Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
File: Qy_nD0zvEDdoNhUvOOTghTLMe58.mft (raw, json)
Hash identifier: N4SNeQYRgWoN1dYWX8B77OGOIbnz88INK0BurwN6M8o=
Subject key identifier: 02:B5:CE:EF:A2:09:54:D4:97:95:86:E1:A7:89:E3:B2:42:CE:87:A2
Authority key identifier: 43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
Certificate issuer: /CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Certificate serial: 01A0D5A6AE5692F8AB7F161A951E9457559B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
Manifest number: 0918
Signing time: Thu 24 Sep 2026 23:01:05 +0000
Manifest this update: Thu 24 Sep 2026 23:01:05 +0000
Manifest next update: Fri 25 Sep 2026 23:01:05 +0000
Files and hashes: 1: A9KPkngUXWXwoXMeh9I603GmeJg.roa (hash: dKQV+T7YqY4RYKx4LLE6fQsZ703AeKW3tQVyd7Sv7c8=)
2: Qy_nD0zvEDdoNhUvOOTghTLMe58.crl (hash: HqytmLzEp8vbFx40vilznfqOXl8ToOBazZJJIo4jW7o=)
3: sKDKorvVElJgqwc1YL9x1RhoYEM.roa (hash: SXIrFPkLP5e0Dojj65FY1WNGEqYxxlyXHUyw6TzDiOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a6:ae:56:92:f8:ab:7f:16:1a:95:1e:94:57:55:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Validity
Not Before: Sep 24 23:01:05 2026 GMT
Not After : Sep 25 23:01:05 2026 GMT
Subject: CN=02b5ceefa20954d4979586e1a789e3b242ce87a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d9:fd:43:f9:d8:e0:ac:53:6a:43:2f:d4:a1:
ad:4d:88:a3:91:f8:1d:52:e0:0d:3d:56:13:45:c0:
65:8c:70:d2:be:3d:8d:4e:37:c0:a5:ae:2f:d8:f0:
0b:6d:a8:74:ae:49:01:52:75:01:ea:30:68:43:49:
10:9e:cf:3e:e1:0a:c8:d0:c8:b9:99:68:96:3f:aa:
1c:aa:60:0a:d1:0a:aa:16:d6:7f:b5:8d:b0:4b:6d:
b3:dd:f7:3c:db:d0:ea:0e:73:f5:75:fb:82:a7:f6:
ac:d5:35:cc:10:9c:88:63:8e:6d:d2:b8:b7:96:77:
ac:67:e6:94:b6:86:e7:bb:e1:88:b6:5d:c7:90:bc:
f2:c8:c3:77:51:44:af:72:4c:89:10:ff:0f:d2:a9:
65:f2:6a:d3:79:27:cb:19:47:64:3f:41:ec:59:96:
b9:ba:ec:a9:83:75:06:b9:d5:e2:35:8a:4a:aa:06:
33:7f:83:47:6f:2a:6f:9f:3d:59:15:f9:1d:bf:bf:
b8:61:57:c5:d9:30:cb:fd:19:cb:9e:8f:da:3f:59:
44:fd:ab:b5:38:f7:f9:6d:b5:fe:31:d3:0c:f0:b4:
93:b7:17:f0:0c:b3:84:38:f0:16:12:b5:57:a8:39:
35:b2:5e:3f:57:0c:00:a7:b2:45:22:59:a1:6c:5c:
96:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B5:CE:EF:A2:09:54:D4:97:95:86:E1:A7:89:E3:B2:42:CE:87:A2
X509v3 Authority Key Identifier:
keyid:43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:ae:65:d9:0c:84:f4:b9:cf:21:05:07:ff:88:a4:35:c7:7e:
47:37:da:2f:4e:68:cc:db:e1:d2:02:07:4a:5e:46:f5:40:ff:
29:24:8d:e7:4a:ef:d0:6a:8c:27:07:b1:24:dd:b2:39:fb:79:
8d:e3:97:8a:dc:9f:36:1a:de:18:41:bb:fe:35:ac:53:5b:6b:
60:18:1d:a7:28:fd:37:1e:14:a5:6b:20:9f:84:95:1c:3a:0c:
d7:e1:dc:68:9d:8c:45:df:06:99:a3:ce:4f:c2:0a:3b:76:f0:
0d:59:50:b4:08:08:93:e1:0e:d7:8d:5d:3f:d6:18:fc:ea:17:
70:56:cb:a1:ab:95:68:e5:47:5f:8f:6a:f8:02:2f:f3:16:84:
c1:65:bf:db:f6:39:ca:a8:2f:23:92:db:35:97:0f:a7:31:ad:
30:f1:be:e6:86:c0:f5:95:63:f8:df:27:d9:1d:ca:3b:26:19:
b1:57:1e:ab:b8:3d:03:66:33:a6:4b:c6:45:68:13:0e:49:93:
f1:99:46:8a:be:a5:e6:3b:dd:a1:96:e3:be:cf:c3:bb:19:16:
d6:e9:c7:9f:07:c4:de:86:49:d7:c1:a3:bc:9b:38:29:87:07:
76:a7:0e:0c:ee:84:53:ea:34:6a:9a:8a:80:51:e3:6c:c7:f4:
a0:26:74:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:35:03 2026 by rpki-client