Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/2b56f9-eaed-486b-975e-e0346b188163/1/qBkQNvLgQ03c2KZOC6dNSBe2YCg.mft
File: qBkQNvLgQ03c2KZOC6dNSBe2YCg.mft (raw, json)
Hash identifier: sX+B0g4pL1RTefjFXjm16flqRA7+3t3zeCI5cuiTXaQ=
Subject key identifier: DB:EB:6C:0F:18:09:F3:CA:2C:0C:D3:03:B0:EE:37:39:8E:CE:F4:CD
Authority key identifier: A8:19:10:36:F2:E0:43:4D:DC:D8:A6:4E:0B:A7:4D:48:17:B6:60:28
Certificate issuer: /CN=a8191036f2e0434ddcd8a64e0ba74d4817b66028
Certificate serial: 01A0D124A889645C64BB3EB526DCB1B51B0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBkQNvLgQ03c2KZOC6dNSBe2YCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/2b56f9-eaed-486b-975e-e0346b188163/1/qBkQNvLgQ03c2KZOC6dNSBe2YCg.mft
Manifest number: 04
Signing time: Thu 24 Sep 2026 02:00:35 +0000
Manifest this update: Thu 24 Sep 2026 02:00:35 +0000
Manifest next update: Fri 25 Sep 2026 02:00:35 +0000
Files and hashes: 1: H37_rL6n9HixiqvG1uW2uEiLCE4.roa (hash: dkSDWKUse13+36/q9LeseO4+uvLBizV7Qz1e7pf72kc=)
2: qBkQNvLgQ03c2KZOC6dNSBe2YCg.crl (hash: FmE5EuYWFpObCanbGP7kn70YwpEpFRvMIkSLiavlZrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/2b56f9-eaed-486b-975e-e0346b188163/1/qBkQNvLgQ03c2KZOC6dNSBe2YCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/2b56f9-eaed-486b-975e-e0346b188163/1/qBkQNvLgQ03c2KZOC6dNSBe2YCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBkQNvLgQ03c2KZOC6dNSBe2YCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:a8:89:64:5c:64:bb:3e:b5:26:dc:b1:b5:1b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8191036f2e0434ddcd8a64e0ba74d4817b66028
Validity
Not Before: Sep 24 02:00:35 2026 GMT
Not After : Sep 25 02:00:35 2026 GMT
Subject: CN=dbeb6c0f1809f3ca2c0cd303b0ee37398ecef4cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2a:ad:c0:96:c2:85:74:48:aa:5c:10:e1:09:
f7:d5:89:3b:ad:39:a1:38:62:0d:55:09:69:77:0f:
22:cf:f1:61:8d:5e:a0:c2:88:b1:34:3d:4a:f4:a9:
03:7b:60:92:0b:5b:8b:38:4f:55:2b:b3:dc:b5:e4:
dc:6c:ed:5c:95:ba:cb:3f:bd:de:5f:a3:99:8b:59:
b1:56:cc:50:66:e2:ab:2d:05:c4:f9:16:73:9b:c7:
a3:06:f3:97:48:8f:80:48:aa:d5:94:a9:6f:ae:b8:
f1:2f:a7:6f:7c:38:9d:8e:2c:e5:df:48:d1:67:61:
99:04:b9:3f:0c:b8:94:00:03:10:f4:dc:63:34:0f:
1d:d8:56:1b:28:fd:b6:7e:7d:e4:b5:e8:22:b1:76:
6a:71:34:53:36:c5:30:bf:a3:31:8f:55:c1:30:20:
bb:02:93:c1:59:9f:37:c5:df:a8:66:cf:5f:32:40:
8d:af:65:3c:36:4a:36:86:bf:26:5f:42:64:74:3a:
ab:cf:9d:4c:c7:42:4f:06:f6:2c:bd:8e:dd:47:3f:
35:73:8f:7d:ef:d7:28:e0:e3:e2:e0:3a:dc:e7:68:
05:27:46:1b:14:36:d4:80:47:eb:5e:88:27:ca:22:
d5:8e:be:91:8b:7c:b8:7d:6a:a9:8e:64:bc:2f:9b:
4e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:EB:6C:0F:18:09:F3:CA:2C:0C:D3:03:B0:EE:37:39:8E:CE:F4:CD
X509v3 Authority Key Identifier:
keyid:A8:19:10:36:F2:E0:43:4D:DC:D8:A6:4E:0B:A7:4D:48:17:B6:60:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBkQNvLgQ03c2KZOC6dNSBe2YCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/2b56f9-eaed-486b-975e-e0346b188163/1/qBkQNvLgQ03c2KZOC6dNSBe2YCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/2b56f9-eaed-486b-975e-e0346b188163/1/qBkQNvLgQ03c2KZOC6dNSBe2YCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:92:c4:66:c2:a0:39:e4:b0:a6:7a:c7:92:fa:06:fd:ea:75:
0f:28:f8:06:25:3f:4c:38:b6:0b:71:3e:ae:1e:ec:59:d1:b7:
7a:0d:f2:76:8b:86:b7:c6:0b:54:59:2d:b7:38:78:81:6b:e2:
94:c1:5c:3c:14:ad:42:1b:db:0c:43:2d:0b:6e:29:b6:e1:9b:
c1:19:b9:2c:e2:9e:85:42:39:3b:31:bd:83:64:1e:3f:91:ee:
cf:a1:9b:15:25:19:3e:f8:e8:3f:1b:07:45:53:c5:db:5e:6e:
50:f9:aa:fd:f5:30:22:aa:33:10:18:97:21:16:47:a7:f4:b8:
5c:ad:1a:aa:af:b2:89:d8:bc:17:ce:ce:55:6c:ac:3c:3d:7c:
52:09:29:3a:eb:95:22:30:96:c3:13:67:dc:05:89:22:63:4f:
30:20:b1:6f:1e:ad:0c:ae:c7:9d:36:eb:e5:5c:ed:ed:e3:be:
6e:d2:ec:ec:7f:9a:aa:53:2e:49:9d:ce:24:c6:74:12:79:fc:
77:55:0c:ae:bd:f0:cd:40:53:4c:88:99:d0:ad:05:15:64:c7:
a1:8c:95:55:79:c2:83:cb:f7:fa:45:35:7a:7a:9a:68:94:60:
cf:9f:c6:42:36:bc:7b:7a:0f:31:8b:60:15:77:9d:9a:fd:b7:
60:23:1e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:34:49 2026 by rpki-client