Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/Q46TTR1OiyAupSfF3ZRC0KJ25xg.mft
File: Q46TTR1OiyAupSfF3ZRC0KJ25xg.mft (raw, json)
Hash identifier: 4OH8XNTMgatMx65V//nzlAKBQOH6LAT9r8Jl4vT6pJQ=
Subject key identifier: F4:6D:4E:A0:22:BF:1D:47:40:63:4D:91:77:16:19:BA:6F:18:E0:A0
Authority key identifier: 43:8E:93:4D:1D:4E:8B:20:2E:A5:27:C5:DD:94:42:D0:A2:76:E7:18
Certificate issuer: /CN=438e934d1d4e8b202ea527c5dd9442d0a276e718
Certificate serial: 01A0DD976513F1A4DC8262C81E291B58CB29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q46TTR1OiyAupSfF3ZRC0KJ25xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/Q46TTR1OiyAupSfF3ZRC0KJ25xg.mft
Manifest number: EC
Signing time: Sat 26 Sep 2026 12:01:21 +0000
Manifest this update: Sat 26 Sep 2026 12:01:21 +0000
Manifest next update: Sun 27 Sep 2026 12:01:21 +0000
Files and hashes: 1: HuS9HEQnmgwkuk6nNfxYJWoTZfg.roa (hash: Gax45SA31eyvFfTp8hHtUBasQUGl4kGyHCARRtiz6pQ=)
2: Q46TTR1OiyAupSfF3ZRC0KJ25xg.crl (hash: xI1LYA2Tqqdh4jbIhcodsqkhxb2pAUamqLKTPHEgxr8=)
3: xBKM8I38qGeVMeob4yWir2gnqCk.roa (hash: KcgLf5khcgwTitCwhZW6SThRiWSlxfBJuDkexFoQ3hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/Q46TTR1OiyAupSfF3ZRC0KJ25xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/Q46TTR1OiyAupSfF3ZRC0KJ25xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q46TTR1OiyAupSfF3ZRC0KJ25xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:65:13:f1:a4:dc:82:62:c8:1e:29:1b:58:cb:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=438e934d1d4e8b202ea527c5dd9442d0a276e718
Validity
Not Before: Sep 26 12:01:21 2026 GMT
Not After : Sep 27 12:01:21 2026 GMT
Subject: CN=f46d4ea022bf1d4740634d91771619ba6f18e0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:da:87:f4:24:95:09:07:f0:7a:39:d3:94:1d:
27:a9:51:ee:e7:5b:98:91:f1:4f:71:25:c8:49:77:
b2:e4:88:8e:15:1a:71:63:81:64:44:b4:22:31:0c:
49:80:fb:69:1b:13:d0:09:f2:36:3a:bc:8c:1d:3e:
3c:41:8d:d9:7f:04:08:01:95:70:5e:cd:71:00:39:
f6:0f:de:82:c0:5f:68:99:1b:74:bd:76:00:bf:ce:
28:f1:4a:d7:62:03:27:a9:6f:b2:95:11:4a:04:7a:
98:aa:d3:1d:1d:73:46:29:2d:6c:4b:ec:ef:ef:03:
fd:6e:39:01:ee:31:59:23:4e:95:d6:7b:07:32:4f:
c9:89:4c:5c:4f:38:f8:64:a5:47:a1:b8:c4:43:aa:
3e:10:8e:28:04:67:d9:3e:af:b7:ae:44:94:54:fa:
49:ce:66:9b:3f:98:1c:4f:d9:73:ec:5a:83:63:ae:
dc:f3:6b:ee:57:53:a8:19:47:0e:ed:7d:44:33:d4:
18:99:1c:54:a5:f5:4d:40:e7:0d:b8:4d:9f:ec:11:
1c:d1:3d:36:4f:ba:e0:04:c7:53:2d:29:c3:bf:ea:
1e:d6:ac:68:13:97:99:95:c0:99:cc:3a:7b:ae:4c:
ca:9a:a9:0e:2b:13:8f:bc:2f:f4:97:c9:9f:52:8b:
31:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:6D:4E:A0:22:BF:1D:47:40:63:4D:91:77:16:19:BA:6F:18:E0:A0
X509v3 Authority Key Identifier:
keyid:43:8E:93:4D:1D:4E:8B:20:2E:A5:27:C5:DD:94:42:D0:A2:76:E7:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q46TTR1OiyAupSfF3ZRC0KJ25xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/Q46TTR1OiyAupSfF3ZRC0KJ25xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/Q46TTR1OiyAupSfF3ZRC0KJ25xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:8a:f9:69:cf:1e:e2:89:2f:3a:36:87:88:d0:50:94:6a:2c:
d8:48:84:e9:f7:b5:28:b9:b8:3e:5b:2a:2d:11:11:68:14:de:
ff:58:79:5a:37:e7:4d:2e:30:f0:75:12:0b:5e:31:9e:ec:ab:
d4:8e:97:79:1c:05:6e:e8:e3:0f:c1:40:17:c2:b4:c5:1d:51:
87:db:0c:d0:b3:a7:c4:d5:4a:8e:49:67:b2:1a:e6:32:84:40:
6e:aa:82:8d:44:9b:5a:7a:66:98:c4:b2:43:f1:11:fe:94:48:
c9:9c:84:c0:86:2e:0e:f7:40:c2:10:39:8d:a6:a7:34:57:7b:
cc:6e:62:e5:14:b0:89:fb:83:6b:50:b7:8e:b1:15:14:ac:89:
36:56:f3:7c:c6:73:b2:dc:25:60:58:41:d8:ee:06:ef:6a:8e:
0b:99:58:bf:d7:9e:45:9a:9c:bb:4c:2a:6b:27:b6:e7:f4:c6:
53:a6:97:e6:11:85:87:28:39:b8:c9:11:0b:62:86:3e:97:4f:
ff:42:2d:8b:d6:21:bc:4a:81:41:f2:aa:ba:4b:98:84:b6:16:
00:a8:21:42:81:67:30:2a:12:bb:73:67:4a:06:c2:e2:1d:44:
bc:a2:87:e2:99:74:d1:9a:cb:eb:fc:3f:bd:29:4b:5b:42:12:
6e:e3:fd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 19:44:21 2026 by rpki-client