Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/ec430f-7b70-49d7-8e81-6dab2a4b2a6e/1/Q8xOC1bEDO4y1RXxPprXJSahBr4.mft
File: Q8xOC1bEDO4y1RXxPprXJSahBr4.mft (raw, json)
Hash identifier: TldhwO9fBI1jVOueruqbIbd092ZTmM7NIcUpSRj/LIU=
Subject key identifier: DA:72:8C:92:50:A5:6D:E1:76:00:C9:12:56:FB:A6:E2:31:28:0B:13
Authority key identifier: 43:CC:4E:0B:56:C4:0C:EE:32:D5:15:F1:3E:9A:D7:25:26:A1:06:BE
Certificate issuer: /CN=43cc4e0b56c40cee32d515f13e9ad72526a106be
Certificate serial: 01A0C7EAA2470BF7D209335C69E62F43B3F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8xOC1bEDO4y1RXxPprXJSahBr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/ec430f-7b70-49d7-8e81-6dab2a4b2a6e/1/Q8xOC1bEDO4y1RXxPprXJSahBr4.mft
Manifest number: 84
Signing time: Tue 22 Sep 2026 07:00:37 +0000
Manifest this update: Tue 22 Sep 2026 07:00:37 +0000
Manifest next update: Wed 23 Sep 2026 07:00:37 +0000
Files and hashes: 1: 1-avwUbYkGWAbngQUmLKtkGb0vQk.asa (hash: gdrOpGIWUMbLTjKVbOlssgFFN+ZM/6btb14hBTqgj4E=)
2: Q8xOC1bEDO4y1RXxPprXJSahBr4.crl (hash: XxTYdKbj1MP//aRsvrHRINDvyzKS9QUk8TJ1aJsTFnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/ec430f-7b70-49d7-8e81-6dab2a4b2a6e/1/Q8xOC1bEDO4y1RXxPprXJSahBr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/ec430f-7b70-49d7-8e81-6dab2a4b2a6e/1/Q8xOC1bEDO4y1RXxPprXJSahBr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8xOC1bEDO4y1RXxPprXJSahBr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ea:a2:47:0b:f7:d2:09:33:5c:69:e6:2f:43:b3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43cc4e0b56c40cee32d515f13e9ad72526a106be
Validity
Not Before: Sep 22 07:00:37 2026 GMT
Not After : Sep 23 07:00:37 2026 GMT
Subject: CN=da728c9250a56de17600c91256fba6e231280b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:78:e4:70:86:98:4c:95:d4:3d:04:10:db:60:
93:7c:ae:42:f6:bd:96:a2:79:39:3e:0c:c7:fa:a7:
9d:1b:ce:3b:02:db:ad:c1:4c:5c:87:ea:44:40:c4:
ba:4f:d4:d9:78:cd:1a:a5:26:8b:aa:42:6a:cd:a8:
2b:67:0c:c5:3c:df:f9:02:2c:c8:74:f8:e9:3b:81:
19:c9:fb:2b:ce:01:2f:6f:c1:3b:7f:e4:08:14:1a:
a6:cd:1a:d0:62:a5:43:f1:94:bf:93:eb:9e:b7:e8:
00:ba:d9:e9:3b:4f:61:92:37:6a:f3:39:05:45:10:
6d:6d:92:f4:26:e6:3f:ae:d6:e0:9d:85:15:21:42:
fc:d4:49:33:0b:9e:49:76:a6:0d:c5:c2:b5:c2:6f:
65:dc:d5:69:1e:ed:e0:d5:79:9f:b7:37:63:16:5a:
60:9b:e0:bf:b9:8a:23:fb:35:4f:03:c8:6e:b2:b8:
cb:41:19:df:97:26:73:d2:ad:59:25:ce:75:66:63:
9f:55:da:8f:26:bb:4e:29:0e:33:84:aa:a9:6c:90:
c5:9c:ce:61:38:cd:26:07:1d:07:6d:10:5a:00:21:
f8:2e:32:2f:c2:bb:5e:a4:9c:bd:0b:33:6c:e9:91:
00:b0:c9:08:84:b8:41:cc:24:4c:46:1b:a9:c2:d8:
ca:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:72:8C:92:50:A5:6D:E1:76:00:C9:12:56:FB:A6:E2:31:28:0B:13
X509v3 Authority Key Identifier:
keyid:43:CC:4E:0B:56:C4:0C:EE:32:D5:15:F1:3E:9A:D7:25:26:A1:06:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8xOC1bEDO4y1RXxPprXJSahBr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ec430f-7b70-49d7-8e81-6dab2a4b2a6e/1/Q8xOC1bEDO4y1RXxPprXJSahBr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ec430f-7b70-49d7-8e81-6dab2a4b2a6e/1/Q8xOC1bEDO4y1RXxPprXJSahBr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:c0:d3:9c:2f:59:9e:3c:93:4d:3e:94:ac:61:5c:53:02:37:
99:3b:9a:74:41:01:39:94:05:48:a1:95:f6:d0:7b:31:81:2c:
ec:8d:5d:9c:5a:2a:7d:2f:8f:4d:49:4d:8e:ad:7b:5a:7e:28:
5d:48:53:e3:df:63:87:27:1b:b7:81:be:b7:d8:cc:a6:35:e3:
c0:4b:11:7a:ec:a8:12:c7:18:97:42:15:98:f3:b2:c2:47:7a:
07:10:eb:13:aa:14:27:4c:e3:91:7f:61:26:fe:56:6d:8f:b7:
78:02:38:c0:be:63:74:66:ba:3b:e8:34:5b:83:51:e8:9c:51:
cf:83:64:5f:1e:77:15:a4:49:05:f7:52:fa:9e:94:a3:b8:ff:
11:56:3b:fe:5a:f9:88:31:91:b4:77:18:6f:fa:de:0c:91:9f:
7b:e2:bd:c6:f0:b6:c4:64:30:14:1c:fd:d0:26:e8:21:ff:7f:
0f:9d:41:4e:b7:43:7f:eb:f4:e8:f0:ed:c1:7c:03:bd:10:45:
6d:8c:ff:b6:4a:85:ed:84:f3:31:a7:59:9b:a1:c0:67:bd:d6:
04:dd:1a:4c:cb:3d:a1:c9:b1:9f:c3:80:15:8c:54:4a:07:ed:
76:aa:9c:26:45:88:99:55:8f:e3:5c:4c:fa:2d:33:15:50:5d:
14:b5:ef:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:27:20 2026 by rpki-client