Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
File: qft75iSm8jMZjio089nZhCmrpGE.mft (raw, json)
Hash identifier: dp7WIz3jcmFR+1dymzjS2B9JCZSJ3dnFDDyxq1JLnQw=
Subject key identifier: C7:24:51:D0:B1:BC:92:74:4C:D5:6C:56:8A:D5:9D:48:EE:14:7F:F6
Authority key identifier: A9:FB:7B:E6:24:A6:F2:33:19:8E:2A:34:F3:D9:D9:84:29:AB:A4:61
Certificate issuer: /CN=a9fb7be624a6f233198e2a34f3d9d98429aba461
Certificate serial: 01A08E69849B3D8D3C86DED4C1AE25171358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qft75iSm8jMZjio089nZhCmrpGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
Manifest number: 02A9
Signing time: Fri 11 Sep 2026 03:01:14 +0000
Manifest this update: Fri 11 Sep 2026 03:01:14 +0000
Manifest next update: Sat 12 Sep 2026 03:01:14 +0000
Files and hashes: 1: DEtXANHZs-ySfJ2DbeIG2FY0feA.roa (hash: CiC1X69cIhHbTBPnPYg9pS10KzYxN0NPXzJ/qp7bwgE=)
2: qft75iSm8jMZjio089nZhCmrpGE.crl (hash: wNQYosl8uLuv/ZqG+GZ9UCny26gBb19YV4sKVCgvDX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qft75iSm8jMZjio089nZhCmrpGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:69:84:9b:3d:8d:3c:86:de:d4:c1:ae:25:17:13:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9fb7be624a6f233198e2a34f3d9d98429aba461
Validity
Not Before: Sep 11 03:01:14 2026 GMT
Not After : Sep 12 03:01:14 2026 GMT
Subject: CN=c72451d0b1bc92744cd56c568ad59d48ee147ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:77:74:b4:a4:4f:62:89:1a:f2:6d:72:e6:d0:
90:d4:27:ea:b0:b7:71:7e:fe:3c:bb:5f:de:48:f6:
6c:cf:bf:12:b1:71:4c:cd:bb:d8:7a:15:fc:d1:c0:
25:7c:85:21:9b:74:22:0f:70:7b:87:fc:03:60:26:
22:fd:24:4f:04:11:b2:d1:ad:f5:91:51:fe:2c:55:
05:43:03:c5:bb:c6:0a:94:3c:47:94:7a:aa:ae:41:
54:db:57:fa:84:0a:b5:b7:e9:de:e4:c1:5d:f2:23:
a3:07:be:be:eb:9a:d9:ff:93:80:6e:e0:f5:83:31:
7c:47:5f:68:94:42:c5:95:79:43:00:bc:3f:5b:37:
84:b5:f3:e1:3f:b0:2c:3e:bc:24:ad:f0:9d:ca:a4:
78:06:2d:07:2a:85:e1:df:73:49:20:25:4b:be:24:
a3:07:83:af:b2:d3:4b:16:4a:3b:3d:07:af:8b:c7:
20:f8:b0:89:7b:2f:1c:f2:44:65:87:9b:ab:ec:e9:
7e:10:96:80:3e:b7:eb:12:79:d9:84:bd:a3:50:07:
04:a8:f8:66:9a:9d:c5:70:31:07:4b:b8:b0:30:32:
50:f6:11:35:ba:3c:d3:ba:27:ce:a8:e3:2a:20:7d:
b9:f1:8b:35:d5:99:ba:83:d5:c4:6d:b1:a9:2f:bd:
c2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:24:51:D0:B1:BC:92:74:4C:D5:6C:56:8A:D5:9D:48:EE:14:7F:F6
X509v3 Authority Key Identifier:
keyid:A9:FB:7B:E6:24:A6:F2:33:19:8E:2A:34:F3:D9:D9:84:29:AB:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qft75iSm8jMZjio089nZhCmrpGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:fe:43:97:77:12:aa:4a:48:c5:f1:04:81:9a:ae:a5:b3:e6:
83:3a:28:fe:95:d5:5e:28:3d:2f:e7:5e:b0:68:62:ff:63:cf:
89:30:3c:b1:73:cb:1e:b2:0b:f6:97:ed:c4:6d:42:ba:df:65:
00:49:35:77:9f:86:5a:96:bd:42:bb:83:0d:d2:9b:78:20:96:
86:ea:cc:63:a0:e7:31:ec:e6:3b:2c:a4:a2:f1:54:ac:a4:96:
7c:11:4d:f1:79:fa:7b:51:65:5a:12:2a:be:3f:12:fa:af:bd:
5f:d3:4a:30:3b:09:fc:a8:fc:45:86:c4:d7:7a:c0:56:5c:9b:
21:81:90:4e:c5:5c:0e:f1:af:b3:02:64:e4:df:16:c2:e8:1c:
cd:a3:28:1f:56:98:4b:15:87:4d:61:a7:04:84:e8:7e:cb:09:
fc:c1:33:b3:34:b1:96:e7:4e:f3:4a:c7:42:f9:9e:d8:7d:88:
34:39:70:2c:dc:df:16:65:16:ac:0f:29:c7:fd:7a:1d:66:e1:
7b:17:1e:cd:09:d7:82:0d:25:35:bd:8f:c2:9c:ae:9e:a7:73:
f7:39:ef:6e:92:2a:86:79:fa:66:af:2e:39:e2:e3:9a:d4:c1:
85:df:b8:18:76:79:9b:b0:83:a7:ee:6c:38:d3:af:f8:53:ea:
58:17:85:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:24:56 2026 by rpki-client