Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.mft
File: QD8Iu6_6QWGEMgOop1erbpVGsM4.mft (raw, json)
Hash identifier: MpjqEuSgE+dtoPJINmDDDN3hjMAHed4OikJ6l7MfUy4=
Subject key identifier: 3A:CB:0A:F9:C7:F7:84:89:4A:CC:BA:59:71:E4:14:55:05:3D:3A:22
Authority key identifier: 40:3F:08:BB:AF:FA:41:61:84:32:03:A8:A7:57:AB:6E:95:46:B0:CE
Certificate issuer: /CN=403f08bbaffa4161843203a8a757ab6e9546b0ce
Certificate serial: 01A174A67F53ED31024BDCDED2CF05B6574C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QD8Iu6_6QWGEMgOop1erbpVGsM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.mft
Manifest number: 09D5
Signing time: Sun 25 Oct 2026 20:00:30 +0000
Manifest this update: Sun 25 Oct 2026 20:00:30 +0000
Manifest next update: Mon 26 Oct 2026 20:00:30 +0000
Files and hashes: 1: 90swIJHrJ2sBN5-x6r2JwT1pPtM.roa (hash: qSNS122hM6E8JtNAlwnMJTYeLimXbz4RNM0wfB80wLI=)
2: QD8Iu6_6QWGEMgOop1erbpVGsM4.crl (hash: n6OnE+44zwkfzZKfFa/ombSUK5r1tBxT7VqYL546KQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QD8Iu6_6QWGEMgOop1erbpVGsM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:a6:7f:53:ed:31:02:4b:dc:de:d2:cf:05:b6:57:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403f08bbaffa4161843203a8a757ab6e9546b0ce
Validity
Not Before: Oct 25 20:00:30 2026 GMT
Not After : Oct 26 20:00:30 2026 GMT
Subject: CN=3acb0af9c7f784894accba5971e41455053d3a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a8:c3:99:6d:90:ff:82:fd:3d:a1:81:ee:52:
a5:6a:18:34:13:07:df:e9:c6:62:5b:89:e0:0f:22:
63:64:61:af:2b:b4:47:98:c0:8f:2d:b2:52:6f:30:
c9:7f:3c:75:b4:8b:29:03:60:1a:ca:85:e7:13:41:
59:a6:55:12:ae:d2:7c:9e:11:cd:59:a4:b0:c5:79:
66:b1:89:ac:e4:50:ee:0f:15:d5:1f:1b:0b:6e:73:
96:dd:b2:5f:0b:1a:ab:87:ce:9c:6f:8e:00:1b:a4:
7e:36:26:71:80:50:22:8f:f6:1c:12:be:82:ab:e6:
c7:f9:d5:74:91:d1:0b:f3:09:f8:dc:22:6d:b0:3a:
c6:0c:cd:6c:83:53:28:50:5e:1a:73:23:01:e4:10:
09:d8:a6:5f:b8:86:38:eb:00:12:33:e5:bc:6d:93:
42:5b:7b:5f:4f:57:e3:5f:75:52:b3:9c:17:6e:a9:
15:96:1c:4c:d9:af:4f:cd:5d:6f:b2:ba:03:cb:7f:
5c:dc:72:6c:75:96:b1:ab:a5:91:18:a2:9d:3b:36:
5a:bb:8c:d6:e1:79:44:04:85:83:57:f8:7f:b9:e7:
e8:f1:7f:60:a5:7d:9b:77:a3:1d:5a:66:34:c4:a3:
b8:ac:86:54:b5:3a:3e:2c:d3:39:72:fa:f1:27:65:
15:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CB:0A:F9:C7:F7:84:89:4A:CC:BA:59:71:E4:14:55:05:3D:3A:22
X509v3 Authority Key Identifier:
keyid:40:3F:08:BB:AF:FA:41:61:84:32:03:A8:A7:57:AB:6E:95:46:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QD8Iu6_6QWGEMgOop1erbpVGsM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ef:65:27:1a:0d:2e:d5:10:91:1d:28:fa:ec:cd:23:fc:71:
bf:a5:a3:53:84:df:a6:e0:4e:99:41:5a:3e:2d:d8:1d:ad:3c:
fa:0e:78:52:72:18:fc:1c:e9:ac:11:14:7f:7d:7e:04:83:c4:
16:99:fc:71:1d:db:d7:36:a4:62:ff:00:ca:52:7b:90:a3:6e:
7b:9c:a7:92:f8:a9:21:ac:4d:2c:34:83:0c:7b:ff:e4:40:17:
9d:31:3b:6a:ab:98:7c:1a:89:0e:fe:74:3c:7c:5f:60:6a:0e:
3e:ea:eb:47:91:93:3f:2f:32:7c:b2:75:cd:65:d1:f5:76:41:
cd:76:46:57:6e:c0:f7:01:59:31:e6:08:fc:17:48:c8:81:17:
88:70:de:09:bc:ac:ba:e7:30:48:f8:7c:e3:f8:e3:8e:f9:05:
cd:22:2b:5d:b3:92:98:a3:64:17:88:51:e9:4b:be:68:fc:8b:
8f:5d:f1:e2:31:34:f2:aa:4b:48:df:f7:8c:2a:d2:e5:be:84:
56:a7:84:72:60:06:eb:36:63:32:48:83:34:fd:38:f8:01:00:
51:54:09:ab:32:69:2a:95:dc:64:f3:be:14:72:b7:91:d6:5e:
8d:22:86:d3:96:86:fc:06:ce:5b:2f:e7:fd:b2:72:9d:63:17:
c3:0c:af:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 04:04:11 2026 by rpki-client