Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
File: RQxYEkixGuKkb1UuXKQ8adZecqg.mft (raw, json)
Hash identifier: OFuifNAleYpFfrEL0IWJ5/FI7O5XmlcJnjdmDEHWedA=
Subject key identifier: 3F:58:06:B1:74:EA:FA:81:2A:FE:23:8F:28:22:78:4E:06:BA:CE:78
Authority key identifier: 45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8
Certificate issuer: /CN=450c581248b11ae2a46f552e5ca43c69d65e72a8
Certificate serial: 01A0DFF3AEDA490809739A04D357E9B355C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
Manifest number: 09AA
Signing time: Sat 26 Sep 2026 23:01:24 +0000
Manifest this update: Sat 26 Sep 2026 23:01:24 +0000
Manifest next update: Sun 27 Sep 2026 23:01:24 +0000
Files and hashes: 1: 0mENkr9R3Eaz0bgbzTHZ_lmoh-k.roa (hash: awpYUvwutpxyVAYPBKGZqnzY4J1Y2wVFIsJg6l5sbpw=)
2: RQxYEkixGuKkb1UuXKQ8adZecqg.crl (hash: rj0WC3m2DIqQMA3hNS9rC6q0XnpSdx435kJWOFrXMRY=)
3: o3zLYzfT2580u-9CLddXhuyulyE.roa (hash: mwi/4c6LgdDRlLk19tfzSF9ChskElpBtCMQAXkoaQJk=)
4: uU9WSNDEX66vzzhhXOoe21fcdxo.roa (hash: 6MvyTg+A5MSPoBXPWElfN6DEbE9gMvp/ra0DMu41c84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 23:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:f3:ae:da:49:08:09:73:9a:04:d3:57:e9:b3:55:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=450c581248b11ae2a46f552e5ca43c69d65e72a8
Validity
Not Before: Sep 26 23:01:24 2026 GMT
Not After : Sep 27 23:01:24 2026 GMT
Subject: CN=3f5806b174eafa812afe238f2822784e06bace78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ed:6c:eb:72:07:18:02:9d:83:bd:69:2f:cc:
51:e9:8b:f0:19:23:cf:fa:72:31:1f:35:51:23:e6:
60:6f:18:0a:37:23:6d:5a:82:d2:ac:9f:ef:97:2a:
8c:36:1c:90:0b:e6:49:e5:a0:ad:8a:b6:22:13:fd:
19:a1:e6:2b:ef:68:99:14:33:d6:0d:27:04:9b:cc:
14:d5:ba:e0:58:49:a1:d6:12:81:af:57:86:2a:62:
10:25:41:82:09:8c:b1:07:57:63:bc:5f:e3:82:5d:
97:27:d3:6f:64:bb:dd:b6:50:63:13:ab:42:58:f2:
be:1d:a1:5b:75:97:64:eb:1d:83:28:4e:0f:ea:c3:
af:16:87:d0:01:b5:ae:05:4d:c9:43:2b:8e:12:c7:
0d:40:18:03:df:e6:cc:90:39:18:49:6c:b9:ca:14:
58:5d:ff:98:65:22:e1:78:67:aa:77:88:e1:34:6b:
9e:57:e5:df:f4:62:fb:86:6c:1d:6a:dc:b5:a7:23:
89:68:c0:c0:2d:f6:ca:b2:bc:9d:8c:5f:4c:e6:24:
2d:e0:7b:65:68:7d:19:58:f6:df:f6:9c:3b:ed:27:
26:53:32:d6:3d:68:3a:99:be:6a:09:0d:1d:59:32:
07:1c:1f:a0:1b:c6:aa:ef:89:a3:7d:c0:a7:4a:15:
c9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:58:06:B1:74:EA:FA:81:2A:FE:23:8F:28:22:78:4E:06:BA:CE:78
X509v3 Authority Key Identifier:
keyid:45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:59:71:44:ec:1e:a2:01:e6:8f:46:63:ba:df:39:48:c1:70:
f2:fa:f2:45:82:82:ea:d1:3b:91:3f:64:70:0b:ad:cd:f6:56:
92:bc:f9:6f:14:a5:c3:af:da:35:84:55:c8:ea:f2:dc:a1:94:
7a:a9:c9:d3:85:e2:74:f8:d8:a0:00:c4:ba:dd:63:bd:9a:d2:
46:e0:8a:a1:b3:e1:39:d1:be:2c:82:c7:fd:b0:8d:7e:5a:1d:
10:ac:1a:2b:b9:70:2a:c7:97:7b:70:84:68:53:e6:fc:0b:8c:
a5:81:59:9d:66:75:82:65:d3:9d:83:59:15:f0:ca:65:84:49:
53:4e:66:28:d7:ba:83:eb:ef:49:dd:f0:59:07:70:5e:ee:ab:
d6:72:e1:b5:0b:33:5b:71:45:94:1e:7f:f4:dc:48:d6:07:56:
f9:3d:45:9a:f3:a0:86:77:fe:62:d3:c0:74:0c:cf:1c:d0:d4:
55:49:81:46:ee:4a:c7:52:a7:4d:4e:73:f5:24:57:52:21:2c:
fa:fe:ad:79:73:e5:c1:c7:ff:e8:22:55:ce:f4:61:69:1b:80:
e1:bb:0d:b7:45:71:95:e6:7b:0c:ae:ba:2f:53:f0:fe:30:0f:
1d:df:85:21:9b:12:45:f0:f2:c4:90:1e:58:e9:7e:14:36:38:
04:ce:69:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:48:55 2026 by rpki-client