Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
File: qsqNwMC5IbCJ8WAmGORVN5enR0I.mft (raw, json)
Hash identifier: DGtbs6PzwqlH3S+BNRF+l/6Ol2w9lXWUxExkcMIcjpw=
Subject key identifier: 60:11:89:46:D4:A9:8D:16:E4:A6:93:D2:FF:37:41:C2:F7:5C:1B:0F
Authority key identifier: AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42
Certificate issuer: /CN=aaca8dc0c0b921b089f1602618e4553797a74742
Certificate serial: 01A0D192EE99D3F9C97953FA390490556FD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
Manifest number: 060F
Signing time: Thu 24 Sep 2026 04:01:02 +0000
Manifest this update: Thu 24 Sep 2026 04:01:02 +0000
Manifest next update: Fri 25 Sep 2026 04:01:02 +0000
Files and hashes: 1: G8uE_YXvAUsbhoJ7QQgS2ptGK4I.roa (hash: BCzWL8FjjNpuELNVuLODI9jH/96WSdwiWl+ywyyb3Cc=)
2: qsqNwMC5IbCJ8WAmGORVN5enR0I.crl (hash: p4+K6mZTrIvSfZIje3iKf/jOJUQGLW4+6tnSJn0lMbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:ee:99:d3:f9:c9:79:53:fa:39:04:90:55:6f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaca8dc0c0b921b089f1602618e4553797a74742
Validity
Not Before: Sep 24 04:01:02 2026 GMT
Not After : Sep 25 04:01:02 2026 GMT
Subject: CN=60118946d4a98d16e4a693d2ff3741c2f75c1b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:61:1f:ce:08:b0:89:72:67:65:aa:97:50:11:
2b:c3:17:c4:a4:b5:2d:f2:13:20:0e:3a:1b:06:4c:
69:3b:e5:6f:0f:15:11:71:a0:fe:2a:3e:d1:8f:e9:
63:f8:5a:58:f7:78:a2:35:c4:3a:0b:2d:c3:6c:79:
cb:95:3e:5b:30:9d:96:78:b5:57:84:c7:12:3b:4f:
70:24:9e:fe:b2:fd:ab:8a:19:0e:a8:91:19:24:34:
0f:03:8f:d3:a8:49:88:b2:9e:0f:04:ea:d9:16:e7:
aa:b1:e1:9f:7b:ee:ca:b2:25:76:b2:48:5c:1d:dd:
0b:c6:e3:a9:f9:fa:c0:37:20:7f:3a:9e:11:31:27:
77:17:81:db:be:8f:f7:f2:1c:fc:0f:39:c7:6b:b9:
b2:13:95:dd:ef:db:45:7c:a5:e1:74:99:b4:58:a4:
e5:fb:de:83:0b:11:3a:59:bd:1f:9f:01:66:1d:79:
64:58:26:37:1c:37:cd:e0:12:94:c5:f7:a6:e8:6c:
0e:ef:70:2b:73:cf:b7:2e:56:65:c9:47:6e:2a:34:
cb:3c:59:46:b4:50:f5:c2:27:45:06:9a:4d:ff:39:
ff:73:5d:97:c5:24:4d:ef:a3:2d:13:e5:24:a4:b5:
4b:c7:39:a4:14:27:af:a4:da:75:0d:4b:70:76:a5:
b0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:11:89:46:D4:A9:8D:16:E4:A6:93:D2:FF:37:41:C2:F7:5C:1B:0F
X509v3 Authority Key Identifier:
keyid:AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ec:c5:25:39:8d:5b:40:83:aa:61:be:65:e9:03:94:e1:7b:
50:94:cd:e3:09:48:e5:fc:77:be:ec:9b:7b:6b:60:56:d6:73:
a5:32:1c:fa:94:6a:83:74:bd:a8:de:b5:c6:d2:20:06:c6:4b:
b8:23:2a:55:65:19:c4:73:2e:7e:d5:99:aa:46:1d:5d:86:1e:
26:67:3e:9a:6b:cf:97:eb:7d:ef:80:52:2a:67:6a:e6:88:88:
a6:15:75:e2:e4:1d:82:16:f6:c4:c2:ba:f3:57:52:18:d5:72:
e0:bc:25:f9:6d:8e:73:41:7d:62:ce:d8:46:d8:7a:5f:42:a9:
d1:79:90:96:5b:19:b2:0a:f4:08:0b:92:29:9f:e7:e6:a1:b1:
36:5b:92:6e:59:78:22:df:31:28:c2:c7:0f:32:66:e6:cb:cf:
a6:63:50:96:3c:33:d7:ee:2a:78:7e:1a:42:78:03:38:e9:9b:
7b:04:41:17:e4:6c:d5:9b:0e:c6:dc:30:95:f5:d0:2d:ed:3e:
99:88:0f:a9:a7:99:8e:1a:a9:81:2c:0b:a4:ee:1e:65:34:4c:
9d:20:cc:8c:3c:3a:e0:5a:e4:28:2d:1f:a4:eb:05:39:49:70:
77:68:75:59:63:bd:9c:1d:a6:cf:6b:da:b5:86:55:bd:27:00:
c9:0d:ed:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:50:31 2026 by rpki-client