Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
File: qfxWMNV7GXHzolbtbZg6-tayjXU.mft (raw, json)
Hash identifier: OavdIcEWDSrGL17Os8OnRDz+cJRLoIMeiV7xDawN8Rc=
Subject key identifier: 76:ED:52:18:DD:66:14:2C:78:74:53:6E:02:AD:AD:7F:0F:96:06:07
Authority key identifier: A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
Certificate issuer: /CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Certificate serial: 01A0DA5F07C1DB5D28D94C9B6ABA9EABAAE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
Manifest number: 1A75
Signing time: Fri 25 Sep 2026 21:00:55 +0000
Manifest this update: Fri 25 Sep 2026 21:00:55 +0000
Manifest next update: Sat 26 Sep 2026 21:00:55 +0000
Files and hashes: 1: KIREq3B_mRi_ruYLjq_b_qaPiMU.roa (hash: XxQhGm3arKEfc0Jix82KOHGdF1oeChWiOIWCuWRPrpg=)
2: RLTq3d76GisC1LZTNSb9nCNxxt8.roa (hash: x4c1QBZG0KpP+BhZ849r1Wv8Cus10ftjdq8hO7xYuIU=)
3: qfxWMNV7GXHzolbtbZg6-tayjXU.crl (hash: g21deW47WZwcT9oH27IGsfVYK+uNhJwZ02tqRHIfu2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:07:c1:db:5d:28:d9:4c:9b:6a:ba:9e:ab:aa:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Validity
Not Before: Sep 25 21:00:55 2026 GMT
Not After : Sep 26 21:00:55 2026 GMT
Subject: CN=76ed5218dd66142c7874536e02adad7f0f960607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:95:12:b1:16:d7:a7:1d:98:49:eb:6b:57:11:
c2:1a:a1:cd:a5:1e:7f:60:38:6d:22:d3:d4:7d:31:
ff:98:16:36:8d:10:6f:4a:d6:29:cc:63:b9:21:0a:
43:6c:c1:2b:31:99:c7:7b:88:8a:5c:e5:08:e1:ab:
09:10:44:3d:ee:91:c2:9a:20:36:80:9a:3e:d4:b8:
be:70:fa:5d:79:de:3f:f9:85:fc:54:1d:90:08:f8:
51:28:7c:a3:f0:f7:91:09:85:00:ba:28:b3:59:74:
de:8b:00:6d:f6:9e:ce:65:7f:e4:32:c4:aa:63:69:
91:2f:2e:d6:ac:19:74:65:45:46:70:4e:cd:e8:75:
4c:03:7a:9a:c4:65:60:27:f7:07:72:66:c8:f9:6a:
d0:27:07:cf:33:13:45:c0:e0:2c:4d:79:c6:a1:e7:
78:52:da:9e:2b:6d:af:83:a2:d4:e2:8f:54:2b:b8:
79:84:1c:b7:0b:89:00:a9:f7:25:20:43:24:87:10:
d5:56:f2:8d:d3:05:4c:93:cd:d6:15:9a:bc:f0:3e:
f2:64:34:b4:54:0d:e7:04:50:d3:8b:68:0c:da:cc:
f6:32:c6:7f:dc:bc:fc:1c:08:81:6b:34:43:90:fb:
80:3b:7b:fc:1d:d8:89:e0:cd:f2:cb:76:aa:10:55:
d5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:ED:52:18:DD:66:14:2C:78:74:53:6E:02:AD:AD:7F:0F:96:06:07
X509v3 Authority Key Identifier:
keyid:A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:48:47:39:3c:14:ee:1a:0c:e0:db:3f:f4:0c:99:45:e0:53:
23:f2:61:e4:f8:0d:05:80:cf:65:8e:a8:3f:6b:32:43:0b:0e:
cb:80:f8:03:ec:d9:55:1f:48:8e:06:59:7f:65:2f:ca:b0:fa:
b1:59:83:0f:4d:e5:12:ac:58:99:ed:19:d1:6b:32:68:83:ef:
11:95:1b:7c:ef:d8:10:bf:c4:37:31:b5:10:3f:e3:21:1e:84:
60:9a:17:7d:94:b8:b5:5b:1e:29:9d:43:37:07:d7:a1:c4:cb:
fd:c0:b1:fe:f1:dd:86:4c:50:46:30:d2:e7:67:ae:e3:58:76:
29:c8:09:f1:bb:fe:30:52:da:d2:84:3d:2c:53:c2:a4:31:42:
fa:6a:11:39:21:6b:9f:66:51:44:ce:98:4d:91:5d:6b:f5:07:
9f:cd:d3:07:1d:d8:62:9b:cc:0c:ef:13:88:ec:a5:f9:73:24:
49:26:3d:aa:21:69:fd:1e:60:69:bc:89:29:7f:16:32:77:d5:
80:34:88:ba:39:0c:7f:89:33:e0:0a:9f:a4:40:c3:37:dc:72:
ae:60:36:62:f9:76:ce:2e:81:e3:72:d9:ec:61:97:82:31:a7:
44:e0:e1:1e:42:6c:92:55:92:7b:73:30:e1:9d:27:ec:d7:c9:
27:3b:53:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:56:07 2026 by rpki-client