Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.mft
File: Q94YPxSj8k-bhtBE-HcphoC1Ers.mft (raw, json)
Hash identifier: a2/nxTyoy+P+f+G0n70ajIeaTDsO2IZrUFrd9XZkdgQ=
Subject key identifier: 1D:49:0C:C9:58:BA:AE:AD:B0:00:97:AD:A5:4D:22:98:80:EA:5A:37
Authority key identifier: 43:DE:18:3F:14:A3:F2:4F:9B:86:D0:44:F8:77:29:86:80:B5:12:BB
Certificate issuer: /CN=43de183f14a3f24f9b86d044f877298680b512bb
Certificate serial: 01A0BFC38DC9701CE9784CD3F05EF22D85F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q94YPxSj8k-bhtBE-HcphoC1Ers.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.mft
Manifest number: 08CE
Signing time: Sun 20 Sep 2026 17:00:59 +0000
Manifest this update: Sun 20 Sep 2026 17:00:59 +0000
Manifest next update: Mon 21 Sep 2026 17:00:59 +0000
Files and hashes: 1: Q94YPxSj8k-bhtBE-HcphoC1Ers.crl (hash: /4Iz6PhXBTUmgBrxxe5uk1rYfGmdnAQWcrtjDF8o9pw=)
2: hXKR5zejn3_Hil5KhYu5iVmfXJI.asa (hash: 3GFU2TS4xAC21rEQtTrjdeWRD+az4p5iCI2PhFizOP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q94YPxSj8k-bhtBE-HcphoC1Ers.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:c3:8d:c9:70:1c:e9:78:4c:d3:f0:5e:f2:2d:85:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43de183f14a3f24f9b86d044f877298680b512bb
Validity
Not Before: Sep 20 17:00:59 2026 GMT
Not After : Sep 21 17:00:59 2026 GMT
Subject: CN=1d490cc958baaeadb00097ada54d229880ea5a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:83:f8:2e:93:7b:41:d4:ff:62:c8:84:2f:47:
17:75:99:8e:c9:48:9b:95:d6:26:a2:53:3f:22:b2:
82:0d:40:aa:43:6e:54:e2:e6:57:52:62:42:4a:0c:
55:ea:e3:12:23:c1:63:e9:62:20:05:5e:49:09:d7:
6e:03:7e:bd:9d:cd:f3:b8:9e:12:b9:d5:b5:8f:c1:
c4:87:81:bf:0e:5f:67:8d:5d:0c:b7:f4:33:1b:bc:
28:8a:bc:44:53:ef:bc:a3:c2:2e:81:a4:ad:ce:64:
28:18:fa:95:4f:d9:3b:50:2a:4a:e8:d8:5f:71:5c:
62:2b:bf:99:c3:a2:76:19:3d:d2:40:2d:49:e9:e0:
a6:72:db:87:7a:c2:5e:a5:41:ca:72:d0:70:9d:02:
97:51:ff:45:3e:44:17:4f:95:17:10:73:61:87:7c:
5f:a8:ef:3b:77:d2:d2:3e:cf:fc:b7:1b:99:bf:be:
e0:ff:f8:13:fe:db:2f:55:bd:8c:70:85:da:be:14:
79:72:48:5e:81:d9:6b:50:50:b0:ce:89:e7:bc:19:
75:1f:ce:5f:97:8b:26:23:44:f0:66:07:b9:3e:92:
fc:2b:7a:8c:5b:ba:94:b8:df:62:13:1a:75:bb:e2:
a6:20:8a:ea:17:8c:df:7b:fd:8f:ce:d6:f5:8e:be:
d6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:49:0C:C9:58:BA:AE:AD:B0:00:97:AD:A5:4D:22:98:80:EA:5A:37
X509v3 Authority Key Identifier:
keyid:43:DE:18:3F:14:A3:F2:4F:9B:86:D0:44:F8:77:29:86:80:B5:12:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q94YPxSj8k-bhtBE-HcphoC1Ers.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:29:86:ae:50:ed:b2:31:a0:75:5d:da:06:58:82:ff:96:6f:
52:3a:de:74:80:9a:4e:4e:95:5c:e2:b9:20:86:12:7b:ef:7b:
a9:b2:de:20:b7:56:db:98:8e:f4:38:bb:51:50:7d:a5:b4:8c:
18:75:9b:d3:1b:99:d9:f9:fb:46:e3:32:24:61:e0:02:23:21:
66:f0:9e:1b:6e:9e:0e:3c:34:c2:73:d6:2d:8d:df:e7:c4:07:
4d:81:e9:8a:e7:8a:97:dc:7c:33:38:98:ae:ef:11:50:43:1b:
27:57:1d:5a:ea:64:48:cb:4a:05:68:4e:d8:e3:96:1a:69:4c:
f9:b8:22:1b:e0:46:bf:3c:7f:8e:f6:a4:4b:46:87:8e:fa:b6:
53:08:55:b4:c7:a2:4b:61:17:25:4f:1d:6b:ce:36:62:28:d2:
c4:eb:38:5d:a4:50:87:5a:72:76:a1:71:be:11:51:02:55:6d:
bd:d7:cc:b5:41:38:9b:c3:35:73:89:f0:0e:4d:3d:70:e2:96:
00:22:a5:50:8f:bf:0a:ef:77:f8:3e:68:3a:d9:55:f3:3c:4a:
ce:08:3b:b8:df:2e:89:2f:13:5c:61:70:83:37:d9:d4:4d:ef:
39:49:04:8d:0d:78:05:35:ce:6f:1b:0b:44:1b:f9:49:2e:57:
f3:89:b4:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC/w43JcBzpeEzT8F7yLYX5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZGUxODNmMTRhM2YyNGY5Yjg2ZDA0NGY4NzcyOTg2ODBi
NTEyYmIwHhcNMjYwOTIwMTcwMDU5WhcNMjYwOTIxMTcwMDU5WjAzMTEwLwYDVQQD
EygxZDQ5MGNjOTU4YmFhZWFkYjAwMDk3YWRhNTRkMjI5ODgwZWE1YTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IP4LpN7QdT/YsiEL0cXdZmOyUib
ldYmolM/IrKCDUCqQ25U4uZXUmJCSgxV6uMSI8Fj6WIgBV5JCdduA369nc3zuJ4S
udW1j8HEh4G/Dl9njV0Mt/QzG7woirxEU++8o8IugaStzmQoGPqVT9k7UCpK6Nhf
cVxiK7+Zw6J2GT3SQC1J6eCmctuHesJepUHKctBwnQKXUf9FPkQXT5UXEHNhh3xf
qO87d9LSPs/8txuZv77g//gT/tsvVb2McIXavhR5ckhegdlrUFCwzonnvBl1H85f
l4smI0TwZge5PpL8K3qMW7qUuN9iExp1u+KmIIrqF4zfe/2Pztb1jr7WXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB1JDMlYuq6tsACXraVNIpiA6lo3MB8GA1UdIwQY
MBaAFEPeGD8Uo/JPm4bQRPh3KYaAtRK7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTk0WVB4U2o4ay1iaHRCRS1IY3Bob0MxRXJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lMmQ4ZmUtMDFmMS00YzU2LTkxZjgt
ZGVkNzQzMTQ3ZDU4LzEvUTk0WVB4U2o4ay1iaHRCRS1IY3Bob0MxRXJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9lMmQ4ZmUtMDFmMS00YzU2LTkxZjgtZGVkNzQzMTQ3ZDU4
LzEvUTk0WVB4U2o4ay1iaHRCRS1IY3Bob0MxRXJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJimGrlDt
sjGgdV3aBliC/5ZvUjredICaTk6VXOK5IIYSe+97qbLeILdW25iO9Di7UVB9pbSM
GHWb0xuZ2fn7RuMyJGHgAiMhZvCeG26eDjw0wnPWLY3f58QHTYHpiueKl9x8MziY
ru8RUEMbJ1cdWupkSMtKBWhO2OOWGmlM+bgiG+BGvzx/jvakS0aHjvq2UwhVtMei
S2EXJU8da842YijSxOs4XaRQh1pydqFxvhFRAlVtvdfMtUE4m8M1c4nwDk09cOKW
ACKlUI+/Cu93+D5oOtlV8zxKzgg7uN8uiS8TXGFwgzfZ1E3vOUkEjQ14BTXObxsL
RBv5SS5X84m0Tg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 02:30:15 2026 by rpki-client