Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/3596be-52ff-40a3-b0d7-c167117f8645/1/qIe76LBerQ4uRIT4HMjTzTTVJMU.mft
File: qIe76LBerQ4uRIT4HMjTzTTVJMU.mft (raw, json)
Hash identifier: 6oWi2jk8n08sbZmN5cXrjwoD9nW6cfcPhDqzse2sJLE=
Subject key identifier: 47:D7:D8:2B:64:A0:E6:3D:79:35:6C:EB:D0:B5:7B:D6:04:CF:05:08
Authority key identifier: A8:87:BB:E8:B0:5E:AD:0E:2E:44:84:F8:1C:C8:D3:CD:34:D5:24:C5
Certificate issuer: /CN=a887bbe8b05ead0e2e4484f81cc8d3cd34d524c5
Certificate serial: 01A0D3B83A4E4CB9045F0877A818FB6B42F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIe76LBerQ4uRIT4HMjTzTTVJMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3596be-52ff-40a3-b0d7-c167117f8645/1/qIe76LBerQ4uRIT4HMjTzTTVJMU.mft
Manifest number: 65
Signing time: Thu 24 Sep 2026 14:01:01 +0000
Manifest this update: Thu 24 Sep 2026 14:01:01 +0000
Manifest next update: Fri 25 Sep 2026 14:01:01 +0000
Files and hashes: 1: XGU20dvPzEFLqBGtUHgnqD1uNvc.roa (hash: 0V5jjdVeq5pbW8veVvISrROlp96kJcnyw85WkEAIovA=)
2: qIe76LBerQ4uRIT4HMjTzTTVJMU.crl (hash: 5hI435CWEgjBS/eLZ3cEPEqo/I3l5RhNS31aCPmdwJc=)
3: qbLZvmNVHDw6ywTDJfp7jpRSx3Q.roa (hash: FbKNMJ+Crca/g+9TD+lTtkZskVkL4sJsLikc3sygVLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3596be-52ff-40a3-b0d7-c167117f8645/1/qIe76LBerQ4uRIT4HMjTzTTVJMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3596be-52ff-40a3-b0d7-c167117f8645/1/qIe76LBerQ4uRIT4HMjTzTTVJMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIe76LBerQ4uRIT4HMjTzTTVJMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:3a:4e:4c:b9:04:5f:08:77:a8:18:fb:6b:42:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a887bbe8b05ead0e2e4484f81cc8d3cd34d524c5
Validity
Not Before: Sep 24 14:01:01 2026 GMT
Not After : Sep 25 14:01:01 2026 GMT
Subject: CN=47d7d82b64a0e63d79356cebd0b57bd604cf0508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ff:61:18:6b:3d:e2:b1:46:c2:c1:d8:f7:cb:
90:dd:44:ae:56:1f:42:7c:09:c1:da:7c:92:75:47:
13:8a:78:44:01:f6:20:41:cc:b5:99:18:ea:2a:a7:
87:29:0e:cc:09:99:ca:b1:9d:ee:26:2d:d1:43:da:
3a:ae:30:3f:e5:aa:80:61:1b:61:0a:54:a8:a5:dc:
74:03:41:49:d5:55:55:a1:28:90:d7:31:60:b1:6c:
a7:54:c5:58:e3:fc:69:89:da:d2:6a:85:25:20:d8:
ac:e7:95:df:b2:12:36:17:c5:45:36:78:3d:49:78:
be:59:5d:c1:be:5d:18:59:97:2a:73:4c:f2:24:11:
7b:23:79:e2:f2:90:f4:a1:cf:5c:25:b3:b7:a1:1b:
e8:82:83:15:67:17:a5:21:dc:ce:4e:01:8e:71:af:
a7:c5:03:d5:63:0a:6c:c8:7b:68:bd:e8:9c:9b:9b:
37:46:30:b8:ff:94:c3:c5:a9:0e:1a:6f:b8:93:dc:
dd:e4:b1:1f:8b:d3:94:80:f2:a8:7b:78:6f:4f:27:
a1:d7:3a:dd:4b:83:f7:fa:99:69:5c:28:36:af:67:
5d:a6:ca:6d:80:1e:9a:fe:fa:1f:31:4d:2b:69:49:
fd:74:49:82:3f:97:0d:de:da:9b:af:3a:48:8d:bb:
9d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D7:D8:2B:64:A0:E6:3D:79:35:6C:EB:D0:B5:7B:D6:04:CF:05:08
X509v3 Authority Key Identifier:
keyid:A8:87:BB:E8:B0:5E:AD:0E:2E:44:84:F8:1C:C8:D3:CD:34:D5:24:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIe76LBerQ4uRIT4HMjTzTTVJMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3596be-52ff-40a3-b0d7-c167117f8645/1/qIe76LBerQ4uRIT4HMjTzTTVJMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3596be-52ff-40a3-b0d7-c167117f8645/1/qIe76LBerQ4uRIT4HMjTzTTVJMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:7e:6b:99:ef:27:d4:ac:b4:0e:2d:ec:5e:fb:ac:b8:44:0a:
02:2f:b6:94:6e:b2:f2:45:15:74:a4:de:7e:35:12:7e:57:11:
d5:54:a0:22:bb:b4:b4:d9:6c:13:3f:10:fd:fa:27:c3:81:79:
9d:c8:f0:e0:c7:1f:d2:56:31:72:ec:8b:b9:82:6a:38:f4:4c:
80:b4:a9:bb:70:b2:74:15:cc:c3:e0:a9:1e:a2:aa:eb:5d:22:
bb:20:b2:1d:c0:80:14:74:1a:63:39:fe:e7:aa:65:79:e8:d8:
43:37:60:67:99:0f:53:c6:f7:72:30:01:11:50:b9:76:87:73:
5e:09:74:34:8e:16:08:4b:a3:e7:76:bc:ee:9a:0e:16:d7:f6:
b0:b2:bb:8c:8e:67:f1:19:df:02:04:e0:4e:ed:f5:52:36:ca:
0c:63:5c:f3:6a:18:5c:24:ef:bc:c7:11:97:15:0b:ed:43:61:
8f:85:d9:85:b7:ae:34:3a:ee:4b:9b:2f:6d:cf:eb:d0:17:a7:
8f:a0:6b:70:e2:e6:5c:be:34:37:7b:b2:40:03:a6:75:57:30:
69:26:e9:8c:54:c9:c3:0a:1f:33:be:3d:e8:4f:0c:80:5e:0a:
b6:bb:84:e6:d6:50:27:be:cb:bd:3a:6e:ed:a2:60:5b:04:ff:
ee:f1:cf:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:21:25 2026 by rpki-client