Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.mft
File: qfNHED7zSa2C8basQ-dsD_o4wvg.mft (raw, json)
Hash identifier: hvvxKGEWMxvECMbcZCu9pdFYJ4APK4TJzZ3XDobqseg=
Subject key identifier: ED:84:A5:91:FD:DC:84:74:C9:5F:E0:27:C6:E0:B8:6D:B5:7B:AB:CD
Authority key identifier: A9:F3:47:10:3E:F3:49:AD:82:F1:B6:AC:43:E7:6C:0F:FA:38:C2:F8
Certificate issuer: /CN=a9f347103ef349ad82f1b6ac43e76c0ffa38c2f8
Certificate serial: 01A1197547CEB2FAA5FB526DB11D8F870DAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfNHED7zSa2C8basQ-dsD_o4wvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.mft
Manifest number: 010B
Signing time: Thu 08 Oct 2026 03:01:18 +0000
Manifest this update: Thu 08 Oct 2026 03:01:18 +0000
Manifest next update: Fri 09 Oct 2026 03:01:18 +0000
Files and hashes: 1: Cegt9gCk36CfyQoZLzS4cnrOmWA.roa (hash: yHvXAS+TMxPI4zuMGTC5jZ53ix1/BV7IdsaANR877aM=)
2: qfNHED7zSa2C8basQ-dsD_o4wvg.crl (hash: nGm1v2uka3H8GnwmepaceeQs5dsVruY5azFiPXN34PA=)
3: voGOvW0BRa27Yr9p1xeqy3udyvc.roa (hash: JKI8fmA0jDEWhuhuTal1D06exvXzvzQH3NDd7ekumtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfNHED7zSa2C8basQ-dsD_o4wvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 03:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:75:47:ce:b2:fa:a5:fb:52:6d:b1:1d:8f:87:0d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9f347103ef349ad82f1b6ac43e76c0ffa38c2f8
Validity
Not Before: Oct 8 03:01:18 2026 GMT
Not After : Oct 9 03:01:18 2026 GMT
Subject: CN=ed84a591fddc8474c95fe027c6e0b86db57babcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:45:06:ce:24:84:c6:14:46:8e:5c:fc:10:3f:
d2:5f:49:1b:c1:2e:1e:e8:11:17:f2:fb:ba:cd:22:
84:06:21:68:94:4d:e9:b4:55:83:71:d4:13:77:5d:
72:39:5b:de:96:72:a3:04:4c:f4:74:65:30:27:1a:
d9:40:9a:9c:9d:11:7e:ef:a0:aa:4e:80:9b:40:62:
ad:f4:88:c1:15:ef:66:6b:cc:69:04:3e:1f:23:03:
2b:48:31:7a:a4:29:5a:04:20:64:74:3a:70:9c:56:
e4:60:fc:ef:a4:f1:25:37:df:4f:62:b5:13:1d:46:
ff:a7:f5:c4:b3:d4:9b:0f:a7:3c:a4:2a:b3:9a:a0:
19:e9:33:c1:df:7f:91:46:13:16:67:87:fb:d4:bf:
21:26:85:9e:f8:40:c3:7d:8e:51:aa:de:69:1c:55:
43:c2:2e:1b:6d:71:04:a5:05:a6:cb:c1:11:60:e1:
31:86:bc:a2:d9:a6:a4:33:0b:d1:a3:28:cc:c9:bc:
62:70:73:09:3d:ff:dc:96:ff:52:2a:f4:ad:d3:b8:
08:75:83:23:f9:b9:74:2b:a6:ed:97:9a:04:ac:ed:
98:a9:fa:34:88:df:82:97:0f:4b:c6:eb:8b:13:40:
75:bc:ec:2d:22:cb:b0:6e:0a:26:56:c2:fd:b7:fe:
b7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:84:A5:91:FD:DC:84:74:C9:5F:E0:27:C6:E0:B8:6D:B5:7B:AB:CD
X509v3 Authority Key Identifier:
keyid:A9:F3:47:10:3E:F3:49:AD:82:F1:B6:AC:43:E7:6C:0F:FA:38:C2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfNHED7zSa2C8basQ-dsD_o4wvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:8a:b3:df:ca:31:2a:27:03:a3:72:27:be:e4:c2:2e:36:25:
4f:1d:d8:af:f7:40:3e:48:fe:59:81:93:65:9a:5e:9e:85:00:
37:2e:b4:33:ee:93:de:26:03:4e:b6:bb:74:a5:7a:13:81:0b:
95:52:b7:cb:0d:2a:9f:5c:5c:b9:37:7a:b0:06:d0:a3:a2:b5:
bd:17:89:04:a1:83:ae:70:f8:c8:1e:00:9b:8e:78:d7:ba:86:
d6:2d:02:c8:32:a1:1d:c8:fe:01:46:97:1f:29:8f:a3:15:43:
c9:90:1e:42:4a:71:c4:85:89:10:ee:53:2f:51:ed:84:24:6d:
b6:61:5a:dc:dc:7b:87:77:d3:96:2a:d6:9b:b4:41:c2:b7:12:
5e:bc:0b:2c:05:ab:36:2c:18:2b:df:22:85:1b:ff:9f:6d:3b:
97:64:f3:e0:35:4f:70:1e:f7:a5:ff:3a:ed:c1:b8:90:a9:c0:
5e:b2:84:63:91:e0:36:4a:c1:3c:97:13:8a:10:8d:b4:66:eb:
eb:6e:dc:36:12:34:ec:6a:1e:3b:c8:a2:2f:4b:d1:a4:27:92:
96:05:80:d6:a7:5a:07:6c:9e:d0:1d:67:c3:a5:6d:04:34:fb:
26:ce:9d:b3:68:8f:49:fc:a5:a1:0a:3e:d5:c5:c0:7d:56:d0:
f3:4d:f1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 11:10:43 2026 by rpki-client