Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.mft
File: qERYOVOgK8amaZ3pJ89FcAfwVSg.mft (raw, json)
Hash identifier: WfX9PAYT9AyMBH0WSTY1pMu35+l41BzIlpuzfIxxQKs=
Subject key identifier: F4:47:B0:0E:6C:FF:CC:82:6B:4C:05:C6:62:F9:43:1F:82:3A:52:1D
Authority key identifier: A8:44:58:39:53:A0:2B:C6:A6:69:9D:E9:27:CF:45:70:07:F0:55:28
Certificate issuer: /CN=a844583953a02bc6a6699de927cf457007f05528
Certificate serial: 01A0E853339ED3117E101A9444B06501D86D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qERYOVOgK8amaZ3pJ89FcAfwVSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.mft
Manifest number: 030F
Signing time: Mon 28 Sep 2026 14:02:41 +0000
Manifest this update: Mon 28 Sep 2026 14:02:41 +0000
Manifest next update: Tue 29 Sep 2026 14:02:41 +0000
Files and hashes: 1: bzuHav72txau2Blj1JcbQR-3zHA.roa (hash: TCvNISq9G9+8+m7g0vleezt4nSYPh9D8kXCKj2MC7tQ=)
2: qERYOVOgK8amaZ3pJ89FcAfwVSg.crl (hash: nRpIzemAxafiv+c9f4DgNqDWYen3KrrRRfhzmyBZKIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qERYOVOgK8amaZ3pJ89FcAfwVSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:53:33:9e:d3:11:7e:10:1a:94:44:b0:65:01:d8:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a844583953a02bc6a6699de927cf457007f05528
Validity
Not Before: Sep 28 14:02:41 2026 GMT
Not After : Sep 29 14:02:41 2026 GMT
Subject: CN=f447b00e6cffcc826b4c05c662f9431f823a521d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8a:02:89:dc:9f:b6:f2:3f:a7:df:78:e4:0e:
02:4a:0e:2a:35:3c:14:3b:7d:39:20:2c:44:c8:e0:
cd:17:66:ee:3d:22:e1:3e:13:de:cf:d8:c9:7b:9c:
8a:f1:36:d3:45:84:a4:f8:59:11:07:00:0c:44:b9:
a2:d8:ff:1a:ef:2f:f1:6c:fc:9c:03:a9:ab:41:2e:
50:63:a3:b9:32:af:77:d4:90:41:31:26:d8:27:da:
4a:1f:02:d6:b6:6b:50:4c:18:22:a8:7d:de:41:d0:
18:59:ab:e8:21:d2:fe:43:28:94:b0:83:63:84:b2:
b7:68:1a:bc:e0:20:c7:28:c0:61:e1:e2:f0:5a:2a:
25:d3:2c:5f:da:ca:c8:c0:d9:3f:d3:ce:c6:ed:19:
93:3d:45:ce:cd:69:77:10:9f:2e:45:bb:7a:b3:1a:
f6:1f:eb:32:dc:41:40:11:df:d5:ab:85:6b:42:61:
ab:40:79:c8:83:86:3d:96:f0:bb:40:7f:d0:71:ef:
01:0b:39:55:95:0a:3b:d5:f1:b4:02:d8:70:ed:3d:
ac:cf:7c:03:93:1b:b4:1e:2d:3f:8e:db:f3:db:85:
d5:02:72:7b:87:c3:38:21:83:d0:88:a3:3e:70:99:
8a:46:db:16:e0:cc:bb:89:05:4b:02:29:e0:ea:52:
bd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:47:B0:0E:6C:FF:CC:82:6B:4C:05:C6:62:F9:43:1F:82:3A:52:1D
X509v3 Authority Key Identifier:
keyid:A8:44:58:39:53:A0:2B:C6:A6:69:9D:E9:27:CF:45:70:07:F0:55:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qERYOVOgK8amaZ3pJ89FcAfwVSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:12:89:57:f3:f9:f1:54:b6:5c:d1:7f:dc:38:80:66:36:e3:
d9:fd:a1:a7:15:7a:46:d1:70:fe:ef:8d:3d:83:fd:76:a1:69:
0a:e6:7d:fd:95:9b:70:f7:47:13:fd:23:fa:1f:fd:c2:d2:ec:
2f:06:3d:64:4e:c7:c5:ad:64:f8:e1:0b:a5:93:98:35:e2:e4:
c1:cc:e4:5e:13:d1:2d:74:f9:19:04:8d:c8:64:b1:79:fc:93:
eb:81:24:c8:00:02:e5:e8:19:1f:18:39:09:4b:f2:71:ca:42:
3f:15:95:64:d4:cd:21:e5:11:14:a5:f0:88:af:bc:bf:63:d0:
59:3a:c6:a5:c9:fa:d9:c4:67:3f:4d:b4:6d:a5:db:9f:15:d5:
d5:f9:e0:06:61:14:77:30:39:31:0d:14:60:ad:2d:c6:69:4c:
ab:a6:7b:a7:8c:04:09:f8:04:14:2b:a2:3b:11:48:ea:79:07:
e3:e7:6a:f1:d1:f0:2d:31:19:c3:88:db:02:0b:d4:10:7d:46:
e9:b8:87:06:d5:4d:eb:7f:d2:6d:5a:f3:16:d2:9e:57:12:be:
dd:b4:4d:b1:02:24:aa:6d:64:87:85:b0:04:e7:5d:29:e5:d7:
55:65:20:b8:fe:bf:28:69:67:7b:38:5d:5d:c8:ac:0d:bc:75:
46:3d:ec:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:14:24 2026 by rpki-client