
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/qFERp16dOcxDDqhbjSkgYNnop8I.mft
File: qFERp16dOcxDDqhbjSkgYNnop8I.mft (raw, json)
Hash identifier: mzVZ/kXkwIHWOeIMA2GSJfC4BtJfPQFI8E1dQImLAfQ=
Subject key identifier: 9A:05:9F:40:B4:8F:05:5B:18:15:D5:3C:28:FC:03:6A:82:CD:BA:26
Authority key identifier: A8:51:11:A7:5E:9D:39:CC:43:0E:A8:5B:8D:29:20:60:D9:E8:A7:C2
Certificate issuer: /CN=a85111a75e9d39cc430ea85b8d292060d9e8a7c2
Certificate serial: 01A0C444D3F4ACF5A7E82BC989E1FFB3D697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFERp16dOcxDDqhbjSkgYNnop8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/qFERp16dOcxDDqhbjSkgYNnop8I.mft
Manifest number: 010F
Signing time: Mon 21 Sep 2026 14:00:40 +0000
Manifest this update: Mon 21 Sep 2026 14:00:40 +0000
Manifest next update: Tue 22 Sep 2026 14:00:40 +0000
Files and hashes: 1: h6c3rKlsCh2Ta6ieH4wNZunbZ_c.asa (hash: wHSgIizYN0GV/TTAR4CRTTTf21VDW35ePjsqiIQojnU=)
2: qFERp16dOcxDDqhbjSkgYNnop8I.crl (hash: m4+6qVfghC0r57coOoNgRU9eytDLWbOKfyOGOmo4DJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/qFERp16dOcxDDqhbjSkgYNnop8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/qFERp16dOcxDDqhbjSkgYNnop8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFERp16dOcxDDqhbjSkgYNnop8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:d3:f4:ac:f5:a7:e8:2b:c9:89:e1:ff:b3:d6:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85111a75e9d39cc430ea85b8d292060d9e8a7c2
Validity
Not Before: Sep 21 14:00:40 2026 GMT
Not After : Sep 22 14:00:40 2026 GMT
Subject: CN=9a059f40b48f055b1815d53c28fc036a82cdba26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0b:07:f2:91:13:12:01:cf:d8:ed:0c:d6:dd:
3a:14:19:3e:36:4f:a7:4a:4d:60:42:ea:e1:a8:af:
0b:c4:fc:9e:c3:54:a2:7c:47:0c:9b:82:e0:7a:68:
10:87:85:26:3f:e0:3d:48:e6:a2:15:39:fc:39:9e:
ee:db:c4:be:fc:be:78:9f:a0:9b:13:12:4d:b7:41:
05:0e:c3:38:70:46:50:70:32:38:b1:68:e4:0f:3b:
77:d0:b9:65:22:0a:90:b0:cf:a7:9c:6f:c7:8f:da:
94:ee:d6:39:3c:ea:db:b8:48:38:b7:09:fd:1e:59:
9d:12:5f:19:2f:a4:08:47:39:86:5f:12:af:8a:a9:
33:b2:68:eb:e1:2b:14:0c:30:86:de:22:39:fb:6b:
d4:3a:dc:b7:52:6b:0e:ab:d8:a9:d4:b8:1b:b9:b1:
28:2b:1b:6d:60:b0:b8:4c:89:5c:dd:11:f3:08:a5:
d6:88:0e:95:5b:4b:9c:6b:95:fb:b4:9a:32:ad:11:
ad:1f:54:da:3d:1d:80:15:8d:20:12:f5:5f:aa:ba:
8d:c0:34:26:ae:3a:e8:1e:ce:f1:70:c8:15:0a:e3:
4e:ad:ae:af:90:6b:2e:f0:c8:69:85:49:33:62:13:
b6:e3:69:48:92:0f:8f:04:ec:38:68:0d:26:b8:44:
de:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:05:9F:40:B4:8F:05:5B:18:15:D5:3C:28:FC:03:6A:82:CD:BA:26
X509v3 Authority Key Identifier:
keyid:A8:51:11:A7:5E:9D:39:CC:43:0E:A8:5B:8D:29:20:60:D9:E8:A7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFERp16dOcxDDqhbjSkgYNnop8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/qFERp16dOcxDDqhbjSkgYNnop8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/qFERp16dOcxDDqhbjSkgYNnop8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:58:cd:18:17:e5:b8:17:eb:e0:ce:1b:da:18:86:0a:27:3a:
c5:0c:15:6d:96:2a:21:54:d6:94:7d:7f:ed:b2:d7:ea:2f:bd:
16:5f:ed:5b:88:35:00:22:67:0f:60:27:2c:88:09:22:23:df:
e1:5e:55:73:eb:d1:15:15:85:d2:ce:2e:2d:44:37:c2:0f:2e:
4a:25:a0:09:ce:78:4e:64:8c:77:fd:e8:76:5e:31:24:ee:9e:
45:88:cf:e0:75:55:c5:32:a5:08:8f:e1:9e:71:a0:5c:0a:7e:
6d:4b:a2:7b:76:3d:df:d1:35:ec:9f:58:83:cb:31:ce:78:49:
c4:e6:bf:8b:78:cb:e1:f6:26:e1:91:ee:b0:43:82:38:c0:2d:
49:0a:68:86:fd:a8:9e:e1:3c:33:f4:8d:25:5b:08:07:b5:6e:
59:73:4f:c2:4b:3a:bc:92:04:e2:ad:8b:9f:fd:5f:27:3e:1f:
a8:f1:4f:c8:ef:95:8e:38:46:47:b7:11:73:b7:85:a9:4f:c2:
6b:cc:56:39:78:73:13:bf:50:2a:ce:0b:c4:2b:a4:72:c9:e3:
09:c9:6b:f0:92:74:1c:82:29:0b:56:08:8f:2f:93:4a:1c:02:
5d:1f:93:09:ad:c9:33:ba:20:d3:f9:9a:fb:bf:83:08:d1:d6:
4e:75:d6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:03:36 2026 by rpki-client