61:ba:c4:af:91:97:2b:fa:13:dc:
29:f2:80:77:c0:30:8a:45:90:f0:bb:71:fb:05:60:
1c:aa:ac:f6:08:53:b3:53:23:db:10:b4:4e:cc:b7:
d9:10:4b:0e:7c:61:1f:ac:6e:7b:fe:d2:0b:15:7b:
b4:e7:7f:9f:96:08:92:d0:b4:6b:9e:b6:ea:b9:3b:
ef:b4:02:13:15:0b:7f:6e:2a:90:14:7d:37:3c:c8:
c4:6b:5b:16:11:30:41:ce:04:f1:b3:b6:b2:c8:14:
55:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C7:1E:D0:D7:30:D1:37:EF:A2:F5:A8:07:B0:B5:81:FA:AC:53:CC
X509v3 Authority Key Identifier:
keyid:A9:A1:D6:B2:75:E4:63:9D:08:19:1B:7C:46:AB:23:94:28:28:77:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaHWsnXkY50IGRt8RqsjlCgod0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/qaHWsnXkY50IGRt8RqsjlCgod0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/qaHWsnXkY50IGRt8RqsjlCgod0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:03:65:49:eb:95:42:52:ff:4c:b2:eb:66:c4:e9:d4:9c:31:
9d:b9:46:2d:bf:83:d5:5a:96:e4:81:8d:3d:e0:92:e2:18:04:
6e:f6:37:b5:96:37:07:23:ec:a5:9d:aa:6d:5d:1f:7b:57:a6:
72:55:0b:df:71:47:6d:19:aa:ed:d1:d1:18:8f:d2:91:09:d5:
de:d5:c2:7f:7b:66:5f:d5:27:a9:4d:4f:2f:be:14:f0:ae:30:
ff:25:7a:d5:46:94:c3:e2:09:7b:bb:84:d4:d0:23:9d:10:c2:
d4:ec:ff:9e:37:f0:97:b0:6f:58:13:9b:29:df:60:41:80:03:
f2:5a:c6:db:d8:8c:1d:57:7b:14:e3:1b:6a:94:1e:53:e2:d9:
0b:b0:0e:f4:32:43:30:1c:2a:98:37:5d:25:a0:04:44:5d:91:
97:bf:8a:58:53:20:55:7a:32:6a:6e:bd:6e:fb:1b:a5:e4:fc:
6b:fb:ab:bc:4c:ab:7e:95:76:68:28:02:4d:10:78:42:10:46:
77:11:81:f1:25:83:84:a4:db:2c:19:4f:86:cc:26:1a:f4:a6:
5b:e3:c1:2d:70:aa:8b:d3:2d:ef:f1:76:ab:53:99:91:97:84:
5b:36:a7:02:d6:bf:99:c4:6c:0a:61:01:17:82:20:e9:ad:b8:
54:84:37:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:59:04 2026 by rpki-client