Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
File: Q9CWU4TcREh6gxcabV0FqUpq1nw.mft (raw, json)
Hash identifier: cSM+1iNAOyXr4N5kxGhV62mulM8NKtzYhxP2FWWZYJ4=
Subject key identifier: 19:0E:E0:71:14:6F:14:0F:02:47:96:E4:03:03:0C:44:7A:4E:6B:7D
Authority key identifier: 43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C
Certificate issuer: /CN=43d0965384dc44487a83171a6d5d05a94a6ad67c
Certificate serial: 01A0DDCEA8E995798C44D9E87B87071DC193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
Manifest number: 0513
Signing time: Sat 26 Sep 2026 13:01:43 +0000
Manifest this update: Sat 26 Sep 2026 13:01:43 +0000
Manifest next update: Sun 27 Sep 2026 13:01:43 +0000
Files and hashes: 1: Q9CWU4TcREh6gxcabV0FqUpq1nw.crl (hash: YazzmZ7EFTOFB7MvM3iIkBNvQESie2hBIsGuXTxKaTo=)
2: m_rKth0WblNoPGrjkNfcn6MmMxc.roa (hash: S0D1n4kwGONLCb2yvnuQTTGiDLAbMsWlgwxGBJpbiPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:ce:a8:e9:95:79:8c:44:d9:e8:7b:87:07:1d:c1:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d0965384dc44487a83171a6d5d05a94a6ad67c
Validity
Not Before: Sep 26 13:01:43 2026 GMT
Not After : Sep 27 13:01:43 2026 GMT
Subject: CN=190ee071146f140f024796e403030c447a4e6b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0f:11:6d:0f:4e:61:96:4a:5b:ba:0c:ab:eb:
ce:9b:de:b0:fd:0a:52:f0:f3:34:68:be:5e:67:39:
af:c6:98:de:51:7e:21:6e:1c:61:82:22:af:44:16:
5e:4a:bc:0d:c8:64:fb:ab:b0:8e:63:c3:c3:fd:02:
6f:af:20:41:0d:44:57:d5:e7:6e:0c:81:d8:f0:99:
04:a6:12:0c:0a:31:05:81:9c:33:1c:ab:b1:0e:0c:
80:8b:0e:f7:74:43:1c:0b:5f:35:2c:2b:18:14:f7:
94:d3:cb:cd:68:c6:48:0b:4b:16:48:99:5e:fb:22:
bb:3d:2d:33:f0:65:7f:bc:6f:0f:0a:db:1f:87:78:
7d:da:84:bb:09:c0:10:40:09:c1:c2:a6:02:7a:9a:
61:a9:63:33:87:18:eb:b2:87:27:a3:5e:1f:3c:bc:
31:19:9d:c7:14:c3:a3:37:c4:fe:0e:3f:42:30:de:
62:cd:ad:65:6f:6a:7c:ab:59:27:ef:93:5e:e4:4d:
58:1b:19:ca:a0:93:68:d2:2d:c8:20:65:c9:58:dd:
07:24:8d:c0:70:b6:a2:e5:db:20:f7:06:5a:97:76:
08:00:b5:70:be:c1:a2:8b:82:94:ef:e3:58:71:51:
36:14:87:b0:b0:c3:60:54:36:06:58:9b:79:a2:55:
cb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:0E:E0:71:14:6F:14:0F:02:47:96:E4:03:03:0C:44:7A:4E:6B:7D
X509v3 Authority Key Identifier:
keyid:43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c5:ba:d1:9d:8b:76:eb:59:9b:1e:30:ae:22:18:e3:07:ce:
04:b4:51:2d:39:d4:55:da:ee:f5:a4:6b:fd:b9:55:03:ae:e3:
13:51:2a:4f:3b:4f:d6:67:90:1c:53:cf:5b:03:7c:89:f2:4e:
10:b4:08:29:0f:55:6a:0b:34:23:72:c5:05:fd:38:a1:a3:ff:
75:e0:08:0a:5c:ad:fa:89:ec:c3:4b:8c:35:66:e3:b2:79:f1:
61:9c:4c:cf:98:7a:2c:74:f5:c4:8d:fc:c0:0c:16:83:45:0b:
57:a1:1b:2e:e5:72:22:99:70:80:9d:b0:74:71:b0:73:e2:06:
ca:ab:2a:2b:81:c3:7e:5f:5b:e5:f1:98:fa:39:a1:7e:57:6d:
e3:54:41:35:0d:c8:10:ad:9b:c2:f3:bf:87:e8:e2:74:69:00:
1c:a4:49:bf:6d:ee:74:7d:ba:c8:43:82:1c:a4:8b:76:b2:c2:
14:e8:9d:80:f8:d7:28:94:67:d6:15:9d:c8:db:e9:7f:17:5e:
e8:9b:21:f6:0f:a3:5a:45:01:5d:f0:0b:2d:a9:16:c4:ed:91:
53:1d:a9:f8:89:bb:49:05:62:89:8f:73:12:11:49:9a:8f:b5:
47:e2:b2:65:ff:f3:06:49:37:0d:52:ca:41:d8:c9:10:e2:66:
27:75:fa:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:23:44 2026 by rpki-client