
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
File: qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft (raw, json)
Hash identifier: HPu6CyuyQUKL09ECxp1d1a76FSsCP4fG4DfVX/OpJg8=
Subject key identifier: 97:E3:E9:B6:C3:18:CB:1F:C7:F2:02:26:C3:29:00:7F:B0:60:4D:B5
Authority key identifier: A9:BE:16:CE:7D:B3:BE:69:05:B1:AB:EF:8B:E2:1A:23:19:B0:E4:3E
Certificate issuer: /CN=a9be16ce7db3be6905b1abef8be21a2319b0e43e
Certificate serial: 01A0C6D81851333C6E23841FE08E72DF5BE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
Manifest number: 1A67
Signing time: Tue 22 Sep 2026 02:00:45 +0000
Manifest this update: Tue 22 Sep 2026 02:00:45 +0000
Manifest next update: Wed 23 Sep 2026 02:00:45 +0000
Files and hashes: 1: blLvX2-SqKRxgzfg9csWt9Te5CU.roa (hash: Nyn58GOogqZkbGAVvyp/qEbfXu/9YSuSkYbo5ZUxKIg=)
2: qb4Wzn2zvmkFsavvi-IaIxmw5D4.crl (hash: tbg9iErQ+F9cn/eajGn57+MSXdLKhOxOJDJQeKYvVLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d8:18:51:33:3c:6e:23:84:1f:e0:8e:72:df:5b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9be16ce7db3be6905b1abef8be21a2319b0e43e
Validity
Not Before: Sep 22 02:00:45 2026 GMT
Not After : Sep 23 02:00:45 2026 GMT
Subject: CN=97e3e9b6c318cb1fc7f20226c329007fb0604db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:78:ff:c9:cf:df:aa:c8:83:5a:c9:27:0d:38:
24:b8:16:45:5a:5d:af:24:29:37:91:53:5d:6d:60:
34:78:5d:53:60:d4:1a:d4:9b:9d:33:58:ec:8a:98:
c9:08:fe:9f:85:71:f1:8e:ef:d0:d0:c4:80:b7:a5:
25:5b:49:4e:c8:48:97:ca:47:59:25:ae:c5:78:f5:
26:fc:bf:6d:ef:c0:6d:cc:c8:9a:bd:30:4f:c5:fe:
1e:81:96:05:20:7a:76:ad:f7:a8:7b:ac:9c:0d:ac:
c1:0d:fc:d7:fe:7f:1c:44:e8:22:5d:27:23:d2:ad:
92:67:3d:c2:21:79:06:86:3f:cd:b4:5c:4f:3f:9c:
4b:40:52:cc:6f:e5:3f:a8:53:d4:2c:72:c7:6f:d1:
f2:03:bc:63:1c:b8:64:4d:f8:64:65:28:35:24:1f:
bf:e3:0a:e6:f7:7c:26:93:8f:2a:2b:e1:3b:96:ca:
c4:6b:f2:89:45:fe:29:b3:d6:c6:8e:ad:fe:53:c6:
1c:0c:83:5c:b3:c1:5b:4f:2b:fb:ca:1b:9c:7c:a0:
9e:b0:b6:4e:81:99:fe:2d:97:2c:7b:73:0c:e9:35:
46:25:e9:88:8c:6f:50:9a:6d:4c:fa:b5:29:f2:0b:
3e:95:83:c5:5c:a2:00:d3:65:11:cd:ac:e8:2c:00:
52:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E3:E9:B6:C3:18:CB:1F:C7:F2:02:26:C3:29:00:7F:B0:60:4D:B5
X509v3 Authority Key Identifier:
keyid:A9:BE:16:CE:7D:B3:BE:69:05:B1:AB:EF:8B:E2:1A:23:19:B0:E4:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e7:27:4d:68:bf:ce:78:d8:e2:b7:17:2b:9c:83:1a:f3:31:
21:c2:8b:dc:e2:9d:83:fa:02:9f:1b:47:e7:c7:44:83:22:a4:
53:e6:d0:93:9c:c3:80:32:5e:4f:52:07:43:dc:e2:59:de:bc:
38:ca:fd:d2:0c:45:da:54:b4:b1:a1:38:c3:57:d0:7b:f7:be:
16:48:74:8c:f4:bd:95:39:5d:05:37:bf:ed:f7:7f:9e:8d:1d:
cc:d1:9e:1a:46:af:01:09:9a:68:6a:ce:b5:76:ee:3b:0b:aa:
64:a6:c3:2a:6a:a0:92:9d:e7:77:f9:c6:16:7e:c8:cc:64:bc:
fe:a5:30:c7:2c:5a:2e:88:23:09:b6:21:ad:9a:ef:4c:5a:2f:
b0:4b:45:08:99:14:5c:17:a7:76:9e:f1:69:6d:2b:aa:8d:5e:
ba:df:e4:fc:80:ae:5b:1e:e1:78:f0:35:ef:84:6e:4b:c7:79:
1a:54:86:6d:db:df:c0:26:c0:e3:07:22:65:a6:60:9a:11:2b:
48:a5:a3:b3:0e:43:13:53:ae:d7:27:04:00:15:1f:d1:2b:60:
c9:0c:4a:af:5a:b7:93:f8:79:15:1a:07:99:2b:3b:b5:6b:65:
01:b1:94:26:77:a7:bf:0d:2a:be:bc:76:4d:fe:f4:b8:51:a3:
be:f0:26:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:54:25 2026 by rpki-client