Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
File: qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft (raw, json)
Hash identifier: JuNVU3SGFouYKSa/bdh95s4EeTGZp6BQ961D2HJDGtg=
Subject key identifier: B9:D2:09:F9:96:DF:83:20:52:C8:E8:13:9C:39:E8:D5:19:82:AC:AB
Authority key identifier: A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
Certificate issuer: /CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Certificate serial: 01A0DF179AB8C595D15DBA09E89B4A6C9B20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
Manifest number: 15FF
Signing time: Sat 26 Sep 2026 19:01:01 +0000
Manifest this update: Sat 26 Sep 2026 19:01:01 +0000
Manifest next update: Sun 27 Sep 2026 19:01:01 +0000
Files and hashes: 1: _GMjCgOppj-cDNqGf9sL7bV12vk.roa (hash: TsdjcA8kBAsvuIEMhSHqHIIP+sdYNNN8QiJUeKvHVXo=)
2: gCXrBFLxOw6kqjD16CuMsL6zWgE.roa (hash: v9RU6FPgMI/ClMLp92GPHhi/v35/JkjC+Xjyrv6zdv8=)
3: qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl (hash: zYR425iUHrswqBh53lnI5Lw2F2dlZHBF65Bm3LSny3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:17:9a:b8:c5:95:d1:5d:ba:09:e8:9b:4a:6c:9b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Validity
Not Before: Sep 26 19:01:01 2026 GMT
Not After : Sep 27 19:01:01 2026 GMT
Subject: CN=b9d209f996df832052c8e8139c39e8d51982acab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b1:6e:ea:bf:87:86:9f:ca:4b:42:2b:78:89:
9b:ef:93:3c:70:30:67:3b:5b:e6:b3:70:c8:26:6e:
1a:f8:0d:25:56:f0:c3:6a:e9:aa:16:6f:22:78:2c:
f5:88:a7:01:37:b1:6b:f9:60:2c:09:b6:47:82:b1:
9b:62:0d:44:0b:19:03:d5:74:82:a2:b5:2f:9c:2f:
ba:ba:3e:f4:1d:75:f7:92:01:0f:b7:bd:41:e5:eb:
d9:f2:7d:d9:7b:30:e4:6a:ab:e5:e1:cf:38:e8:6a:
e5:86:57:8b:40:2c:e0:e4:7a:e8:c0:4d:79:96:be:
d3:96:f7:db:82:87:a0:08:fc:97:d2:6e:a3:be:b4:
46:96:98:a0:ec:2c:07:d9:21:4f:0b:b3:b7:ea:d3:
50:4a:2c:1f:77:e2:4b:85:fc:fe:c5:8c:a0:df:6c:
15:0f:08:41:96:c8:84:d7:ba:8d:0d:de:45:20:4c:
87:0c:a3:25:45:c8:a5:cb:79:d2:02:73:69:26:d1:
0a:1c:f9:b3:fd:52:44:34:90:89:05:48:44:84:53:
6f:15:7b:41:0f:b9:b3:31:19:5e:3a:ea:cf:dd:f3:
a8:90:d0:59:c3:64:6f:c4:b2:62:53:02:0a:f5:39:
b4:84:c7:5c:cb:ae:f4:29:90:5f:d0:c4:3c:80:a8:
fe:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D2:09:F9:96:DF:83:20:52:C8:E8:13:9C:39:E8:D5:19:82:AC:AB
X509v3 Authority Key Identifier:
keyid:A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:26:21:c6:4a:d3:25:e5:24:a8:6c:72:14:d7:95:e1:0b:c8:
da:11:c6:de:37:1f:5a:a5:fe:bf:81:de:86:e0:24:36:fd:74:
2d:a0:d9:68:91:af:67:32:f3:48:1d:9c:69:3c:f2:33:7e:f2:
f9:62:7f:df:1e:25:8a:68:cc:2d:7c:8d:8f:23:3d:81:33:46:
7a:ab:50:dc:42:b2:cf:34:7d:02:cb:a9:7f:75:51:bf:32:19:
51:c4:67:6a:31:50:20:72:ec:18:3f:e7:e4:df:bc:01:c0:65:
3a:4b:2f:ef:37:76:eb:a4:5b:7d:0d:62:f8:52:d4:70:38:f4:
87:91:1e:02:df:23:9b:e2:50:63:db:bc:e7:0c:d4:35:c8:5f:
ef:1f:60:47:d3:5e:da:8d:21:f5:6e:ae:e4:73:08:eb:d1:25:
e4:60:4b:84:86:80:d2:2e:0b:63:82:aa:de:f8:ec:1e:27:2c:
cd:22:83:46:47:9b:dc:83:a5:bc:b5:97:f8:5d:34:c8:b6:e2:
55:e1:30:e3:e9:12:08:2d:e3:98:f5:53:ad:fb:1c:12:9b:63:
df:b9:ab:05:18:f7:c3:41:fe:21:40:a6:94:e5:20:f5:61:e8:
f9:ce:51:dd:81:7b:a4:86:f3:f8:82:be:42:b8:21:ce:33:c0:
64:8d:a4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:49:02 2026 by rpki-client