Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
File: Q8d7RzY2gTePrORmFB1UzIg5nPU.mft (raw, json)
Hash identifier: iuHpDVgI+gNUirwK/UHUZ+62gA/SsZ7PJdh9rH3F9TI=
Subject key identifier: 03:04:FB:0A:30:A4:C4:83:7D:1C:5A:D6:96:71:02:EA:18:5E:B0:C7
Authority key identifier: 43:C7:7B:47:36:36:81:37:8F:AC:E4:66:14:1D:54:CC:88:39:9C:F5
Certificate issuer: /CN=43c77b47363681378face466141d54cc88399cf5
Certificate serial: 01A14196109DDC43A9EEFE35BF409D2B6F47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
Manifest number: 1A38
Signing time: Thu 15 Oct 2026 22:01:56 +0000
Manifest this update: Thu 15 Oct 2026 22:01:56 +0000
Manifest next update: Fri 16 Oct 2026 22:01:56 +0000
Files and hashes: 1: 1XdNFJlYALUGMKogiIBRKN_MGo4.roa (hash: E2oHH/KY2uFlsQZera9X/UCkx0/EdwNbRkr7QYI3dr0=)
2: Q8d7RzY2gTePrORmFB1UzIg5nPU.crl (hash: zGfiXaihn5DMZyePKHS4d0CId5UvTUltKNIjXrb4xo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:41:96:10:9d:dc:43:a9:ee:fe:35:bf:40:9d:2b:6f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c77b47363681378face466141d54cc88399cf5
Validity
Not Before: Oct 15 22:01:56 2026 GMT
Not After : Oct 16 22:01:56 2026 GMT
Subject: CN=0304fb0a30a4c4837d1c5ad6967102ea185eb0c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c3:9d:2d:19:a4:8a:f4:eb:bb:10:71:ce:b8:
9d:1b:68:21:04:97:2f:04:00:d8:d3:ec:45:f6:12:
cd:9c:46:55:af:bf:1d:0e:6e:7b:54:36:5f:a2:5b:
47:ca:1c:3c:ee:04:9e:70:71:57:23:f8:7b:f7:f7:
61:75:ff:94:6f:be:42:92:1b:45:eb:34:8f:09:90:
23:a6:09:2f:7f:59:cd:0e:8e:32:4f:c2:89:4a:dc:
46:76:d2:4c:b4:99:25:93:94:44:36:75:fb:d5:6a:
43:a6:d3:66:34:29:55:98:c0:4c:93:80:6f:d2:70:
ed:a8:29:cc:bd:c9:c4:8b:36:8e:4f:d7:99:96:82:
5e:5e:f8:db:fa:98:b0:0b:e4:33:1c:a4:6c:01:b1:
45:70:aa:29:33:26:49:16:3f:39:d9:08:12:c2:9c:
45:6a:14:da:13:2e:f5:f0:66:15:ae:c6:4c:d1:17:
1e:86:f0:79:e8:38:5d:84:49:b6:07:27:a0:34:dc:
3c:b7:c0:f4:7d:c0:b7:7c:35:a9:5f:f2:4d:22:64:
2f:ed:92:bc:cf:02:19:47:d6:e7:2f:f7:b1:30:39:
59:43:ea:3c:72:e7:94:26:d2:85:59:af:3d:10:6f:
da:bd:b7:6b:d3:41:3b:e8:fa:39:1a:86:a4:a6:39:
df:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:04:FB:0A:30:A4:C4:83:7D:1C:5A:D6:96:71:02:EA:18:5E:B0:C7
X509v3 Authority Key Identifier:
keyid:43:C7:7B:47:36:36:81:37:8F:AC:E4:66:14:1D:54:CC:88:39:9C:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:0b:52:ed:5d:dd:6c:e5:ea:0d:e9:43:81:ee:32:0a:a9:73:
ba:17:9d:00:b6:01:d0:45:e2:43:a3:6c:e2:a4:7b:b9:db:84:
26:60:5f:9f:54:ce:b3:7a:a9:55:be:0c:ae:3c:f6:7a:32:f8:
55:0a:82:c9:27:9b:27:d4:af:9e:12:60:d0:af:48:8f:e4:f0:
22:8a:cb:2a:72:fd:5b:e3:a9:a0:36:31:41:a7:2e:3d:6a:3b:
ea:f1:30:c0:84:06:ee:f4:49:f2:83:6d:02:ba:d1:d0:82:5e:
13:57:85:29:27:98:88:f9:87:8f:71:45:9f:cf:b3:74:0d:29:
f1:5f:69:b5:f9:d7:80:69:e7:0f:e3:b5:77:40:1d:7f:91:75:
58:8f:e9:73:cf:5e:69:e2:e2:90:d1:ac:d7:e4:22:50:71:8f:
03:61:3c:8a:1e:d9:79:6d:69:a9:aa:08:13:6e:26:8a:f8:45:
58:50:a8:48:f0:c6:f4:33:bb:9d:ea:09:ef:31:07:78:9b:b3:
5d:d4:a5:35:7a:d2:6a:fe:ce:30:17:11:3b:8d:e0:82:69:c1:
0c:cf:39:ba:e5:4b:6f:10:73:fa:93:49:e5:a9:5c:dd:bf:33:
85:89:80:a4:ea:04:d5:47:78:1d:fd:92:c5:e6:56:cf:79:a9:
86:5e:20:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:04:41 2026 by rpki-client