Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
File: qcd4RK62qrWMRgPKCCvdSngEd58.mft (raw, json)
Hash identifier: fWqHDvRhQ0cCJ4YpBpVVQ4AmaNp1X6gEMdCef6o/ZOE=
Subject key identifier: 01:C4:2E:AF:41:4C:AB:90:76:12:C5:9F:55:B6:4F:32:DE:94:EF:6B
Authority key identifier: A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F
Certificate issuer: /CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f
Certificate serial: 01A12BE94ADA2EA791FF74CBA2986F59679F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
Manifest number: 1A9C
Signing time: Sun 11 Oct 2026 17:01:11 +0000
Manifest this update: Sun 11 Oct 2026 17:01:11 +0000
Manifest next update: Mon 12 Oct 2026 17:01:11 +0000
Files and hashes: 1: 4_bMzMBhDf5tuBBvYtBoIOg-KLc.roa (hash: 6AZogLPcjIIOPEMq9zRkZQNHkdZ8ldzB51VGATYSTPA=)
2: qcd4RK62qrWMRgPKCCvdSngEd58.crl (hash: Z1zq/RZbSTL2M2RwCepyKvoNc1yDjyGHO6v9mK1wYHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:e9:4a:da:2e:a7:91:ff:74:cb:a2:98:6f:59:67:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f
Validity
Not Before: Oct 11 17:01:11 2026 GMT
Not After : Oct 12 17:01:11 2026 GMT
Subject: CN=01c42eaf414cab907612c59f55b64f32de94ef6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e7:7e:9a:84:e2:39:d8:ea:c0:93:07:c5:83:
5b:41:49:00:4d:62:6d:c5:83:5d:c1:27:a8:3f:c1:
fb:94:c9:be:ab:2c:e9:36:d4:8d:36:2d:b8:c4:ee:
d0:87:45:ba:b4:ce:64:5b:63:26:13:20:58:41:6c:
2d:20:96:37:60:d4:df:6a:63:23:fa:fa:af:a1:26:
c3:3f:50:d1:39:92:5d:00:f5:2e:16:b6:b0:d4:5a:
52:a2:4c:98:20:84:82:a8:98:e6:2c:5f:77:55:67:
f5:ce:d1:00:75:c3:42:e1:ae:f9:96:83:ad:47:8f:
c6:8c:a8:6e:1b:6e:01:bd:d0:ec:19:1a:9d:7c:af:
a2:ac:a1:1f:86:1f:36:39:e1:b7:51:3f:50:c1:ab:
a3:52:c8:71:87:0b:4d:c2:51:c8:52:d8:d2:e0:5e:
a2:d4:7b:0a:17:8a:04:77:fa:67:df:c7:2a:d6:ec:
40:15:73:b1:c6:70:2c:c3:c5:31:39:01:51:e3:62:
93:5e:36:21:cd:56:49:04:fb:c2:8f:79:be:01:9d:
67:ba:3b:96:98:58:1c:b3:72:8c:6d:e6:8c:d9:92:
d3:c9:c4:e5:81:ec:11:09:76:4b:48:79:ab:b4:42:
7d:51:ca:e5:21:7b:83:00:4b:da:cc:c8:17:15:9b:
8d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C4:2E:AF:41:4C:AB:90:76:12:C5:9F:55:B6:4F:32:DE:94:EF:6B
X509v3 Authority Key Identifier:
keyid:A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:97:77:96:f4:33:9d:32:c7:21:c8:e6:0f:a1:87:42:7c:bf:
0f:c9:78:ef:bd:c8:4e:8e:02:7f:07:5c:78:17:6c:87:a6:ef:
65:e4:34:ae:8c:bd:6f:43:cf:d2:63:3a:61:19:91:d0:a9:b8:
45:9f:45:16:8f:2e:15:3d:31:25:75:15:2b:1b:17:a4:d1:d3:
e5:39:a2:5a:0d:78:83:ea:0d:be:2f:ae:3a:35:e6:35:ee:bd:
74:fc:98:e5:71:44:6d:4c:18:ec:e2:d8:5c:61:c3:03:a6:a5:
89:28:0e:c5:88:d0:97:1b:16:c6:9f:4b:de:25:7c:0f:27:14:
1b:96:bb:29:dd:d9:ae:35:41:cd:5f:50:2b:2f:9f:10:60:08:
3a:e1:8a:7a:ae:fa:f1:db:ee:ec:9d:4e:09:f4:2d:8b:43:06:
d6:84:13:4e:ab:4e:41:f1:37:0c:94:52:77:fa:e4:08:a8:25:
2f:f9:83:2c:f0:1c:6c:ee:ba:84:19:51:a2:79:69:ba:c0:83:
49:75:bf:62:03:33:60:f1:e1:ad:6b:8b:d1:47:7d:9f:42:96:
35:f1:45:30:41:ff:eb:9c:6b:cd:e2:55:87:c8:6f:b4:f1:57:
61:d4:0d:ba:e6:04:30:80:c2:69:02:a5:69:46:ba:ea:69:f8:
64:09:19:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:04:55 2026 by rpki-client