Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
File: qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft (raw, json)
Hash identifier: Z7IjB3SKqiNI9OZipHcANrUbNy2VBI8FGRKPqYXAACw=
Subject key identifier: 03:15:D7:0E:38:52:D5:DF:13:6F:3F:63:E2:DA:48:D9:C5:0D:13:26
Authority key identifier: A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4
Certificate issuer: /CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4
Certificate serial: 01A17DE18298B2A962FC080C56D8196E7489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
Manifest number: 091E
Signing time: Tue 27 Oct 2026 15:01:33 +0000
Manifest this update: Tue 27 Oct 2026 15:01:33 +0000
Manifest next update: Wed 28 Oct 2026 15:01:33 +0000
Files and hashes: 1: 4hGYV1HkQX7u-sK6NU3NKiUgMmg.roa (hash: nlgBOMwc0Z5SXyM7I/XYMmfHNrGRHRzrTdBqF8G4e24=)
2: qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl (hash: YP1BhU37wYgqZcTxG11GeC6oe4WbHboK5Y5jpmjJzG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e1:82:98:b2:a9:62:fc:08:0c:56:d8:19:6e:74:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4
Validity
Not Before: Oct 27 15:01:33 2026 GMT
Not After : Oct 28 15:01:33 2026 GMT
Subject: CN=0315d70e3852d5df136f3f63e2da48d9c50d1326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e0:70:e5:75:f3:fa:e8:c5:bc:f1:eb:29:0e:
62:d7:89:0f:4b:56:58:3b:ca:e9:fe:bf:05:49:16:
ca:3a:47:70:f6:c4:21:82:87:22:97:42:dc:e3:56:
85:aa:ce:11:e2:ad:38:1e:46:75:ce:5c:7c:33:27:
56:b1:6f:7a:03:3e:55:6f:1b:c4:1e:71:c2:83:60:
fa:cf:02:23:dd:c2:d6:cf:83:2d:ff:c0:0b:84:ae:
bd:47:40:aa:d3:2d:fb:d5:98:1b:c6:73:d8:d0:2b:
eb:33:9d:e7:dc:34:bd:ae:9a:bf:97:78:4c:15:d2:
c1:2f:03:fb:c4:9d:03:92:ad:71:0e:40:c7:92:ea:
82:e2:81:43:1d:42:b1:a6:a9:03:14:e7:3b:4a:07:
f9:11:d8:df:46:39:c8:16:98:f4:6c:94:e4:2d:1f:
26:25:20:df:8f:72:36:34:4a:05:f1:42:3e:88:fd:
fd:28:8f:de:c0:0d:73:ba:46:a2:b3:77:4e:6f:2a:
65:39:a5:ff:b6:c1:0f:56:fc:97:a6:00:7a:10:ee:
8a:fe:af:84:6e:2e:4c:af:cb:be:d1:fe:e6:bc:73:
26:bb:d2:b5:95:f9:cb:a4:7e:d0:18:0a:52:81:7a:
93:8b:16:f3:93:30:e0:4c:3a:6f:e0:b8:cb:04:60:
ef:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:15:D7:0E:38:52:D5:DF:13:6F:3F:63:E2:DA:48:D9:C5:0D:13:26
X509v3 Authority Key Identifier:
keyid:A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:de:51:0b:be:a4:04:16:ee:b5:8e:63:02:2d:70:91:69:f3:
f0:d9:09:90:0a:fe:66:66:bd:ba:4e:c2:6b:49:e3:e8:51:16:
95:7d:ca:50:39:4c:82:82:44:b6:19:fa:0d:ea:aa:4e:bc:bc:
98:3c:69:9e:24:93:29:7e:73:29:51:ae:72:94:8d:4d:21:9b:
4c:f6:0b:48:8f:cb:60:72:f4:68:5c:4e:a9:5d:a6:7d:60:bd:
58:49:81:bd:a2:b9:09:36:d4:29:eb:27:1e:b5:8a:18:1a:17:
71:5d:a2:97:57:a5:11:06:7c:87:7d:ec:97:f1:8b:b7:2d:b8:
6d:6f:9d:dc:26:9d:94:80:f7:d7:12:82:3f:65:4d:de:6b:f7:
aa:68:11:22:fc:18:02:2e:18:82:d8:56:51:cc:a9:ff:8d:f1:
60:fe:2a:04:27:0c:91:03:08:26:1b:36:9f:39:cd:48:44:e9:
45:8d:9b:03:05:8d:0a:0b:e8:80:f1:f2:f4:ae:1f:76:01:ab:
ce:08:1e:00:29:ca:9d:26:38:21:7c:b2:9b:f2:99:e8:2a:3d:
f1:3a:29:4c:1b:ed:bd:b2:af:d7:53:de:dc:e6:01:a5:6a:f5:
cc:11:66:de:a2:79:7a:d8:54:8e:3b:bb:0d:a9:76:8a:f9:21:
2f:da:f7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:30:45 2026 by rpki-client