Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
File: qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft (raw, json)
Hash identifier: nQGE3fNBgLHRDcn3ey6U0Z1oiYTsl6GlMJ3ncLPywtM=
Subject key identifier: 96:DC:68:CD:EF:89:C1:61:39:30:7B:23:76:0A:B6:41:28:F8:2F:E1
Authority key identifier: A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3
Certificate issuer: /CN=a8153b3d5612234fe260fe60bc7ce028062227a3
Certificate serial: 01A0871DD6F2F482B1DD3FC7D5B5EF819368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
Manifest number: 1A49
Signing time: Wed 09 Sep 2026 17:01:14 +0000
Manifest this update: Wed 09 Sep 2026 17:01:14 +0000
Manifest next update: Thu 10 Sep 2026 17:01:14 +0000
Files and hashes: 1: e9ATf5sPxhIIrZkXrfrTWItTCA8.roa (hash: 9bYZXPWqJ0NbEhPnRTTZ2nAWZSD7VDe4KmSotczV1Og=)
2: eJ3EsbBMhzFDB-H0FiABM5_1h7o.roa (hash: 2Gzq+fr47dBnSE3c78QxSTACSN9b6779m8anTE61jss=)
3: qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl (hash: Q0t7jfZXaddXb5Rdt2zVOL/J2sYcQaL9f+hEr0eoxCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 14:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:87:1d:d6:f2:f4:82:b1:dd:3f:c7:d5:b5:ef:81:93:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8153b3d5612234fe260fe60bc7ce028062227a3
Validity
Not Before: Sep 9 17:01:14 2026 GMT
Not After : Sep 10 17:01:14 2026 GMT
Subject: CN=96dc68cdef89c16139307b23760ab64128f82fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:28:5c:90:ab:16:02:42:53:73:02:8f:62:2b:
a1:e1:13:88:77:a4:d3:e6:f4:73:64:fb:fb:a4:ac:
34:04:b0:9f:91:c9:c0:31:70:fb:1b:e5:fd:39:db:
8e:4b:54:70:d9:24:78:60:56:a5:bc:70:c5:23:78:
9d:b8:f7:1e:25:e6:04:68:88:6c:bd:10:54:ed:d1:
13:f1:44:ce:b2:d8:0f:35:2e:a1:e8:ae:a0:64:05:
88:29:0c:6e:e0:ec:83:3d:32:a7:1a:32:8c:a0:d4:
bf:c2:5d:6e:73:c0:04:d1:d2:13:9b:8c:6c:32:ce:
71:31:d7:e2:10:35:2f:f3:74:bc:17:f4:23:00:61:
75:c6:34:fc:44:fd:35:ec:51:2c:c2:3f:36:ae:f7:
5f:1b:d1:ca:35:dd:a4:b9:ad:c3:af:89:e8:72:37:
4f:0c:b6:88:f3:2c:88:a9:af:a6:55:7d:aa:29:9c:
31:14:81:b7:98:35:94:85:8f:46:bd:5d:54:65:90:
07:f9:3b:97:3b:a9:08:d6:76:57:90:51:f1:54:41:
d3:37:67:63:58:1c:27:e3:a0:95:cc:50:aa:89:cb:
aa:81:df:1d:a1:a2:f3:d2:ce:e8:88:d0:75:21:9b:
88:6f:11:e8:38:4b:86:bd:06:70:c7:53:9a:9e:0d:
40:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:DC:68:CD:EF:89:C1:61:39:30:7B:23:76:0A:B6:41:28:F8:2F:E1
X509v3 Authority Key Identifier:
keyid:A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:be:a5:95:47:6a:fb:56:31:d6:05:36:9e:3b:5e:de:b0:be:
56:c4:f3:df:bf:a6:5c:d3:b5:71:21:ea:38:9c:f0:fb:13:ef:
78:3d:36:c6:fa:c3:b0:57:78:1a:cd:45:3e:6e:cf:ef:cc:0b:
63:90:80:60:a0:6d:af:97:19:e4:ab:bb:58:d1:c3:e2:02:ff:
c6:65:0e:ea:f7:97:47:dc:1e:d7:12:0d:4d:ba:f2:13:cf:7a:
99:0b:0a:6d:1f:ee:d1:13:e3:fe:1a:a1:87:b6:89:a4:1a:58:
53:5c:5f:13:48:c2:8b:c7:66:46:c8:d6:a0:ba:42:10:89:8f:
35:42:48:be:59:3f:a0:97:82:a4:fb:23:ee:53:72:5c:8f:f8:
bf:37:66:c1:2a:3c:70:be:80:d2:f8:5c:01:a9:0e:54:08:ac:
d5:63:12:41:b6:47:26:61:05:45:30:1e:31:35:8f:2d:09:7d:
1b:1d:67:75:5e:57:02:4a:ee:9c:50:e7:11:d9:c6:f1:b1:35:
d6:38:bc:9b:9b:f2:d4:8a:6f:7b:63:03:fb:cb:7b:ed:1c:3a:
cb:8f:8d:a2:82:11:27:6c:78:c2:c6:b1:98:41:d1:53:84:d8:
b1:e8:99:1e:5f:61:ad:79:a8:33:cc:a2:6e:01:ea:07:57:8f:
37:5e:27:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 20:29:48 2026 by rpki-client