
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
File: qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft (raw, json)
Hash identifier: ZsWeizK6zsVkXR721bzWJGN0FnTNjmw4sF+XpIbTFUM=
Subject key identifier: FA:9A:57:81:04:F5:1C:EB:DC:4F:C3:66:75:D1:21:10:91:21:4A:F0
Authority key identifier: A9:BE:16:CE:7D:B3:BE:69:05:B1:AB:EF:8B:E2:1A:23:19:B0:E4:3E
Certificate issuer: /CN=a9be16ce7db3be6905b1abef8be21a2319b0e43e
Certificate serial: 01A0D26E208DAEB64FB7DD54E77211C20262
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 08:00:27 +0000
Manifest this update: Thu 24 Sep 2026 08:00:27 +0000
Manifest next update: Fri 25 Sep 2026 08:00:27 +0000
Files and hashes: 1: blLvX2-SqKRxgzfg9csWt9Te5CU.roa (hash: Nyn58GOogqZkbGAVvyp/qEbfXu/9YSuSkYbo5ZUxKIg=)
2: qb4Wzn2zvmkFsavvi-IaIxmw5D4.crl (hash: eXIJfTTGlRFihc9QPDZGM9kuC2Kcll3nVlENKHCfPYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:20:8d:ae:b6:4f:b7:dd:54:e7:72:11:c2:02:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9be16ce7db3be6905b1abef8be21a2319b0e43e
Validity
Not Before: Sep 24 08:00:27 2026 GMT
Not After : Sep 25 08:00:27 2026 GMT
Subject: CN=fa9a578104f51cebdc4fc36675d1211091214af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:47:30:2e:a2:54:86:23:63:c6:fc:f1:14:43:
8a:98:8b:47:e7:6b:82:f1:ec:45:fe:cf:01:8a:ef:
90:34:df:71:7f:ac:2a:46:ca:0f:9e:08:4c:04:05:
0f:f6:d8:7f:bb:d1:83:49:18:13:5e:2d:6e:f3:d7:
41:b3:0d:fc:39:b3:87:8e:9e:15:44:60:d2:83:77:
f9:98:96:a8:e0:18:7d:5b:e8:72:41:5d:09:8f:c6:
13:ac:2e:82:8e:8e:5d:f4:03:30:ee:d9:4c:60:eb:
fd:2b:c4:6d:f5:4b:6e:89:30:b1:a2:2c:f3:ba:03:
e5:83:06:d4:b4:ba:35:fe:2c:99:bf:84:b4:a8:fc:
da:44:2b:65:2f:16:9f:91:fa:1e:2a:b3:9e:fd:30:
86:94:b9:29:89:d5:64:11:8d:b6:f1:1e:69:b4:88:
f7:1d:41:00:00:92:54:af:fd:9a:6a:67:29:a1:a4:
85:af:77:70:cf:22:68:b1:7d:e4:9b:f8:2b:97:72:
8c:a0:5b:0f:2c:5c:88:4d:3b:03:36:e1:80:6f:31:
0d:07:6a:bf:f7:14:fb:b6:fa:f3:30:e8:62:cd:0d:
3b:eb:3a:ee:25:f3:cc:7c:cd:cb:e9:68:0d:b5:05:
cb:da:4f:35:99:19:08:12:0e:b5:6f:35:d6:69:2e:
57:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9A:57:81:04:F5:1C:EB:DC:4F:C3:66:75:D1:21:10:91:21:4A:F0
X509v3 Authority Key Identifier:
keyid:A9:BE:16:CE:7D:B3:BE:69:05:B1:AB:EF:8B:E2:1A:23:19:B0:E4:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:f2:97:7d:61:6d:8f:07:76:61:fc:2d:6c:1a:51:9c:be:13:
1c:b5:8a:b7:70:05:68:c5:30:2a:e9:57:14:71:0b:0e:f2:7e:
05:6e:9f:b7:45:1b:d3:bc:ce:0e:a0:8a:1c:cd:ed:5d:05:89:
fa:fa:48:03:a0:30:67:b8:73:26:5f:e7:b4:38:23:b3:18:d8:
25:c9:be:e6:52:28:52:9d:23:65:88:c1:d9:16:77:2a:3e:5d:
e3:6c:b4:34:b7:00:25:3f:03:87:cb:07:f5:55:27:99:dc:62:
f0:eb:24:09:5a:ba:fe:97:71:f4:56:6d:4e:84:20:a7:7b:c3:
7a:03:59:cb:23:06:56:48:d4:31:51:30:df:55:b2:e8:e3:4f:
16:f9:fd:e9:f6:1f:0f:36:b3:f8:2b:74:f2:bf:9c:69:5a:17:
c5:bb:2a:a8:1b:d0:0e:ab:0b:f4:06:11:cb:f4:55:c3:2f:c9:
be:ee:44:52:0d:4e:05:29:45:ac:1d:76:10:76:75:27:76:08:
93:b8:f9:f3:f8:e3:e1:86:8e:fd:ea:51:07:f4:05:fc:67:2e:
3e:65:bd:bd:0d:a6:b9:a0:97:04:54:b8:11:cd:a5:64:7d:4f:
e5:19:49:56:74:d5:c7:e2:55:6e:7a:15:c6:70:ef:d4:46:6d:
f6:47:d0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:39:26 2026 by rpki-client