Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
File: 1qVTYS2UsJGzZZshILyO-yYOfTA.mft (raw, json)
Hash identifier: R+OzjkCzZ4hYdgQU7PtZ9Unm+n7EBXZV/KzJ6RQT4cE=
Subject key identifier: 37:00:D5:62:B1:C6:5B:B0:33:1C:10:1C:47:3D:D2:59:62:72:69:8E
Authority key identifier: D6:A5:53:61:2D:94:B0:91:B3:65:9B:21:20:BC:8E:FB:26:0E:7D:30
Certificate issuer: /CN=d6a553612d94b091b3659b2120bc8efb260e7d30
Certificate serial: 01A0CA467802A24A4F45E6C98291618CFFC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
Manifest number: 033A
Signing time: Tue 22 Sep 2026 18:00:10 +0000
Manifest this update: Tue 22 Sep 2026 18:00:10 +0000
Manifest next update: Wed 23 Sep 2026 18:00:10 +0000
Files and hashes: 1: 1qVTYS2UsJGzZZshILyO-yYOfTA.crl (hash: UPkS/vQkJ8myulw9UWAyyA17sJ+9jxY1QN1GvF2JmgY=)
2: YUX5rzp00o400A0WbJALi9ABx8I.roa (hash: x86fl/4qgkCI4hFoudrfc/jIoc01pQrYzS8Cq8H366U=)
3: yMSdih1BEkH3pQ4fKRRG34haBVs.roa (hash: zQcIZwJ6Pu/eO5hnk91XHasGs0yD2RAKEuFEjFFSfEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:46:78:02:a2:4a:4f:45:e6:c9:82:91:61:8c:ff:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6a553612d94b091b3659b2120bc8efb260e7d30
Validity
Not Before: Sep 22 18:00:10 2026 GMT
Not After : Sep 23 18:00:10 2026 GMT
Subject: CN=3700d562b1c65bb0331c101c473dd2596272698e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6a:ed:f7:83:e2:0c:c0:3b:14:cd:40:ed:86:
31:c6:07:d4:37:6b:9e:5a:b1:70:2a:de:d2:29:16:
2c:b9:c7:d0:ae:ec:5c:f6:83:37:f4:08:c1:30:26:
7d:d0:2a:a3:b5:81:38:bf:4d:7a:f0:10:ae:79:4e:
40:90:a9:c9:80:f0:af:50:0b:4d:12:6b:c7:36:ff:
42:15:a9:f7:85:8e:fa:85:34:82:03:a2:ea:6b:c3:
23:fa:51:47:85:06:f5:c7:48:d2:f5:4d:83:63:3a:
e8:4a:07:08:48:87:9b:20:e6:8c:ea:32:bf:da:ee:
31:60:e9:c3:1c:64:da:d4:11:c2:c6:26:b8:ad:1f:
bf:0b:dd:26:2e:31:4c:77:73:0e:cb:ec:8a:58:84:
65:4c:6c:4b:04:db:ac:a9:7e:81:0a:d8:e0:1e:bb:
1b:de:a2:ac:9d:d1:f3:f8:6e:84:23:3e:a9:5e:13:
d7:7e:c4:c2:72:64:7a:0e:b6:82:df:98:4e:d3:8d:
08:5b:ea:99:24:91:4e:28:cd:07:02:06:5b:af:1f:
ed:b8:37:2f:27:a3:06:3e:63:97:3f:48:26:7b:4e:
26:f7:3f:18:d8:ad:3f:c3:4a:e7:0d:c6:fe:0a:d8:
f0:57:b5:86:6b:85:0f:5e:85:c0:41:db:fc:55:3c:
eb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:00:D5:62:B1:C6:5B:B0:33:1C:10:1C:47:3D:D2:59:62:72:69:8E
X509v3 Authority Key Identifier:
keyid:D6:A5:53:61:2D:94:B0:91:B3:65:9B:21:20:BC:8E:FB:26:0E:7D:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ba:63:56:d3:a1:08:6f:ff:d4:27:bf:69:16:32:81:0f:cd:
e7:9f:24:b3:d0:4e:19:a9:9b:68:72:ef:6f:7d:a9:46:60:79:
b4:de:4f:8e:fb:22:3c:68:19:10:e2:70:53:a8:dd:13:78:7b:
2a:3a:db:7e:e3:17:2b:55:71:8e:c7:0c:07:05:ad:f1:af:05:
45:02:a2:17:56:8e:5e:f6:83:2e:64:75:80:6f:92:89:af:4a:
3a:93:ca:42:d8:1c:83:31:3f:4c:42:61:9b:07:b8:5f:ed:df:
a8:3c:c7:a1:74:a7:43:ad:51:47:00:d0:f6:1f:5b:fb:fb:1e:
a8:7d:68:7a:fa:cc:08:fc:0f:e6:9e:28:d1:ef:2b:ec:ae:9f:
15:21:9b:86:0c:c0:a0:71:2f:12:6c:ec:b6:01:79:1e:ea:16:
be:1d:8a:03:44:04:cf:21:8b:5a:22:99:2d:4d:ab:b7:b0:ec:
e7:64:73:3f:eb:b5:7a:74:16:d6:43:84:7d:9a:a0:d0:37:37:
8d:40:d8:02:9a:73:33:f2:35:12:9b:58:4d:1e:64:60:3b:ff:
ad:17:b5:73:80:9d:32:8d:c0:63:2f:37:fa:3b:43:5e:f8:25:
70:11:4a:b6:1e:37:03:43:74:38:2f:d7:49:2a:b3:c7:68:ce:
cb:e5:7b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:33:47 2026 by rpki-client