Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
File: Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft (raw, json)
Hash identifier: CTH8/uqwfgy9lfQZLCDj+b3ZefOtOwU4jV3TaIrLNgU=
Subject key identifier: 93:B0:DF:E2:CD:DC:A3:8A:EA:2A:27:B9:6D:AF:FD:F1:DB:B2:79:82
Authority key identifier: 43:72:4E:61:E3:BA:2F:94:66:59:17:33:9E:6D:AC:2B:68:0A:18:CF
Certificate issuer: /CN=43724e61e3ba2f94665917339e6dac2b680a18cf
Certificate serial: 01A13C6ED2029A59774AF54B5636374EC4FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
Manifest number: 04D4
Signing time: Wed 14 Oct 2026 22:00:58 +0000
Manifest this update: Wed 14 Oct 2026 22:00:58 +0000
Manifest next update: Thu 15 Oct 2026 22:00:58 +0000
Files and hashes: 1: 1FnTssY12YHbRtY_nsWuk0wHwHY.roa (hash: Wp9yiHSm5oosC+1oWAnqkh1+AZR6IesD358xtq9/l6c=)
2: Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl (hash: FjTMirLmuDfNQK1ShvB6moi1sJa1EYAhjW408P7nVEI=)
3: jGh-wNW6Bb8Ek-tElbdvocTw07w.roa (hash: U9B8vDsky1QCNLRt1e+ai6h13YxOH7cX6zl+1cv2MFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:6e:d2:02:9a:59:77:4a:f5:4b:56:36:37:4e:c4:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43724e61e3ba2f94665917339e6dac2b680a18cf
Validity
Not Before: Oct 14 22:00:58 2026 GMT
Not After : Oct 15 22:00:58 2026 GMT
Subject: CN=93b0dfe2cddca38aea2a27b96daffdf1dbb27982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a9:97:7c:90:f6:bf:ca:c3:bf:cb:f1:f5:76:
4d:47:02:02:f6:9a:4d:96:51:9b:95:13:3d:05:07:
e5:ae:2f:e1:45:a0:e6:28:68:c0:52:da:9f:0d:ce:
45:cc:d8:81:b7:5f:05:b1:8c:11:00:6b:51:d2:5c:
6a:ee:41:5c:b8:e1:c0:a3:6d:0d:f1:05:97:d2:ce:
48:f7:f7:3a:b1:26:0f:09:14:ef:ce:17:39:6e:62:
aa:04:8e:03:5a:ee:dd:c7:86:d9:80:e7:93:12:aa:
33:79:b8:8f:25:6a:32:35:74:cf:04:8a:6f:f1:79:
fb:4d:70:db:5f:85:00:01:6e:60:5b:3c:8d:e8:e9:
90:0a:06:82:83:3c:86:62:c7:62:b1:93:9a:74:6f:
8d:56:21:ef:ae:fb:83:68:d6:60:2d:b0:9c:44:2b:
03:fd:3b:23:b1:4a:d9:0f:32:7f:f1:bf:97:60:82:
fa:c5:0c:3a:48:f0:24:6b:c2:c0:b1:c0:3b:4f:87:
83:5c:c5:cf:21:78:dd:df:bd:30:9d:4f:28:72:4a:
c9:8c:05:6e:bc:99:24:3c:c4:72:29:a0:b9:92:d5:
39:21:be:c4:5d:de:89:ae:a8:4f:8f:7b:15:48:46:
6d:0e:e4:59:29:9b:ae:1a:0c:bc:66:8b:69:f4:8b:
fc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B0:DF:E2:CD:DC:A3:8A:EA:2A:27:B9:6D:AF:FD:F1:DB:B2:79:82
X509v3 Authority Key Identifier:
keyid:43:72:4E:61:E3:BA:2F:94:66:59:17:33:9E:6D:AC:2B:68:0A:18:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:52:dd:1b:8e:de:8d:26:fb:ab:6b:6b:be:de:0c:6c:d1:c2:
66:10:1e:b0:a5:02:7c:d4:c8:eb:b8:55:f7:8e:46:b3:34:78:
4b:f3:77:27:cc:fd:eb:54:54:86:41:b5:b5:12:34:a8:f0:00:
fd:b2:1b:f8:ca:c3:2a:5f:a8:2a:48:9c:50:ca:cb:5f:a1:0c:
a1:ca:d3:ae:1d:df:60:7d:b7:d6:5c:9d:fc:e3:08:36:94:ea:
51:8b:08:78:85:72:40:d8:41:c9:8e:2f:c0:e1:df:db:c0:2a:
52:d3:94:27:36:4e:18:97:57:3e:71:13:e5:a7:d1:e4:14:58:
2f:62:16:f8:bd:a7:ec:f8:91:21:0d:09:07:d4:9d:b1:51:35:
32:a3:d4:12:a0:e8:3c:d6:39:f5:b7:76:6b:8b:21:b4:31:cf:
19:58:f9:f9:34:45:38:a9:12:a9:52:29:25:70:65:7e:ad:ca:
8a:af:34:47:6d:e7:3c:6c:2d:99:68:e6:c2:00:03:05:d6:7f:
d0:00:71:b9:53:ff:16:01:7d:ad:2b:86:e9:84:49:ae:8b:de:
4e:47:46:89:76:ea:72:69:01:ef:74:d9:29:da:b4:44:37:86:
5f:50:f5:2d:31:b1:c6:4f:c3:5f:d6:9a:ff:9f:33:5b:33:ff:
a4:f7:f7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 04:02:42 2026 by rpki-client