Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
File: qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft (raw, json)
Hash identifier: cHb1BgoSCTJLekssepNCg9BE8QJMgCL09DjHXxp1Hng=
Subject key identifier: C1:FB:09:50:5A:91:8D:15:F8:DE:91:13:F3:41:69:4A:17:9A:90:27
Authority key identifier: A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4
Certificate issuer: /CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4
Certificate serial: 01A0F4C478FF0AEC060FA723D1CD67496115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
Manifest number: 08D7
Signing time: Thu 01 Oct 2026 00:01:51 +0000
Manifest this update: Thu 01 Oct 2026 00:01:51 +0000
Manifest next update: Fri 02 Oct 2026 00:01:51 +0000
Files and hashes: 1: 4hGYV1HkQX7u-sK6NU3NKiUgMmg.roa (hash: nlgBOMwc0Z5SXyM7I/XYMmfHNrGRHRzrTdBqF8G4e24=)
2: qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl (hash: voOGAEbN/V+AHiExHFq3br7f/xsgKBX5C2ylZ+AnLmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 00:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f4:c4:78:ff:0a:ec:06:0f:a7:23:d1:cd:67:49:61:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4
Validity
Not Before: Oct 1 00:01:51 2026 GMT
Not After : Oct 2 00:01:51 2026 GMT
Subject: CN=c1fb09505a918d15f8de9113f341694a179a9027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ee:57:8b:40:20:6e:a6:88:25:58:58:e0:8f:
eb:2b:66:7f:ab:bc:a8:53:81:09:b9:ae:bc:2b:73:
aa:6c:9c:b4:7b:c7:27:c9:58:d8:f3:3d:56:2d:33:
fc:85:0f:6c:f1:fa:a7:43:a0:5a:4e:fa:11:70:e3:
05:a8:9b:c5:a4:b2:55:ee:b6:1a:55:c0:08:01:1a:
7e:68:bb:83:c8:7e:f8:7b:fc:c0:ea:8d:70:a8:84:
fd:99:b6:99:43:57:03:37:7f:c4:a1:66:bf:a7:d9:
33:94:29:c3:f2:05:96:b8:0f:04:53:d6:84:53:67:
ad:dc:6b:9d:c9:a1:09:c1:a8:9a:b1:b8:b4:ab:a1:
e5:0f:fc:8e:1e:7d:af:ca:57:45:c5:94:a6:ce:82:
c1:58:f0:44:af:be:5b:4f:cf:90:d7:75:2b:7e:1c:
58:76:bb:28:fa:be:f6:87:2f:c8:5e:70:fa:96:34:
7a:b0:6b:41:89:e1:bf:11:9a:6a:e9:e5:37:fc:6c:
01:2f:55:ea:be:8b:3d:4c:ca:ff:46:4a:21:8f:12:
2a:86:08:3b:9e:73:d3:43:51:9e:3f:8c:d2:f0:85:
64:27:57:6a:89:6a:98:f6:40:2c:17:2e:ca:36:a0:
1d:c5:69:b9:ec:a4:ae:a8:3a:59:eb:96:32:0f:5a:
03:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FB:09:50:5A:91:8D:15:F8:DE:91:13:F3:41:69:4A:17:9A:90:27
X509v3 Authority Key Identifier:
keyid:A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:35:48:2c:93:2a:4d:6a:be:bb:2e:fa:a8:be:73:1b:3f:83:
5d:e3:55:82:60:7f:d9:26:c2:c6:aa:4f:e9:8e:46:c1:92:d1:
38:93:14:a0:cb:06:ae:1b:32:cf:1d:2e:19:b5:94:0c:4d:d1:
de:53:21:f4:26:fe:2e:09:44:73:83:80:ce:8a:0c:b3:de:c2:
0c:9f:de:d3:76:1e:ed:5f:63:38:fc:e7:6f:95:d8:c8:b7:80:
11:9b:2a:0f:9a:e2:ef:fd:1c:b6:34:6f:db:2f:71:d4:af:99:
c3:12:5f:36:3b:c1:42:5c:d5:a3:2d:ae:32:89:7f:75:c3:63:
0e:ed:44:e7:c2:4f:a0:9c:6d:8b:ec:71:3d:1b:fd:d4:f7:6c:
66:24:60:e3:3d:75:66:bd:58:a5:45:92:ca:40:bc:d6:e3:27:
ea:3b:07:ec:e2:05:06:0c:77:f0:b1:e1:3e:c6:b1:58:9e:b8:
f7:b6:bd:23:c2:68:88:ca:0b:51:8b:ff:2e:32:98:eb:5e:9f:
54:05:26:e2:35:3e:f7:ae:ae:ce:83:12:aa:5f:d5:66:d2:22:
67:af:5d:0a:2e:a5:93:cf:fb:7e:d3:81:f9:14:ef:cd:6f:7f:
42:78:cc:29:92:7d:98:b4:0d:e1:91:03:d9:6e:b6:e7:7b:ae:
f5:73:0a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 12:54:20 2026 by rpki-client