
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
File: qTnMFiHuMBCumOEnvSVKeDP9KCc.mft (raw, json)
Hash identifier: gdBcp5IpLyWos5zEY2jYAf8FpD3Y52uSg1+N+b2G3fM=
Subject key identifier: 6F:D8:86:D7:5F:5F:DA:4E:2F:6D:6D:D4:8D:D5:69:15:52:36:40:F1
Authority key identifier: A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
Certificate issuer: /CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Certificate serial: 01A0D0EE33BC9755009D465C462ED622DF92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
Manifest number: 1389
Signing time: Thu 24 Sep 2026 01:01:06 +0000
Manifest this update: Thu 24 Sep 2026 01:01:06 +0000
Manifest next update: Fri 25 Sep 2026 01:01:06 +0000
Files and hashes: 1: 2laheRZxUjH9nDxMrHlm80h7z5Q.roa (hash: iosXrqOVeIIOelMUJUYMuylT0ggApUkiu1y8GJhCfso=)
2: NotYCgUHoY2zetpjr5kSm9qBY_k.roa (hash: oJRB8iWYyMlRGM13QOWyb/5+9ImlksyZccjTnLMZZYE=)
3: YOBJXpEHAMny3YxgbXhGFE9H1Dc.roa (hash: ubjGl6NH+8cXpUPkiXxOW4R61YalXFLiA+y8Gn0QEic=)
4: qTnMFiHuMBCumOEnvSVKeDP9KCc.crl (hash: rH4sFev5Tn1bEM8DTKh56kZYhOO8dKIA2GsTL9NWEKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ee:33:bc:97:55:00:9d:46:5c:46:2e:d6:22:df:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Validity
Not Before: Sep 24 01:01:06 2026 GMT
Not After : Sep 25 01:01:06 2026 GMT
Subject: CN=6fd886d75f5fda4e2f6d6dd48dd56915523640f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c8:a5:61:2b:df:85:0b:36:01:04:8b:d2:a1:
8c:ab:cc:84:cd:cf:ab:69:5d:a0:85:05:f8:e3:87:
13:d2:06:87:86:95:1e:70:ca:2d:94:d8:eb:f9:6d:
18:a6:e7:49:5e:3c:6a:18:6f:3e:de:fd:79:98:6f:
6a:eb:66:dd:73:58:7d:38:55:a4:64:6a:6a:01:52:
a1:77:b3:14:e5:6e:2a:17:c4:99:cd:2b:05:84:8d:
b0:9c:44:d5:33:8d:68:ec:0c:1b:36:7b:c4:ae:44:
a7:fd:93:f1:41:85:7b:74:8c:60:fe:12:4e:c3:3b:
e8:f7:b4:46:47:0e:02:92:34:61:05:2f:0a:e6:dd:
3f:f4:39:24:62:e1:2f:8f:8a:e5:c1:a6:3d:70:8f:
de:69:be:5e:d6:5e:d5:ba:3b:33:f3:c0:25:b6:e5:
a7:13:dc:36:21:45:de:37:a9:f3:02:90:2b:c4:bc:
a1:7a:62:4d:f6:3d:69:8b:33:07:b2:a0:60:6c:2d:
7a:e5:5c:de:2c:97:0c:06:67:47:4a:23:1e:db:b9:
8c:28:da:40:28:0d:6b:de:22:8b:8a:a8:59:97:ae:
71:a8:fc:30:dc:16:bf:18:2f:93:91:96:57:55:87:
89:e8:12:fc:ec:ff:01:4f:9e:87:4b:4b:f3:59:e3:
29:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D8:86:D7:5F:5F:DA:4E:2F:6D:6D:D4:8D:D5:69:15:52:36:40:F1
X509v3 Authority Key Identifier:
keyid:A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:75:c2:6a:2e:ee:df:a1:51:42:fb:91:ac:44:88:db:1d:34:
13:f2:1a:f6:13:16:13:3a:67:f1:0c:4c:1e:56:ae:c9:b1:13:
f3:34:dd:14:40:f3:34:b0:10:10:58:3d:e4:ea:c5:c1:85:40:
ef:3d:8a:7e:da:88:4a:92:53:e4:f1:eb:7f:eb:45:92:6d:48:
bd:00:45:c5:df:6b:1a:74:23:b9:d6:2b:f5:fb:95:14:aa:73:
28:5e:49:d3:9f:00:97:9a:8a:c0:aa:0f:e8:eb:c1:c6:ce:8b:
73:8c:96:e2:cc:d1:ba:88:d2:60:c5:48:d9:08:15:3f:34:28:
f7:19:86:d3:20:5f:fa:39:06:f3:38:ce:e8:ed:c9:87:ec:07:
92:ca:4d:6b:de:46:b1:45:84:ea:61:38:04:2f:33:b1:28:e3:
24:25:6d:d1:80:e2:5a:34:04:1a:c8:7b:9f:2c:26:c9:c1:d5:
0d:13:86:d1:07:c9:94:ee:c5:d0:b1:db:45:ed:1f:d1:51:37:
74:89:8c:9b:97:ba:9a:3e:7c:fa:a0:bb:07:24:ad:f4:04:ac:
24:c5:33:d4:97:4f:76:c0:54:0d:d1:15:fa:86:f0:b6:99:21:
dd:3f:97:f8:73:71:22:4a:b9:18:38:f7:28:12:e5:36:f5:0a:
62:74:26:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:45:02 2026 by rpki-client