Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
File: Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft (raw, json)
Hash identifier: t5HdryzYAhaArwvmoh8K2om04RX8FLlDGRF/es2xhFQ=
Subject key identifier: D5:73:2F:80:2D:83:68:3B:2C:73:B8:E8:1B:5B:B1:DD:D1:FE:A0:67
Authority key identifier: 42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22
Certificate issuer: /CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822
Certificate serial: 01A12B0D1EBAECB7E6F40812FB6701C5F8F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
Manifest number: 098A
Signing time: Sun 11 Oct 2026 13:00:42 +0000
Manifest this update: Sun 11 Oct 2026 13:00:42 +0000
Manifest next update: Mon 12 Oct 2026 13:00:42 +0000
Files and hashes: 1: Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl (hash: fqzmTt4t0zZ5PYwixFatVQtjTuDYyAezY5DSSH1K8dM=)
2: gODxSRHwWTf0AdhEf-vZlAdcT8Y.roa (hash: 3YgISHwQEuO0iWUQza0xD+9L4RrntGi+pZDu8veL4Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:0d:1e:ba:ec:b7:e6:f4:08:12:fb:67:01:c5:f8:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822
Validity
Not Before: Oct 11 13:00:42 2026 GMT
Not After : Oct 12 13:00:42 2026 GMT
Subject: CN=d5732f802d83683b2c73b8e81b5bb1ddd1fea067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:70:30:da:03:84:11:1d:cb:77:ef:b4:e7:43:
13:8f:22:98:b9:aa:40:55:b0:c9:32:be:5b:45:a7:
04:72:68:a8:20:59:2a:b7:01:bf:b8:77:a4:8e:32:
06:41:27:e3:ab:ca:97:1a:5f:08:46:8e:da:59:d8:
04:93:d3:6f:b5:0b:99:1f:a0:0b:8f:6a:96:7d:e8:
85:9d:94:92:23:1c:37:9b:7d:bf:67:6a:eb:25:47:
b0:33:68:68:16:52:a9:4a:ea:cf:65:06:7c:67:81:
60:3e:3e:ef:c0:7b:7f:1e:c1:d2:fb:cc:2e:8d:b4:
69:7a:17:b6:f7:7f:9d:fd:fe:cc:7c:53:42:38:fe:
2a:2f:4a:a8:48:40:36:d0:03:52:39:72:e8:a4:6e:
f2:6b:7b:82:a9:32:03:bf:9d:4e:39:5a:02:c4:39:
cd:06:d1:48:7d:a7:16:f4:9e:85:6f:96:c2:fe:bd:
65:1c:1f:48:d4:bd:1f:a3:8b:e5:1e:c2:c8:ab:15:
60:9a:36:0a:91:8b:fc:eb:03:b6:47:b5:21:df:af:
bc:8a:1c:a6:05:0c:fb:d2:02:30:99:37:ea:0a:09:
a7:88:a5:7e:be:4a:aa:5a:cf:64:97:68:01:a8:6f:
a1:52:4f:ca:16:42:0f:2e:18:c1:41:d5:8c:26:82:
d3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:73:2F:80:2D:83:68:3B:2C:73:B8:E8:1B:5B:B1:DD:D1:FE:A0:67
X509v3 Authority Key Identifier:
keyid:42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:14:d8:1e:36:47:46:39:d9:55:9f:37:89:94:57:9d:20:d1:
18:ab:ad:ce:b9:c3:89:be:79:3f:2d:da:f9:fb:75:06:0a:7e:
71:b3:25:f3:b1:4b:98:f2:71:13:2e:a4:c9:e7:b8:be:cd:0f:
df:8f:7e:cd:b3:90:bf:93:46:d7:17:a8:d3:d3:cc:82:b2:0f:
5f:73:2f:6e:e6:91:7a:5a:28:2a:f7:b7:98:d0:b9:da:bc:57:
f9:a5:39:48:a3:23:21:83:48:ac:28:c5:03:75:76:8a:44:a4:
a8:77:ba:c0:e0:7b:d9:87:e2:84:54:26:37:0b:0d:89:eb:a0:
f8:4d:3e:2c:dc:d7:01:27:73:63:02:34:6e:06:b2:72:94:2a:
90:62:16:89:9e:cd:68:76:af:ce:cc:9c:71:a6:35:48:72:8a:
a7:ef:51:85:03:41:00:51:3c:78:1a:19:2e:c9:2d:ed:6a:8e:
ab:05:57:75:79:a9:a3:53:60:47:da:40:7d:08:0a:0a:eb:af:
5a:40:ee:1a:64:83:37:42:ca:d4:9d:e7:ab:ce:dd:13:53:19:
33:50:40:01:ac:e5:75:bf:ad:57:5f:3f:ef:ca:94:cb:5a:c3:
4f:3a:1e:bc:a2:fe:93:0c:9d:b2:3d:9a:f1:e0:14:55:2b:96:
3e:37:20:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:42:53 2026 by rpki-client