Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
File: qft75iSm8jMZjio089nZhCmrpGE.mft (raw, json)
Hash identifier: XBEn1MmlEFP/vG/GB1wJh7SjgicDfsoObtHlZ2H1tvY=
Subject key identifier: 24:5F:A2:B5:C0:CA:D6:5F:EC:F5:6E:15:5A:6A:BB:46:F1:B1:5F:45
Authority key identifier: A9:FB:7B:E6:24:A6:F2:33:19:8E:2A:34:F3:D9:D9:84:29:AB:A4:61
Certificate issuer: /CN=a9fb7be624a6f233198e2a34f3d9d98429aba461
Certificate serial: 01A1859B603B79708E3F16AC443F2C3F05AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qft75iSm8jMZjio089nZhCmrpGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
Manifest number: 0329
Signing time: Thu 29 Oct 2026 03:01:54 +0000
Manifest this update: Thu 29 Oct 2026 03:01:54 +0000
Manifest next update: Fri 30 Oct 2026 03:01:54 +0000
Files and hashes: 1: DEtXANHZs-ySfJ2DbeIG2FY0feA.roa (hash: CiC1X69cIhHbTBPnPYg9pS10KzYxN0NPXzJ/qp7bwgE=)
2: qft75iSm8jMZjio089nZhCmrpGE.crl (hash: 87CZUERJFiHeAdgoQ9CsLABckA1hYH75mESpEd4bqg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qft75iSm8jMZjio089nZhCmrpGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 03:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:85:9b:60:3b:79:70:8e:3f:16:ac:44:3f:2c:3f:05:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9fb7be624a6f233198e2a34f3d9d98429aba461
Validity
Not Before: Oct 29 03:01:54 2026 GMT
Not After : Oct 30 03:01:54 2026 GMT
Subject: CN=245fa2b5c0cad65fecf56e155a6abb46f1b15f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:be:28:43:16:c8:b9:15:47:cb:e1:d1:31:3d:
a8:9a:b0:bc:47:8f:99:7d:06:29:c6:be:5d:a4:13:
6c:e9:2a:94:da:31:1f:89:03:5e:04:18:7d:cb:13:
ee:97:7d:47:45:40:e4:66:06:32:b8:72:a9:d5:45:
0d:03:5f:e0:81:f7:2e:32:47:e8:b6:b0:c9:4b:90:
c8:da:5f:55:c2:9f:03:90:e2:95:71:86:4d:55:ee:
bf:8c:94:18:c0:74:57:cf:12:0c:c9:b3:d5:b6:f0:
73:0c:b0:b2:b2:22:ef:98:2c:24:c8:74:44:0e:cc:
15:38:ba:88:5b:b2:12:af:49:c9:23:9d:21:64:6c:
dc:d2:8a:4e:33:91:99:18:a4:f5:9b:a4:94:54:7d:
da:4f:52:fb:5c:af:96:ca:8b:02:09:f0:c7:71:c4:
26:e2:16:66:cb:c3:e2:cb:ec:ff:4a:c4:f5:cb:71:
e3:ca:3e:97:9e:9a:32:9f:67:0b:2e:b9:e3:82:8a:
a1:af:97:58:13:f6:6b:df:5b:d2:30:fb:0d:48:7e:
d3:10:80:55:3c:6b:2d:db:51:96:34:97:4d:70:77:
1a:12:08:9f:e6:04:1a:27:d8:17:7e:5d:ca:4c:5f:
1f:1d:e9:2d:1d:95:35:b6:3a:4c:94:c4:0e:03:66:
04:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5F:A2:B5:C0:CA:D6:5F:EC:F5:6E:15:5A:6A:BB:46:F1:B1:5F:45
X509v3 Authority Key Identifier:
keyid:A9:FB:7B:E6:24:A6:F2:33:19:8E:2A:34:F3:D9:D9:84:29:AB:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qft75iSm8jMZjio089nZhCmrpGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:39:66:71:fc:57:21:b6:32:62:78:8b:92:53:90:94:9e:42:
7f:98:4e:6e:d7:d9:f1:54:7f:93:ca:f5:d4:e4:b5:c9:b0:ca:
b6:a8:f4:45:16:92:3b:12:08:3a:6c:a0:35:32:87:40:5f:9f:
5e:46:a9:2b:bd:d1:f8:48:e1:27:9b:e4:be:ec:34:62:81:0d:
5a:8c:33:6c:2f:e5:a0:ac:be:96:ae:eb:3f:b9:bd:41:ba:cb:
4e:44:7b:20:7a:97:1f:81:05:cc:65:38:a1:de:8d:f7:63:c7:
ed:1b:e1:13:f6:a9:33:69:8e:ef:99:2f:e9:64:f9:2b:ef:50:
e5:d3:81:b0:f6:d5:2b:19:c7:ff:45:b0:36:c3:31:bb:ae:d6:
d8:d5:9c:87:ad:07:29:e9:23:94:90:b9:bf:96:40:59:b0:ab:
47:3e:b9:da:b2:5e:53:2e:04:00:21:0f:2e:b3:5b:77:ea:49:
15:3c:b7:72:e4:d1:6e:07:92:ef:69:55:c0:71:f9:97:6b:58:
77:a0:cf:ea:f8:b4:6a:2d:2d:22:43:1c:38:0a:cb:08:fd:c2:
96:b8:1f:bf:a9:88:93:0b:e8:00:8f:8a:bb:4d:75:14:dc:85:
fa:7d:16:a1:3d:39:27:36:7d:8b:90:0d:d1:80:7d:70:8d:a4:
6a:dc:63:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:51:33 2026 by rpki-client