Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
File: qft75iSm8jMZjio089nZhCmrpGE.mft (raw, json)
Hash identifier: q9SR+YJ7hwcCvxRXvo5ictkGW/eHdSpMfVH2pDYoqHE=
Subject key identifier: 54:6E:20:A7:96:FE:8E:75:BE:6E:EE:10:F9:2E:4B:5D:3D:72:47:D9
Authority key identifier: A9:FB:7B:E6:24:A6:F2:33:19:8E:2A:34:F3:D9:D9:84:29:AB:A4:61
Certificate issuer: /CN=a9fb7be624a6f233198e2a34f3d9d98429aba461
Certificate serial: 01A0E73F7E5CB6238EAC5A73F367A0EEE986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qft75iSm8jMZjio089nZhCmrpGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
Manifest number: 02D7
Signing time: Mon 28 Sep 2026 09:01:32 +0000
Manifest this update: Mon 28 Sep 2026 09:01:32 +0000
Manifest next update: Tue 29 Sep 2026 09:01:32 +0000
Files and hashes: 1: DEtXANHZs-ySfJ2DbeIG2FY0feA.roa (hash: CiC1X69cIhHbTBPnPYg9pS10KzYxN0NPXzJ/qp7bwgE=)
2: qft75iSm8jMZjio089nZhCmrpGE.crl (hash: jNb+vyUCiumaHFhpjUvByTHWO0IyvO0Rg2RWeSlTvGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qft75iSm8jMZjio089nZhCmrpGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 09:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:3f:7e:5c:b6:23:8e:ac:5a:73:f3:67:a0:ee:e9:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9fb7be624a6f233198e2a34f3d9d98429aba461
Validity
Not Before: Sep 28 09:01:32 2026 GMT
Not After : Sep 29 09:01:32 2026 GMT
Subject: CN=546e20a796fe8e75be6eee10f92e4b5d3d7247d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:48:7a:6e:bb:15:50:7b:bf:51:54:3e:f9:27:
28:2c:3c:75:60:e5:b5:02:39:da:db:ed:2a:e6:66:
57:54:62:8b:eb:ae:7b:78:19:f6:8a:7b:2b:36:1b:
f5:7f:8f:c5:14:c8:2e:f2:ca:c8:73:dc:1d:1a:54:
75:05:f0:07:ed:d7:2a:2e:0a:d9:23:e9:6d:f0:e6:
03:96:fd:52:af:7b:87:94:c2:95:fb:f3:9d:b8:74:
76:63:8d:75:59:a1:27:79:aa:bf:ae:bd:6d:4e:de:
33:13:3e:fb:38:ac:e5:b0:e2:7a:e0:91:6b:e0:5e:
f8:c0:5c:72:05:3a:63:5d:8e:4c:31:03:66:1f:fa:
c2:7b:b4:69:3b:ef:ad:36:7c:79:79:73:ed:85:8a:
10:3e:9e:c2:b5:9c:3c:11:2f:cf:cf:d8:53:6f:f6:
5a:90:44:4f:86:69:96:ae:4c:63:3d:ea:0f:8e:b3:
13:be:49:39:be:a5:19:31:ab:6c:6a:69:bb:cd:e3:
38:8e:6f:2a:d2:f3:4b:d9:c2:a0:2d:3b:6a:14:35:
1d:c8:1d:97:a0:4d:0b:8d:5c:ce:b2:41:aa:39:a2:
26:42:f8:1d:0b:c3:4c:a2:bb:e1:e8:24:25:9c:c5:
c8:95:9a:2b:ec:c9:fe:9f:0c:d2:dd:af:7a:6e:68:
da:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:6E:20:A7:96:FE:8E:75:BE:6E:EE:10:F9:2E:4B:5D:3D:72:47:D9
X509v3 Authority Key Identifier:
keyid:A9:FB:7B:E6:24:A6:F2:33:19:8E:2A:34:F3:D9:D9:84:29:AB:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qft75iSm8jMZjio089nZhCmrpGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:50:e0:35:aa:16:76:77:34:c8:50:81:e7:36:70:d6:7c:7c:
55:9a:a2:07:49:57:cf:95:9a:78:5f:94:c0:df:c5:f5:c4:f5:
17:a7:da:81:ef:f3:bb:3b:36:97:06:ed:b6:58:68:64:66:57:
14:92:38:dd:9d:a4:c9:60:c3:19:30:04:34:85:2b:70:fe:50:
d5:2c:4a:bc:7b:8a:a4:04:a1:b0:c5:d6:a9:73:3d:35:1f:8e:
99:6a:82:76:c7:52:cb:ee:93:90:b7:b3:a1:6b:ed:1a:3f:b4:
23:a0:6e:5c:f9:34:dd:65:9a:68:d5:c5:98:7d:61:1a:cd:19:
e2:ac:12:28:d1:ee:fb:ce:7c:8b:07:ba:4d:c7:9f:0a:8a:e1:
fc:70:e1:3c:0e:e5:58:aa:99:5c:91:2b:1f:7e:b4:1b:85:ae:
13:43:d2:04:49:6c:26:53:b2:5e:35:b1:03:d6:d6:62:07:8c:
6c:61:6b:74:71:07:86:ed:0f:c5:20:74:9a:52:c6:53:7a:79:
ae:be:fa:ac:e4:eb:3c:1e:9d:17:43:1a:2e:3c:61:2e:57:49:
cc:44:e2:0f:4b:dd:c3:a1:a3:52:0b:c8:f9:57:8a:c6:3d:7e:
27:01:62:f1:4f:f9:61:d3:85:9b:a7:a1:bb:fe:02:81:52:32:
e0:a9:a4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:09:28 2026 by rpki-client