Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
File: qFfj-rEefTOV3RA9ap-V2SJV9ks.mft (raw, json)
Hash identifier: 6kTZT4TtThkG0KeBHgbRntWem6IQ8a2l6bnha04S+Cs=
Subject key identifier: C0:F8:15:A1:97:57:D7:8D:40:3B:83:E4:07:CA:C9:92:3F:DA:90:0B
Authority key identifier: A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B
Certificate issuer: /CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b
Certificate serial: 019F9323E347B188044096A383233888F691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
Manifest number: 0440
Signing time: Fri 24 Jul 2026 08:00:30 +0000
Manifest this update: Fri 24 Jul 2026 08:00:30 +0000
Manifest next update: Sat 25 Jul 2026 08:00:30 +0000
Files and hashes: 1: IDbm4BTVJkr2LGXzbqOrz6EVNx4.roa (hash: 6Be3sqYYXs7RhhAxfXcGlT5hWEPDQQflddEPFI3kouc=)
2: qFfj-rEefTOV3RA9ap-V2SJV9ks.crl (hash: HkVMUjH7v3KIHnnlj9u6sA6O4y3G9sQWYKxhUuhWOQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:e3:47:b1:88:04:40:96:a3:83:23:38:88:f6:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b
Validity
Not Before: Jul 24 08:00:30 2026 GMT
Not After : Jul 25 08:00:30 2026 GMT
Subject: CN=c0f815a19757d78d403b83e407cac9923fda900b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:81:c8:c7:8a:7f:37:d3:e6:ec:a0:00:bc:01:
2f:f9:9a:b9:e9:b3:95:d7:c6:66:05:dc:a1:9d:b1:
44:91:cd:7e:64:4f:fd:38:e4:b3:e6:64:bb:97:7d:
99:33:79:b4:e3:92:30:c6:a4:15:4a:ba:6f:c8:5b:
c6:14:a7:74:e7:73:7e:a1:72:df:56:db:f5:bf:e6:
10:5d:16:c9:6c:f2:e3:11:4b:9e:03:4f:b3:29:5a:
70:ec:09:d1:fd:cd:11:a4:21:d7:bf:2d:ea:11:f4:
68:e1:79:c7:aa:be:0b:00:2c:ee:f9:94:83:c6:81:
79:82:37:11:56:3e:99:d9:73:f7:85:f6:f0:17:30:
07:d2:06:bb:ad:e9:d8:08:b2:11:bc:c2:f5:b9:6d:
2a:8d:f1:c9:97:17:b5:96:b7:c0:f1:0d:b6:08:89:
66:83:22:4c:00:06:c8:fc:2f:2a:75:d2:f0:6c:95:
39:5b:32:b0:c5:bd:4b:4c:e4:55:68:d7:49:31:ee:
d0:ad:8c:70:5f:7c:8d:89:a0:3a:28:63:1d:1a:74:
e2:ae:54:f7:d0:61:bc:1b:e0:fb:16:cd:69:b3:a0:
78:7a:5d:31:62:0b:12:74:ae:b4:ee:b3:fa:9b:ad:
90:d9:ba:0b:c2:1b:6c:6a:59:42:3e:e3:ed:50:c6:
6f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F8:15:A1:97:57:D7:8D:40:3B:83:E4:07:CA:C9:92:3F:DA:90:0B
X509v3 Authority Key Identifier:
keyid:A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:84:26:cd:69:30:00:62:3e:0c:14:ff:59:6d:1c:ff:4e:a3:
44:00:46:8b:1e:db:bb:4f:d4:9a:1c:c1:5a:72:95:3f:92:58:
1b:9a:80:9e:73:cb:e9:16:26:c5:ee:58:d3:20:2c:48:e1:38:
98:30:9e:c0:10:17:38:c1:3b:4f:00:8b:58:df:c5:09:41:d3:
4f:71:56:70:f3:72:30:02:fc:8f:e7:e9:da:2b:74:88:8d:24:
2a:ae:54:93:64:6e:96:a4:62:7d:91:af:0b:d1:8b:2e:57:55:
5c:a0:60:c6:08:78:41:b5:d1:09:e2:08:04:21:32:c7:3e:4a:
14:c1:80:95:5d:b2:10:dd:ac:c3:f8:6c:8a:a0:64:1c:bc:df:
ee:df:b5:3c:9f:2a:67:04:37:84:45:8c:52:bc:ba:92:82:4b:
24:d4:78:a2:e2:cb:97:93:9d:ea:76:1d:d5:77:94:57:fd:70:
19:06:4b:ff:ef:b8:74:a2:c5:90:26:13:7b:93:35:6d:2d:31:
e3:3e:31:09:0f:54:d8:16:4c:bc:62:21:07:49:e8:fc:5c:b2:
93:6c:ce:44:fd:50:4e:5f:33:59:50:9c:36:57:8b:1a:21:c3:
f0:09:91:ae:c9:8f:57:16:e2:d6:b6:d1:8c:ca:c1:cf:6a:3a:
32:b8:49:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:40:28 2026 by rpki-client