Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
File: qFfj-rEefTOV3RA9ap-V2SJV9ks.mft (raw, json)
Hash identifier: y7G1eybFbWGCSMOW1l03W32Gnwe6a/AWdYsIcxyrQfM=
Subject key identifier: 8C:9D:A0:0C:AA:DF:B9:30:29:5E:AC:C6:A9:F0:83:3F:6C:9B:94:15
Authority key identifier: A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B
Certificate issuer: /CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b
Certificate serial: 01A10400204A33482D9AD4BA51BFA96BB0DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
Manifest number: 04FF
Signing time: Sat 03 Oct 2026 23:01:19 +0000
Manifest this update: Sat 03 Oct 2026 23:01:19 +0000
Manifest next update: Sun 04 Oct 2026 23:01:19 +0000
Files and hashes: 1: IDbm4BTVJkr2LGXzbqOrz6EVNx4.roa (hash: 6Be3sqYYXs7RhhAxfXcGlT5hWEPDQQflddEPFI3kouc=)
2: qFfj-rEefTOV3RA9ap-V2SJV9ks.crl (hash: 1qKfvW/4FpNv3yIiE4V6bVfwOYPiQiffgYOXgTtlfXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:00:20:4a:33:48:2d:9a:d4:ba:51:bf:a9:6b:b0:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b
Validity
Not Before: Oct 3 23:01:19 2026 GMT
Not After : Oct 4 23:01:19 2026 GMT
Subject: CN=8c9da00caadfb930295eacc6a9f0833f6c9b9415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:45:f3:be:ca:6d:37:bb:f0:2b:a5:a9:ee:ff:
60:d2:18:ac:84:9c:92:2c:d2:66:48:10:d0:b2:36:
29:ad:6a:ac:2f:23:f7:46:52:04:fa:23:17:78:67:
33:bc:17:3e:88:37:cb:95:0a:7d:ce:93:72:ae:53:
7c:d5:be:f4:eb:90:45:f4:a5:68:ae:85:0f:50:16:
2b:53:d2:77:f4:4e:0c:fa:1e:f7:c3:2f:77:2a:74:
4a:1d:00:17:0e:9a:54:fe:df:e5:9a:77:ea:54:55:
88:a9:60:05:60:d8:4c:cd:dc:3f:dc:77:41:66:3c:
9f:0b:f7:ce:53:29:db:dd:3f:1e:39:3e:53:bc:df:
eb:d7:74:34:4f:29:25:c9:fa:77:be:3c:7b:2c:71:
b8:c8:dc:88:1c:bb:6b:8c:c7:50:3a:d4:6a:b3:76:
8f:1a:bb:f5:14:41:04:5b:94:52:38:8e:e6:59:ea:
03:39:e0:5a:5a:11:df:87:fe:6f:42:00:6a:43:7e:
03:a5:b4:11:92:44:e5:c7:6b:d4:1d:a6:d7:92:e9:
fa:60:59:c3:7f:e0:14:a2:da:10:f9:81:9e:7c:75:
98:83:4e:05:30:f8:2b:13:fd:d6:bf:22:c9:cb:7f:
93:a8:11:7b:dd:d7:75:93:8e:a1:ce:cb:84:24:2a:
d3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9D:A0:0C:AA:DF:B9:30:29:5E:AC:C6:A9:F0:83:3F:6C:9B:94:15
X509v3 Authority Key Identifier:
keyid:A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:2d:cf:5d:a3:e3:85:94:22:0b:d2:b0:6b:c3:e3:c3:80:0e:
8d:93:a7:9d:74:12:ef:ca:f3:1f:81:e7:0d:61:dd:b7:3e:ed:
e8:d4:6a:8f:b5:74:5a:fa:be:8f:53:ac:c7:47:5f:9c:7b:d4:
4c:3e:75:cb:ac:f4:13:72:ea:27:c4:a6:cd:a4:bb:30:88:a8:
f3:fb:28:c7:59:d6:d9:a6:4e:2b:a0:c1:4f:29:4a:dd:c0:5f:
64:ab:2b:e7:75:33:10:5b:f5:35:03:5d:52:95:bc:64:77:ec:
6d:59:fd:1e:88:96:b4:01:4f:fd:1a:0a:12:29:83:c9:6c:60:
13:b0:ae:7f:aa:07:c6:4b:04:49:fb:64:d5:3e:2a:51:90:ce:
44:41:b8:41:dd:dd:c5:8c:a2:e7:85:fa:1a:79:4a:8e:cd:a2:
54:19:66:db:aa:7e:ea:14:c1:ac:f8:2d:57:3c:92:7c:36:43:
44:1c:0d:c3:49:b9:aa:cc:f7:48:6a:a5:7d:89:42:76:a0:87:
15:df:a2:bf:e9:fe:97:13:5e:33:d5:5b:a5:d8:de:c5:c0:14:
9f:4a:ce:13:42:cf:52:f3:32:06:24:c2:a2:8b:db:8d:01:e5:
03:0d:7b:a8:ad:bb:6a:43:95:60:9d:f0:a7:2e:45:74:16:4d:
e5:2b:bf:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:12:09 2026 by rpki-client