Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
File: qfxWMNV7GXHzolbtbZg6-tayjXU.mft (raw, json)
Hash identifier: laON79kWCq24x1YibNIDXCQmze1v7AOV1hPPL7BB7qg=
Subject key identifier: 07:CA:B7:E2:5E:B0:D4:47:3E:53:13:1F:7E:54:49:28:CD:FE:C5:7B
Authority key identifier: A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
Certificate issuer: /CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Certificate serial: 01A0E4070CD598835CF0848A9F7F9C7EE786
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
Manifest number: 1A7A
Signing time: Sun 27 Sep 2026 18:01:02 +0000
Manifest this update: Sun 27 Sep 2026 18:01:02 +0000
Manifest next update: Mon 28 Sep 2026 18:01:02 +0000
Files and hashes: 1: KIREq3B_mRi_ruYLjq_b_qaPiMU.roa (hash: XxQhGm3arKEfc0Jix82KOHGdF1oeChWiOIWCuWRPrpg=)
2: RLTq3d76GisC1LZTNSb9nCNxxt8.roa (hash: x4c1QBZG0KpP+BhZ849r1Wv8Cus10ftjdq8hO7xYuIU=)
3: qfxWMNV7GXHzolbtbZg6-tayjXU.crl (hash: /MXI7Fuz0Hl0krxu/J4RKNL8fkCKNvGLIEEPVNeuqKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:07:0c:d5:98:83:5c:f0:84:8a:9f:7f:9c:7e:e7:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Validity
Not Before: Sep 27 18:01:02 2026 GMT
Not After : Sep 28 18:01:02 2026 GMT
Subject: CN=07cab7e25eb0d4473e53131f7e544928cdfec57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:45:b3:40:46:02:1e:73:8a:0c:7d:5b:3d:f8:
34:4e:15:55:59:91:55:0f:e5:8b:be:2b:a4:0d:93:
f7:43:f9:cd:ea:7d:7f:21:26:14:2b:94:9a:5b:37:
86:16:93:86:5d:d8:18:5f:f1:9b:1b:7a:15:b8:59:
b3:c0:45:8b:a1:aa:45:c9:6a:5d:ae:40:5e:55:bf:
d5:9c:cf:0f:fd:21:ea:e3:87:bb:b1:f6:d3:7d:e6:
24:af:c2:b3:b8:a0:0b:98:b5:a5:fc:e3:6b:9a:f5:
61:5c:b4:12:cc:b1:ce:79:7e:3d:ac:2f:f2:e6:ae:
0c:8b:55:71:b4:9a:1d:15:f7:ac:85:35:4a:07:2c:
b8:0f:53:8a:ff:ae:fa:64:03:2e:39:64:8e:e4:f6:
9f:a0:12:d3:b7:85:dc:7b:36:9b:03:3b:43:b7:04:
4d:0b:d9:da:d4:72:90:ef:17:fb:c6:64:2c:10:c7:
0c:c8:50:ee:84:ba:06:b0:b0:ae:2f:79:a3:47:56:
19:8f:40:4d:38:f9:a2:03:68:88:6f:a0:de:64:2f:
95:8c:b1:b4:3a:c4:d0:05:46:20:b6:26:d8:ad:97:
5f:23:6e:3c:e7:10:ae:23:fc:7b:3c:a9:8f:bf:8a:
2f:1f:2c:9c:57:d7:c1:f6:77:da:da:da:27:4e:1a:
11:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:CA:B7:E2:5E:B0:D4:47:3E:53:13:1F:7E:54:49:28:CD:FE:C5:7B
X509v3 Authority Key Identifier:
keyid:A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:29:d7:33:cc:cc:d8:57:7b:60:e8:6c:cb:53:49:5b:50:fb:
31:28:cd:7b:06:04:64:c7:fc:29:e7:be:bc:a4:bc:db:9c:58:
c3:b8:88:1b:26:4e:ee:c3:7f:20:2f:3e:b7:56:78:59:e2:1c:
63:56:ca:50:a5:54:29:68:09:cd:07:d2:fc:d3:c5:6a:f7:8e:
1e:9f:26:c3:1f:31:a6:f1:ed:12:94:6f:7d:0c:53:f4:ee:d2:
c9:88:e1:9b:bf:3d:91:ba:e9:fd:d9:fa:96:96:02:5b:f8:6f:
f7:4f:0e:e8:4f:1b:b3:e3:58:6c:f9:4a:c1:56:af:07:d2:89:
f3:6b:d7:d6:93:b3:16:a3:97:94:22:e7:74:2f:0e:5f:81:a4:
00:17:d8:09:d5:d5:e6:47:2a:9f:86:59:a2:37:3a:f4:cc:b8:
9e:a8:b1:be:61:d0:1f:5a:9b:4d:65:6f:05:f9:76:50:57:ab:
e3:e5:51:e6:60:83:39:e3:2e:8a:f6:5a:5d:7f:b6:8b:e3:cf:
cf:c3:22:07:52:9d:69:ca:40:26:5d:19:8d:d5:4a:39:01:60:
e8:8a:99:97:66:a3:df:34:59:e4:a8:1a:61:98:c9:c1:c8:c3:
75:d7:e7:5c:c2:33:ec:dd:01:09:98:98:e7:91:00:de:b8:be:
c5:d4:06:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:25:29 2026 by rpki-client