Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
File: qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft (raw, json)
Hash identifier: 4cHHjx3AJLtE2wM+Le6KJ00SuXBzzMFO0Y6y0uHHKq4=
Subject key identifier: 47:2E:0E:92:11:8A:75:15:45:29:77:D6:46:0C:77:BD:D1:96:AA:A0
Authority key identifier: A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
Certificate issuer: /CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Certificate serial: 01A0D49440F3ECAF8D6FAFF2E3E6A568905A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
Manifest number: 1103
Signing time: Thu 24 Sep 2026 18:01:20 +0000
Manifest this update: Thu 24 Sep 2026 18:01:20 +0000
Manifest next update: Fri 25 Sep 2026 18:01:20 +0000
Files and hashes: 1: bhlKdXGmWCr9DFWjhc8P0wglZIc.roa (hash: jECjuduWw41GZ7hEmsgN93fP6SWVQcwry3yoxhpzbrA=)
2: qKMToe_MWgm-y06gJ6u3-V2krkc.roa (hash: IhBtU1yl4hzFItLKbqNgqy5ZA2HU2qEodxBl6f6yCww=)
3: qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl (hash: HDB5uNw50VwOzVuGQ+XnRyg6b/aTXe1hMCyTAXYJGtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:40:f3:ec:af:8d:6f:af:f2:e3:e6:a5:68:90:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Validity
Not Before: Sep 24 18:01:20 2026 GMT
Not After : Sep 25 18:01:20 2026 GMT
Subject: CN=472e0e92118a7515452977d6460c77bdd196aaa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:11:d4:f1:79:53:57:12:af:c8:2f:b4:f5:cd:
6a:fd:99:a4:d3:4d:08:3f:d5:4c:89:3d:91:d5:6d:
f4:7c:e0:60:23:8b:cf:2b:c8:c9:b5:70:df:08:b7:
e6:69:a0:66:52:88:f8:80:17:66:fb:f9:b3:f6:4f:
69:b1:0a:21:6d:8a:42:17:ac:77:df:40:34:9c:d2:
80:2d:b1:49:4d:ed:70:73:4b:38:69:bc:ef:42:a2:
ac:67:8a:73:88:99:26:3b:fb:ca:a0:38:a2:4d:b6:
a7:5b:2f:98:fa:45:cf:d6:d8:1f:49:48:e2:36:fc:
2c:30:f8:ef:3f:c8:3c:25:43:1e:5e:70:db:68:73:
78:0c:1e:e3:30:3b:b1:92:3f:f8:cf:84:68:9c:e0:
c0:ed:f2:96:20:58:6c:39:ae:59:65:a3:6c:f7:a3:
3c:f7:bf:fd:ad:16:81:a6:38:47:36:e8:55:24:84:
8e:90:21:ab:7c:54:3e:ee:a8:4f:d6:ac:ef:10:78:
10:37:69:e1:06:fd:d1:8e:9f:62:22:34:fd:5c:46:
4f:12:68:7c:da:89:f7:85:d1:bd:53:8e:cc:3f:37:
28:7b:3c:f1:ff:2d:1b:f3:64:af:29:f4:70:41:05:
ee:0f:05:ad:91:5d:f6:7b:5f:25:a3:e7:4e:90:c8:
05:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2E:0E:92:11:8A:75:15:45:29:77:D6:46:0C:77:BD:D1:96:AA:A0
X509v3 Authority Key Identifier:
keyid:A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:e0:c5:e4:80:00:93:9d:b3:01:64:a4:ac:78:e0:77:bd:57:
12:c5:a2:65:36:22:08:27:48:fc:f5:7c:0c:86:ca:cb:fd:fe:
54:2e:58:d8:95:c6:94:bb:b7:23:dc:8c:72:1f:f4:c3:42:5e:
ea:be:11:de:1f:01:4e:51:e1:d7:6b:90:76:72:ad:58:08:63:
14:fd:8c:46:02:51:70:34:1b:ce:96:fb:62:92:55:75:c2:80:
2a:48:2a:26:ac:4f:c7:b8:bb:79:f9:02:fd:c4:03:e7:58:a3:
f4:56:74:ce:dd:10:0d:da:26:a3:6e:f6:b1:be:c0:f2:03:75:
db:aa:f9:f6:f6:24:d8:8e:b5:e3:71:37:2f:f7:49:48:17:7c:
b2:e7:59:48:6e:a4:65:c5:6d:2d:07:ce:7a:46:8c:fc:43:07:
d9:3f:42:e7:65:cf:97:99:eb:26:06:ee:5a:bc:1c:dd:b7:0a:
44:e0:c3:4f:60:1a:31:68:f4:5b:31:05:6e:ac:b9:96:57:7c:
15:a5:ca:3e:35:28:1d:43:c4:0a:8a:86:81:0e:06:6b:5a:37:
de:8b:17:8c:74:6c:db:cc:be:0b:38:a7:d3:c1:ca:c3:0f:0a:
30:ef:c3:ce:1e:d4:cb:48:d5:2a:74:a3:23:d1:4b:29:07:d7:
69:2b:b9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:56:38 2026 by rpki-client