Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
File: qYB_bVDZfZcdzy4uUGTpuQets-w.mft (raw, json)
Hash identifier: gIuYwXIoXlZe2HO+J8016q+HvJgVWOS7lT+lu+q+Axc=
Subject key identifier: 95:E0:61:86:49:77:2C:D5:1D:87:17:92:63:9C:60:82:A3:24:7A:7F
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial: 01A0C28DEBEF0E4EA581FA8AD3803FE2A402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
Manifest number: 1A91
Signing time: Mon 21 Sep 2026 06:01:15 +0000
Manifest this update: Mon 21 Sep 2026 06:01:15 +0000
Manifest next update: Tue 22 Sep 2026 06:01:15 +0000
Files and hashes: 1: MUooZ1Ov9expLMpavng4DbjsbpE.roa (hash: eswDXNZ/AXtbqsm+yzDr7T0oqWysTnskZK6VmBCDemc=)
2: qYB_bVDZfZcdzy4uUGTpuQets-w.crl (hash: tkJ6XXgCMUxGSL34VlmEebGRiCWh3FBwQb+lJ1fEcho=)
3: rX1Ss2CK_g4_GFrLEnzxw6wGXIU.roa (hash: cw+3g+tlflCYhhvX9gDsDKPmWsCROnLpk0xinhWv2AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8d:eb:ef:0e:4e:a5:81:fa:8a:d3:80:3f:e2:a4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Validity
Not Before: Sep 21 06:01:15 2026 GMT
Not After : Sep 22 06:01:15 2026 GMT
Subject: CN=95e0618649772cd51d871792639c6082a3247a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:80:12:97:ff:45:4f:55:4a:3c:27:aa:74:9e:
55:ee:e0:57:84:11:d3:14:87:9f:4d:c4:0e:aa:64:
2c:a8:35:62:c5:f9:a9:5d:bf:82:50:6b:ae:e8:d1:
1f:6d:cd:13:e2:35:a6:17:b3:a4:de:28:92:41:7b:
bd:81:7a:57:eb:f7:6e:ca:e8:0b:ec:d9:50:4f:f1:
63:16:dd:30:ce:ce:f6:8b:1b:18:96:08:3d:14:e8:
f6:b7:77:ec:b2:fa:78:b3:da:69:f1:8d:05:e8:ce:
d8:b5:82:e9:72:4c:e8:51:bc:ec:3c:0c:a8:8e:05:
38:d3:5b:ce:ef:a3:e7:44:36:83:bc:3a:64:0c:8d:
8a:26:62:7f:05:4a:31:c9:74:9f:90:e4:ba:68:fa:
25:67:eb:dc:d4:79:0c:3d:2c:ef:77:40:f8:da:19:
50:ca:de:69:7d:55:6a:bf:0d:07:7c:01:d7:dc:d2:
1d:97:31:6e:5b:77:e4:95:dd:c6:9c:f9:95:a9:85:
ca:82:60:af:3b:64:39:f3:e6:10:29:7f:78:c4:e8:
ef:ad:72:92:28:c3:f3:8a:f4:65:c7:bf:7d:d2:96:
03:f1:0b:ce:70:fa:2c:3d:f0:00:11:47:e1:b1:15:
f5:fa:d0:04:76:6d:66:4c:77:20:6b:7a:b5:44:02:
f8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E0:61:86:49:77:2C:D5:1D:87:17:92:63:9C:60:82:A3:24:7A:7F
X509v3 Authority Key Identifier:
keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:23:d3:67:a9:54:62:3d:9b:71:94:5e:18:20:6d:40:f4:2e:
12:71:bf:20:78:84:24:5e:1a:f7:53:9b:8b:53:41:48:a7:00:
c1:c8:22:85:d3:86:fe:55:1c:35:7a:ec:c0:9b:c6:33:4f:3f:
74:ee:ea:72:01:cc:c8:ba:fd:ad:5d:9b:80:c0:af:46:f8:9b:
ae:cb:f8:2a:07:75:cb:53:d6:98:c9:77:90:f1:52:38:b8:29:
bd:f3:45:d6:3c:43:44:dd:a1:a1:df:93:72:d6:ce:7a:ee:e3:
d0:0f:16:d0:46:97:9b:cf:ca:57:a5:d1:4c:51:70:ff:1b:21:
7f:0a:a3:69:9f:d3:99:ca:fb:97:60:ed:3c:a4:8a:89:5e:f1:
bb:90:ba:c3:d7:d7:e2:48:36:37:af:d0:6a:54:76:ca:fb:92:
9c:21:5d:61:7c:8c:ed:66:8c:7c:30:0b:12:ba:30:94:03:a0:
4b:36:48:91:6b:04:9e:6b:9e:d8:6d:23:28:ff:3b:f1:b3:da:
21:0e:cf:e1:48:9e:82:19:11:c2:32:54:71:12:a1:08:61:de:
8f:24:3e:f3:35:d3:7c:38:e8:bb:97:88:e8:ee:42:67:17:a9:
3b:d7:02:a8:af:c8:c1:76:f5:77:64:1e:44:ab:91:30:06:f9:
33:55:09:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:29:11 2026 by rpki-client