Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
File: qGBDVsdQGuIQSyzO087cXb3BFjs.mft (raw, json)
Hash identifier: TByxJNxIRFlZZ0kN9yZsF4okW4EO/wC3GnLwOKVvtNE=
Subject key identifier: 5C:50:B2:16:95:90:49:5E:8B:D8:D8:65:84:3A:50:7F:C7:3E:DD:76
Authority key identifier: A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
Certificate issuer: /CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Certificate serial: 01A0B50910FF6BBD3F350E04A1F9944DD42D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
Manifest number: 0B1F
Signing time: Fri 18 Sep 2026 15:01:05 +0000
Manifest this update: Fri 18 Sep 2026 15:01:05 +0000
Manifest next update: Sat 19 Sep 2026 15:01:05 +0000
Files and hashes: 1: 7bHKsta4Dp1Yop5z_TE4GuyF-pw.roa (hash: D3+G4Ub921rB7gMLWBKfq6fOLKtP+5fJMq67UB4TEGk=)
2: E6joSh_KCsRZIeJuWns6mUSAvaQ.roa (hash: /pkjUktJxl5tikLBDBKNXbabaHGDBXecObDRlAAJ4OY=)
3: qGBDVsdQGuIQSyzO087cXb3BFjs.crl (hash: XBBzsOJe7LjVK2nQ0g1Mi+e8KCHnz1n86V0q7Nn8l80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 15:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:09:10:ff:6b:bd:3f:35:0e:04:a1:f9:94:4d:d4:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Validity
Not Before: Sep 18 15:01:05 2026 GMT
Not After : Sep 19 15:01:05 2026 GMT
Subject: CN=5c50b2169590495e8bd8d865843a507fc73edd76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:30:97:ab:31:d3:3e:cf:6b:f3:2a:bd:e8:3f:
6e:81:ea:d1:74:d7:f8:5f:95:aa:eb:d4:5e:11:a3:
a3:08:b9:b0:9c:d7:be:fd:9c:e8:1c:d4:6d:a5:58:
0c:34:8f:73:a8:ea:ac:57:4c:2c:4b:29:75:5c:a3:
2a:c3:56:7e:37:d7:d7:98:dd:41:03:f7:29:4e:58:
af:c4:ac:1e:6f:a5:b7:e1:ee:e1:85:7c:b5:1c:f6:
2d:0a:e2:28:ae:bc:dc:2f:6a:6e:7d:cc:ba:4d:ba:
d7:49:34:ba:e2:d0:25:86:61:07:15:b9:3f:f9:ac:
e7:84:3b:2f:06:26:7c:4f:51:de:17:88:d0:d8:cb:
bd:19:18:0c:ad:f2:28:8e:92:a1:2a:93:1d:b9:b3:
bd:28:5d:c3:96:0a:81:32:db:2c:af:8f:7f:21:94:
4e:01:49:dc:5e:21:51:6c:a9:4f:72:ba:52:b5:9d:
c7:ef:01:03:07:85:da:c5:c9:9b:87:3d:4a:9a:de:
27:1a:31:d9:3e:6c:26:a8:6b:e7:c4:8a:d0:07:09:
a6:0a:3b:ca:42:cd:80:69:3e:14:75:f6:86:fd:ce:
ac:c7:1f:10:b2:d6:aa:4b:24:3b:ca:ac:fa:b4:18:
7e:a6:c5:42:16:8f:dc:13:65:e0:10:57:8f:1a:1e:
dc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:50:B2:16:95:90:49:5E:8B:D8:D8:65:84:3A:50:7F:C7:3E:DD:76
X509v3 Authority Key Identifier:
keyid:A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a7:c5:67:9b:33:55:f3:66:97:a9:2e:2f:a0:8d:6a:9e:28:
5b:02:b3:21:1b:4b:d3:58:b1:91:ff:a6:58:12:99:bc:86:af:
15:8d:88:f3:1d:5a:3c:2c:7e:de:e6:07:5c:17:cf:f4:57:1e:
d6:d0:e9:32:4d:9d:78:c1:3a:2b:12:11:75:65:c1:63:f8:29:
55:c9:3d:f1:b4:0b:5b:8d:af:74:a0:00:ee:13:c2:4e:18:8e:
1e:ca:6e:5e:6e:a5:83:01:f9:02:4a:5b:bc:a4:ab:c3:d4:d3:
2b:5e:11:02:7d:e4:7d:11:7b:fe:58:2e:76:fb:d6:68:69:ab:
4e:36:12:94:93:c9:71:12:5f:71:0d:2b:47:2f:a0:01:da:4c:
2b:eb:23:00:58:82:f7:99:bf:81:97:fd:9a:c5:46:95:95:3d:
be:a3:8a:ab:20:ef:cc:0d:4a:02:84:de:ad:a4:ff:a4:8f:ea:
b5:54:25:81:5b:40:90:3f:a8:1f:b0:59:54:ef:72:5c:a2:33:
8e:a9:31:2b:b4:65:c6:db:16:ff:2e:ef:ff:2c:f2:76:24:d2:
6a:71:72:fb:40:df:3a:a5:cd:af:9c:9c:94:fc:8a:48:7d:50:
e3:3c:75:20:15:cb:9f:63:2c:59:99:95:60:c5:ed:b1:d6:fc:
f5:8e:91:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:05:27 2026 by rpki-client