Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/qbfYAH71qCdsSk6cQgfQRU_xhVI.mft
File: qbfYAH71qCdsSk6cQgfQRU_xhVI.mft (raw, json)
Hash identifier: 9kgn8nTHGamidfb5gl1HDhrgJnZtHmOYIu4manyBni4=
Subject key identifier: 64:0B:07:9B:74:6E:13:02:C6:32:40:C3:87:64:FF:30:C2:2B:6A:31
Authority key identifier: A9:B7:D8:00:7E:F5:A8:27:6C:4A:4E:9C:42:07:D0:45:4F:F1:85:52
Certificate issuer: /CN=a9b7d8007ef5a8276c4a4e9c4207d0454ff18552
Certificate serial: 01A0ED0BDA94CA04E00EC1A7384D01F6EFC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbfYAH71qCdsSk6cQgfQRU_xhVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/qbfYAH71qCdsSk6cQgfQRU_xhVI.mft
Manifest number: F4
Signing time: Tue 29 Sep 2026 12:02:52 +0000
Manifest this update: Tue 29 Sep 2026 12:02:52 +0000
Manifest next update: Wed 30 Sep 2026 12:02:52 +0000
Files and hashes: 1: HQkCijMV9_xz1pxlMVTKYL1q5Lc.asa (hash: PxM/0EfV3k77iXpSKK4QS8zmHHDp3CSagYFz+PFhCsg=)
2: q9si30G3Z4SCm8CWscBg7k7qW-o.roa (hash: hQIS9g3ceAT84twsdrq5NBtYX97qQ4HwbcAX1yCehDk=)
3: qbfYAH71qCdsSk6cQgfQRU_xhVI.crl (hash: YRE3DIl3Y+qUZQi/eUYiqJObgSQdTR20jJLpWt+oI7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/qbfYAH71qCdsSk6cQgfQRU_xhVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/qbfYAH71qCdsSk6cQgfQRU_xhVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qbfYAH71qCdsSk6cQgfQRU_xhVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:0b:da:94:ca:04:e0:0e:c1:a7:38:4d:01:f6:ef:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9b7d8007ef5a8276c4a4e9c4207d0454ff18552
Validity
Not Before: Sep 29 12:02:52 2026 GMT
Not After : Sep 30 12:02:52 2026 GMT
Subject: CN=640b079b746e1302c63240c38764ff30c22b6a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:47:ea:35:3f:76:8c:46:d5:76:e5:a9:f4:6f:
a4:76:b7:7b:e9:29:31:b1:b3:72:46:b3:57:13:1d:
89:35:44:4d:5b:6a:f5:9e:34:65:26:7a:99:ff:ca:
69:e3:19:49:7d:4c:88:0d:02:0c:d4:ea:27:06:90:
05:13:95:ef:f7:cc:28:66:1c:41:b1:42:38:de:9a:
4b:f0:cd:59:ef:6f:c3:97:9d:56:e5:54:91:d9:31:
b8:05:b1:d1:74:05:36:83:a8:e5:d1:64:63:0d:3f:
81:46:ec:26:a3:98:28:52:3f:00:e5:15:90:53:66:
ad:ad:63:e5:4b:f9:29:1d:f1:11:89:92:2d:2c:d9:
a5:39:bc:cc:f7:c0:93:b2:41:ec:23:d7:70:e4:ce:
7a:97:ad:89:c9:16:11:5f:f7:b9:f1:7a:bb:16:71:
68:40:1b:56:18:f6:80:cf:37:8b:8a:2c:63:32:27:
63:40:51:56:bb:ce:7d:d6:04:27:e6:99:65:44:f2:
08:a0:a5:6e:47:58:5c:00:49:b1:31:b1:3d:23:4a:
16:bc:c2:ad:1d:e4:53:3b:ea:af:38:78:3b:92:f8:
e3:ae:95:a5:f2:f6:a9:aa:22:6a:e3:b4:86:13:b8:
45:86:2e:a6:ba:95:09:e5:e3:ac:db:7a:ac:b0:aa:
6f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:0B:07:9B:74:6E:13:02:C6:32:40:C3:87:64:FF:30:C2:2B:6A:31
X509v3 Authority Key Identifier:
keyid:A9:B7:D8:00:7E:F5:A8:27:6C:4A:4E:9C:42:07:D0:45:4F:F1:85:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbfYAH71qCdsSk6cQgfQRU_xhVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/qbfYAH71qCdsSk6cQgfQRU_xhVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/qbfYAH71qCdsSk6cQgfQRU_xhVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:b1:69:4f:85:2c:f7:a4:42:30:9b:59:df:e7:df:1d:c6:cf:
6f:a8:dd:54:42:00:35:39:7c:e7:7b:a5:0e:8c:8f:39:cc:f2:
bc:7c:8c:e1:e4:21:bd:87:ff:e9:1d:23:cc:dd:c7:11:cb:38:
6a:ed:54:24:74:3e:11:e6:8d:db:57:0c:a7:cf:64:1c:86:37:
0c:86:a3:de:c5:9c:f0:30:c5:b6:93:d2:b6:ee:fc:42:91:e4:
84:24:22:64:3e:04:19:35:2b:01:91:88:f2:8a:15:24:39:2a:
25:4c:3d:69:88:0d:a0:74:46:d7:b3:dc:dc:44:e7:a4:1b:75:
38:ff:38:85:e7:10:cb:85:15:e6:11:a1:55:46:57:2d:b7:6b:
af:3a:c9:fc:d4:70:04:b0:6d:c9:04:5d:6c:7a:c5:cc:59:39:
82:03:69:ec:b1:84:af:8c:1d:63:3f:9f:19:81:c7:3c:41:d9:
ea:02:b5:33:26:26:f0:65:7d:55:22:b8:de:d9:3c:be:67:2a:
d5:c7:79:d4:9b:c9:f5:f8:34:55:6d:4a:67:30:ac:22:06:9d:
21:83:ed:d7:ac:48:ba:64:3b:f0:e9:69:02:fd:9d:1b:ac:27:
7a:4f:3d:e5:f9:2c:0b:a2:6e:36:09:15:02:8c:c3:c7:3c:6c:
16:87:5b:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDtC9qUygTgDsGnOE0B9u/AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5YjdkODAwN2VmNWE4Mjc2YzRhNGU5YzQyMDdkMDQ1NGZm
MTg1NTIwHhcNMjYwOTI5MTIwMjUyWhcNMjYwOTMwMTIwMjUyWjAzMTEwLwYDVQQD
Eyg2NDBiMDc5Yjc0NmUxMzAyYzYzMjQwYzM4NzY0ZmYzMGMyMmI2YTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukfqNT92jEbVduWp9G+kdrd76Skx
sbNyRrNXEx2JNURNW2r1njRlJnqZ/8pp4xlJfUyIDQIM1OonBpAFE5Xv98woZhxB
sUI43ppL8M1Z72/Dl51W5VSR2TG4BbHRdAU2g6jl0WRjDT+BRuwmo5goUj8A5RWQ
U2atrWPlS/kpHfERiZItLNmlObzM98CTskHsI9dw5M56l62JyRYRX/e58Xq7FnFo
QBtWGPaAzzeLiixjMidjQFFWu8591gQn5pllRPIIoKVuR1hcAEmxMbE9I0oWvMKt
HeRTO+qvOHg7kvjjrpWl8vapqiJq47SGE7hFhi6mupUJ5eOs23qssKpv2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQLB5t0bhMCxjJAw4dk/zDCK2oxMB8GA1UdIwQY
MBaAFKm32AB+9agnbEpOnEIH0EVP8YVSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWJmWUFINzFxQ2RzU2s2Y1FnZlFSVV94aFZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80YmQ1MDAtNWQ0Zi00ODg5LTkxNDIt
M2M0ODM5YzhlODUxLzEvcWJmWUFINzFxQ2RzU2s2Y1FnZlFSVV94aFZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS80YmQ1MDAtNWQ0Zi00ODg5LTkxNDItM2M0ODM5YzhlODUx
LzEvcWJmWUFINzFxQ2RzU2s2Y1FnZlFSVV94aFZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeLFpT4Us
96RCMJtZ3+ffHcbPb6jdVEIANTl853ulDoyPOczyvHyM4eQhvYf/6R0jzN3HEcs4
au1UJHQ+EeaN21cMp89kHIY3DIaj3sWc8DDFtpPStu78QpHkhCQiZD4EGTUrAZGI
8ooVJDkqJUw9aYgNoHRG17Pc3ETnpBt1OP84hecQy4UV5hGhVUZXLbdrrzrJ/NRw
BLBtyQRdbHrFzFk5ggNp7LGEr4wdYz+fGYHHPEHZ6gK1MyYm8GV9VSK43tk8vmcq
1cd51JvJ9fg0VW1KZzCsIgadIYPt16xIumQ78OlpAv2dG6wnek895fksC6JuNgkV
AozDxzxsFodbuA==
-----END CERTIFICATE-----
Generated at Tue Sep 29 18:00:48 2026 by rpki-client