Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
File: qQYfL0mm16-epna60D3xzi9QJg0.mft (raw, json)
Hash identifier: jrsGbs8CEu+Z8CYmGf8d6q64qcuLPOSXy9S2giXcHIs=
Subject key identifier: 60:76:83:1A:9E:5E:DC:73:14:21:60:E8:D0:66:95:6C:63:18:D2:11
Authority key identifier: A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
Certificate issuer: /CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Certificate serial: 01A0E5F5A82260BED0CEEA719BB908DDAC2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
Manifest number: 0E68
Signing time: Mon 28 Sep 2026 03:01:16 +0000
Manifest this update: Mon 28 Sep 2026 03:01:16 +0000
Manifest next update: Tue 29 Sep 2026 03:01:16 +0000
Files and hashes: 1: JZJx4L1hE5SD9mcU3dDsqxkA624.roa (hash: aZtriA7sGW64atFxZesGv0mQUg9eckBShedQMDCxoFw=)
2: qQYfL0mm16-epna60D3xzi9QJg0.crl (hash: ZIgsFRTsRc/4k6NZWBRlyGNznaR0oRV0UVDpFIiRhNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:f5:a8:22:60:be:d0:ce:ea:71:9b:b9:08:dd:ac:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Validity
Not Before: Sep 28 03:01:16 2026 GMT
Not After : Sep 29 03:01:16 2026 GMT
Subject: CN=6076831a9e5edc73142160e8d066956c6318d211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f1:b1:7d:bf:29:c4:44:a2:65:cf:d6:b8:d6:
87:b4:ea:fb:12:5c:25:0c:8f:e7:7a:09:94:d4:e2:
81:93:ce:3f:bc:05:90:43:b3:1c:a1:c4:f1:f6:c3:
ee:5f:46:6a:ec:65:3a:8a:05:9f:52:1b:24:59:5b:
1b:27:16:ec:d4:a3:96:19:a2:f1:8f:9e:5b:f2:83:
33:19:0e:63:33:b8:b2:0c:d3:2f:80:40:7c:cc:dc:
b9:40:b1:86:d3:7c:95:4c:e5:7d:c4:a7:cd:66:b1:
2b:c5:c2:6e:a5:7a:48:b6:5d:e8:ce:cd:61:e5:72:
d5:71:96:5b:2c:1a:38:ed:38:80:6f:56:56:18:61:
b3:62:e3:f4:37:12:69:e8:4b:10:06:58:5e:51:b8:
1c:18:5b:0c:65:6e:94:73:36:12:36:21:2d:02:de:
dc:26:0a:e3:bf:2b:53:46:41:b3:d4:23:8c:c1:55:
b9:9f:5e:64:03:9e:21:2f:20:30:0c:2f:1c:5a:8d:
cf:70:7e:67:b8:11:ef:1b:37:6b:77:5a:a1:b7:d1:
da:7d:ef:b7:a9:b5:f3:ad:c8:26:72:02:c3:e0:ae:
04:34:36:ff:0b:60:1f:c4:a9:c4:f5:67:2a:2f:24:
d2:64:85:9d:ca:1a:c1:7b:6c:be:62:fa:65:03:1d:
72:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:76:83:1A:9E:5E:DC:73:14:21:60:E8:D0:66:95:6C:63:18:D2:11
X509v3 Authority Key Identifier:
keyid:A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:4a:b6:e3:a0:a1:81:be:49:93:86:c0:a3:fb:23:74:e9:21:
fe:0d:94:92:c3:e4:e0:f8:aa:e4:0a:5e:23:78:9a:76:ff:b0:
ac:1e:2d:f7:0b:93:2b:54:5e:87:ee:03:71:d1:ab:7e:dd:e4:
d3:e5:6d:f4:91:98:19:6c:29:9c:99:14:59:16:d2:44:0c:64:
23:ac:d2:0f:9a:10:04:02:71:30:d0:4d:13:b9:b8:2d:72:b5:
b4:8b:d7:56:97:37:5e:61:84:27:0a:e9:4e:e5:38:60:2a:04:
fd:0e:58:19:1a:85:5b:e5:4a:e0:34:e5:b4:1e:bd:1c:02:06:
5c:82:83:1b:6a:4c:dd:91:ef:7b:10:bf:5d:df:66:6c:58:2e:
5e:e5:66:22:d6:8c:c6:02:4c:45:e6:17:a4:33:b0:4e:43:5d:
59:c0:0b:50:c3:36:8e:76:7c:8a:46:91:bd:32:3e:70:56:94:
54:be:d1:45:79:03:71:57:cc:5c:5f:36:7a:51:6f:4e:1e:5c:
a1:83:9f:0e:f4:ad:a8:75:9b:3c:9a:27:d0:bb:30:68:df:d5:
af:ec:91:55:af:85:da:e4:65:01:44:f3:b0:ca:a5:02:21:96:
b5:54:94:1e:4b:f7:6d:18:16:73:f7:b9:24:b0:ec:01:a6:c7:
ec:e7:36:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:10:12 2026 by rpki-client