Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
File: Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft (raw, json)
Hash identifier: oDC//q6/hnoz+2X5yAS0KmLtRjAbj7vAu+Jg2/bOtGA=
Subject key identifier: 8B:DE:44:01:4A:01:B3:49:33:97:29:2A:C4:69:13:30:27:6F:50:63
Authority key identifier: 43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13
Certificate issuer: /CN=43fad79548afc5c83e59bbfe388c64492cb55013
Certificate serial: 01A0C9D92380DBEC98A4D2389E4EAE554FA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
Manifest number: 1A67
Signing time: Tue 22 Sep 2026 16:00:45 +0000
Manifest this update: Tue 22 Sep 2026 16:00:45 +0000
Manifest next update: Wed 23 Sep 2026 16:00:45 +0000
Files and hashes: 1: Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl (hash: YW155kqvuipxmuxXrP7saj3yQ0LR8qB30hyAd7+bioo=)
2: gWRBDddMyWqh-LIfhr099iJ3yoM.roa (hash: miOqJ9LKG8Eyc/AIL8Ov13TsNXdMaSWxli/p6/FIhTs=)
3: nkIfu7bImABod5-85N1FwAXx42g.roa (hash: 9hvhnUz5j9QQtDK6csAcjLrvvxwu/x+GSH7qTRDcSxc=)
4: uHGjwPoMHu2IEBccrs2elf1N18A.roa (hash: g4Yg85Lk+WZoS7yWIAuAp+ehz/I0N5gf+zz3O65XQ14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d9:23:80:db:ec:98:a4:d2:38:9e:4e:ae:55:4f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43fad79548afc5c83e59bbfe388c64492cb55013
Validity
Not Before: Sep 22 16:00:45 2026 GMT
Not After : Sep 23 16:00:45 2026 GMT
Subject: CN=8bde44014a01b3493397292ac4691330276f5063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b9:3d:00:89:ce:78:92:66:c7:80:95:fe:ff:
79:ef:c2:c9:7d:a0:6d:80:6a:3d:95:68:67:69:57:
6c:56:ea:6b:ab:ba:b9:47:42:e0:1c:b7:0a:96:26:
0b:c9:59:25:eb:b5:f6:bc:71:dc:bf:4a:12:1c:c4:
ea:27:f1:e4:af:c1:53:80:b9:c9:1d:4f:09:13:b7:
11:25:c3:28:06:4e:bc:bd:6e:6d:56:62:0b:d8:85:
46:42:1e:83:35:64:24:41:38:92:af:ea:ce:51:39:
a7:a3:22:2d:47:74:bf:2d:af:0a:22:1d:82:bf:dc:
88:cb:b7:c7:e3:d5:60:f4:01:db:a2:2c:d2:87:e8:
d7:a0:53:f4:54:94:ea:f6:5e:ab:7a:3e:47:2b:cf:
1e:9a:30:24:95:b7:4c:0c:29:6f:8d:cb:2c:bf:b1:
3d:a8:46:4a:54:bd:be:11:46:c9:54:a3:b3:36:80:
af:2f:f2:69:bd:53:1b:36:4d:fd:2d:74:7b:3c:11:
5f:fa:c8:4d:1f:fd:cd:f8:a4:9c:60:ec:6b:d0:1d:
59:ba:02:c5:45:17:78:35:68:f8:c6:40:6a:ee:fd:
25:c1:ab:fb:e2:6c:04:e2:95:62:b5:83:15:fd:d4:
29:62:13:07:05:69:1e:f5:f7:9a:a3:6c:36:6f:84:
2c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:DE:44:01:4A:01:B3:49:33:97:29:2A:C4:69:13:30:27:6F:50:63
X509v3 Authority Key Identifier:
keyid:43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:3a:88:d5:2e:88:1a:65:5e:d1:e3:72:c1:3b:5e:b4:9a:95:
00:c1:20:5a:3e:55:96:db:d6:63:56:97:19:f7:8d:32:5e:4d:
d3:7e:cd:cc:cb:98:e7:3a:d7:81:9a:85:97:ff:35:96:2a:0e:
52:72:65:a1:8a:44:21:7b:a0:72:68:e9:9f:17:7f:3a:bc:fc:
a8:45:8c:fe:4b:91:51:0f:03:3f:b0:2f:a4:01:80:df:bf:88:
f2:c1:a5:89:76:f9:ac:d7:76:6a:db:89:93:d9:e8:b2:05:ad:
0c:01:ad:a1:1a:3d:f9:0b:12:df:30:c0:35:67:14:20:3c:91:
5d:a6:44:94:7a:93:91:45:df:db:cf:11:06:71:5d:e7:24:9f:
1c:2c:70:4c:7f:d2:18:b3:34:cd:96:2b:f9:e3:b5:8a:7c:81:
6b:64:5b:91:ea:87:a1:66:95:25:54:9f:5b:fc:53:d2:65:93:
6f:ea:35:60:0f:e3:b1:3a:49:5f:08:ee:0e:79:46:c3:12:66:
f2:78:c4:5f:c3:58:33:33:06:fc:bd:e6:49:fd:ba:97:09:e2:
bf:4a:c3:d7:c8:16:6e:7e:0b:70:df:b9:53:73:f2:9d:74:f6:
45:75:79:57:82:1e:3f:88:3d:d3:ec:2d:1f:06:f7:3f:e2:e8:
7b:87:2d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:33:20 2026 by rpki-client