Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
File: qBfHRT83fpy2-uXIk8Bno-HTUUU.mft (raw, json)
Hash identifier: L5GoQBMJCEzyG4RefyzE20kdrrkYaVTU+p0ZxX3TKLU=
Subject key identifier: 49:44:A4:D8:0B:A0:90:3B:43:4C:2B:81:B0:5A:F9:7E:52:83:79:0D
Authority key identifier: A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
Certificate issuer: /CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Certificate serial: 01A0D048FD55CEF408F262174976E9E245DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
Manifest number: 128D
Signing time: Wed 23 Sep 2026 22:00:39 +0000
Manifest this update: Wed 23 Sep 2026 22:00:39 +0000
Manifest next update: Thu 24 Sep 2026 22:00:39 +0000
Files and hashes: 1: bDniOy7bJDqEB7j18XhIORHd9P4.roa (hash: 7UeZ8ffZs41TrgD9TFvep3setoYXza5q1+hwG2ZnLPc=)
2: ce9B0xiqGv3-6XVsohVP_4mQ2nc.roa (hash: bZXcOl6PpFz9za7K+EZymB9rux3LD9nnlgPnINrzVx8=)
3: qBfHRT83fpy2-uXIk8Bno-HTUUU.crl (hash: bqlPi7/yVORluXanrXwkGFU2MwC5HI704D4rEhFn//Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:48:fd:55:ce:f4:08:f2:62:17:49:76:e9:e2:45:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Validity
Not Before: Sep 23 22:00:39 2026 GMT
Not After : Sep 24 22:00:39 2026 GMT
Subject: CN=4944a4d80ba0903b434c2b81b05af97e5283790d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6b:ea:8e:c1:41:04:f2:66:ae:8f:b7:9c:89:
68:e4:a1:1e:fd:2d:a4:8d:b6:a7:04:0a:ef:d3:8c:
70:52:1c:dd:3a:3b:ac:59:39:61:33:2b:61:40:5c:
86:c0:e0:d6:fd:48:2b:46:a8:ee:64:6d:c4:f7:52:
ce:0d:75:fa:ad:82:82:25:9b:6f:95:0d:46:e7:15:
c7:81:30:4e:7c:ec:b7:f2:46:39:38:ce:7d:4c:e2:
0a:b4:77:ba:0c:c1:0e:dc:f4:27:00:67:ab:c8:4a:
7a:cb:da:43:c1:c9:40:a5:5c:18:a0:b8:78:ed:37:
f7:09:9c:00:8b:67:b3:e9:da:58:90:73:f7:fd:2f:
a1:3e:53:d0:32:a9:b6:00:35:74:28:a5:6b:55:8d:
5c:9c:46:bf:c1:53:38:50:1a:c5:ae:00:7b:84:48:
60:ae:a5:c2:be:a6:21:c8:96:e1:8a:3e:75:90:85:
c1:24:a9:17:af:96:59:2a:db:bc:93:2a:7d:92:a2:
37:cb:9e:45:28:22:d0:22:90:11:85:b8:79:3b:42:
f2:21:78:83:a2:da:8d:7e:c2:b8:cf:79:6e:db:06:
83:1d:66:e4:62:11:04:f4:d2:a0:91:d3:6c:69:f2:
e0:c1:8b:ab:09:fd:3f:cb:d9:60:9e:33:d9:e3:c6:
df:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:44:A4:D8:0B:A0:90:3B:43:4C:2B:81:B0:5A:F9:7E:52:83:79:0D
X509v3 Authority Key Identifier:
keyid:A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:1c:c2:fb:99:f4:84:03:d8:93:b9:64:36:c1:1f:d5:be:d5:
ae:71:5d:9d:81:e7:b9:c6:f1:88:f0:38:1e:26:72:29:ce:d1:
8a:2f:43:06:fb:df:c7:45:a9:44:13:e4:ed:83:8b:6f:04:f8:
c7:8b:76:69:58:25:cc:96:fd:b4:6d:85:da:87:5a:04:04:8f:
b6:d3:46:cc:ee:5d:98:53:31:2d:9d:85:7c:39:f1:81:39:59:
4e:3d:c1:4b:38:fe:47:a6:7a:cb:f0:be:86:52:97:d1:1f:8c:
b5:12:7a:4e:c3:e5:e5:b0:d4:e9:65:7b:b3:c9:8e:f0:9f:e9:
80:d0:96:56:9c:38:1c:fa:45:43:f4:3d:47:8c:d4:8e:b1:a5:
d7:88:f9:b1:5b:c3:05:66:c2:be:e7:07:6b:66:b3:bc:fd:b7:
cb:6d:79:1c:3f:fb:0e:b8:34:f8:bf:35:97:dd:b4:b2:ad:53:
40:02:c5:9b:96:fd:ac:74:8e:1d:6f:4d:b4:4c:6b:3a:a9:a0:
b6:58:9a:93:cc:6c:3a:e0:9c:b5:70:09:a1:fa:48:ec:2c:3f:
8d:e0:65:c0:b2:67:86:cc:a0:76:53:1c:20:34:82:2b:26:5b:
2a:3c:49:ae:c6:68:de:89:77:f0:d2:a5:42:59:63:9e:8c:d4:
39:54:b0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:39:45 2026 by rpki-client