Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/26c3e8-86a9-4f0c-a83f-4bdf24857211/1/q-FU0X720TcQvhRyrlfy0Datb9Q.mft
File: q-FU0X720TcQvhRyrlfy0Datb9Q.mft (raw, json)
Hash identifier: 4UTGcLYIWRsC4c1D5WR/h0kahYuOL3k2YD86p1wEA2U=
Subject key identifier: BF:C1:02:76:46:A8:BE:9E:27:E1:73:D7:0D:75:63:E7:7D:B0:AE:96
Authority key identifier: AB:E1:54:D1:7E:F6:D1:37:10:BE:14:72:AE:57:F2:D0:36:AD:6F:D4
Certificate issuer: /CN=abe154d17ef6d13710be1472ae57f2d036ad6fd4
Certificate serial: 01A0C96ABA1D3C13514A265A3DC4FEDEBC4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-FU0X720TcQvhRyrlfy0Datb9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/26c3e8-86a9-4f0c-a83f-4bdf24857211/1/q-FU0X720TcQvhRyrlfy0Datb9Q.mft
Manifest number: 0253
Signing time: Tue 22 Sep 2026 14:00:09 +0000
Manifest this update: Tue 22 Sep 2026 14:00:09 +0000
Manifest next update: Wed 23 Sep 2026 14:00:09 +0000
Files and hashes: 1: 3SqaGJh1CAZSPdm7paJ5Lxw0R-E.asa (hash: Qx2uSh9Bbe8qrzpUWt9UFlCgyrEzeWhs9geX1SlGDJI=)
2: q-FU0X720TcQvhRyrlfy0Datb9Q.crl (hash: U2gs1bglYN27cx0UB7C31zLto77ZYZJLCeUCl9Qw/RU=)
3: zF2FGxoX0ZoqBJpAdIrHjnJr748.roa (hash: Or8elDoj8qDhg577TX6Kjac9Hx8P3Z6GCnTIDEkjYE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/26c3e8-86a9-4f0c-a83f-4bdf24857211/1/q-FU0X720TcQvhRyrlfy0Datb9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/26c3e8-86a9-4f0c-a83f-4bdf24857211/1/q-FU0X720TcQvhRyrlfy0Datb9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/q-FU0X720TcQvhRyrlfy0Datb9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6a:ba:1d:3c:13:51:4a:26:5a:3d:c4:fe:de:bc:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe154d17ef6d13710be1472ae57f2d036ad6fd4
Validity
Not Before: Sep 22 14:00:09 2026 GMT
Not After : Sep 23 14:00:09 2026 GMT
Subject: CN=bfc1027646a8be9e27e173d70d7563e77db0ae96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3a:e6:c0:09:1f:a3:e8:1a:26:fc:29:52:23:
b7:04:a3:ae:36:17:b0:69:96:14:09:05:13:95:d0:
85:5e:36:e0:56:a7:55:b8:78:f0:4f:5b:ab:6f:73:
b0:56:43:ed:8b:f7:a2:fd:15:61:35:19:37:78:85:
47:8c:c8:9e:b3:bf:fa:1b:67:46:2c:d9:5e:3d:a9:
ff:5e:8b:a3:1a:e0:5f:87:bb:b2:dd:cf:f7:89:4c:
55:0d:a1:c3:65:88:85:ed:bc:9b:30:c4:11:b7:ba:
d3:69:04:03:a1:6f:2c:0c:36:1d:22:aa:c7:b7:f2:
94:4c:ae:34:c7:34:28:c7:41:43:c4:0f:f5:a5:14:
03:f6:2b:94:8f:d6:79:f9:4d:ac:b8:e8:18:15:63:
f0:13:30:b3:f1:0a:3a:3e:ab:48:ec:7a:e8:f8:89:
28:92:b9:c7:e4:57:02:c4:c3:e7:06:fd:3c:fb:32:
e0:82:fb:c0:dd:54:41:f9:b7:53:11:22:03:ca:2b:
87:8f:ca:a4:58:42:ee:d1:f7:db:e2:a6:70:a0:74:
c6:ce:90:20:1b:41:da:c3:76:9d:9b:81:13:af:64:
3c:66:41:8a:5a:96:1b:bf:eb:e8:1a:38:a9:a0:a6:
56:e7:57:46:91:b2:53:f2:c5:12:c4:e9:fb:58:b6:
c1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C1:02:76:46:A8:BE:9E:27:E1:73:D7:0D:75:63:E7:7D:B0:AE:96
X509v3 Authority Key Identifier:
keyid:AB:E1:54:D1:7E:F6:D1:37:10:BE:14:72:AE:57:F2:D0:36:AD:6F:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-FU0X720TcQvhRyrlfy0Datb9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26c3e8-86a9-4f0c-a83f-4bdf24857211/1/q-FU0X720TcQvhRyrlfy0Datb9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26c3e8-86a9-4f0c-a83f-4bdf24857211/1/q-FU0X720TcQvhRyrlfy0Datb9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:92:ba:32:ac:56:8d:0b:08:1b:73:96:2f:b9:46:a3:b5:e0:
f9:38:ba:73:8f:5c:99:4e:69:cf:56:e5:3c:8c:45:cc:6a:38:
0b:6a:8a:f2:00:6c:72:27:f7:c2:ab:4c:89:c3:82:15:99:6b:
0b:1f:f2:95:86:38:85:df:34:01:34:13:4e:a0:b8:1b:2b:74:
bf:05:37:32:5d:fb:f4:fa:21:23:54:29:f7:5b:64:7c:18:86:
88:d9:eb:61:70:1f:41:4f:4c:09:6e:78:90:2f:cf:85:c7:f2:
c3:89:d7:3b:ff:2e:aa:a0:b7:1f:d7:8e:fd:ab:8a:19:74:a3:
d7:45:1b:71:f7:1d:ea:7c:ce:97:15:b3:86:41:0e:d2:7c:a1:
bd:58:fa:94:7c:70:2d:5c:ed:76:5b:18:ba:a3:75:39:09:b9:
6a:29:47:ab:bc:9c:1b:7d:17:e8:34:ce:be:48:df:dc:b7:be:
8a:a1:8c:d6:33:03:d3:22:0e:6d:02:5a:61:89:86:03:e9:df:
09:2b:5d:97:8a:39:a1:40:6a:12:33:1c:78:b6:01:88:79:27:
27:fd:ae:38:0f:3d:7f:2a:7f:78:c1:f9:18:2c:7c:0c:3d:2e:
53:41:ed:81:5d:8c:5b:24:2a:19:fe:43:c4:be:be:e4:51:33:
0f:66:c5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:56:29 2026 by rpki-client