Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
File: qT4365yxmDJdZWZzKJJY0o6587g.mft (raw, json)
Hash identifier: ZrZYV7pBUZTi1uUzsHXrrrvjS+7ztX1SxPRTwG3/TgM=
Subject key identifier: 16:84:E2:12:7C:97:DF:44:62:35:B0:9E:29:2E:C0:38:B8:E0:B5:28
Authority key identifier: A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
Certificate issuer: /CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Certificate serial: 01A0EDE6E0F58FE15641A144509E48915110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
Manifest number: 1A10
Signing time: Tue 29 Sep 2026 16:02:06 +0000
Manifest this update: Tue 29 Sep 2026 16:02:06 +0000
Manifest next update: Wed 30 Sep 2026 16:02:06 +0000
Files and hashes: 1: qT4365yxmDJdZWZzKJJY0o6587g.crl (hash: 0R9pO/lnTe4Dnr/v983YR+IxzygTZUbOuNOLJA5RayY=)
2: zkS0MtUwrQ_h652IdJT_LVppRJ4.roa (hash: SXClzu9ACUlrsWWr12HFWPaz9CkpTAyEDwuny+Lvk9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 16:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:e6:e0:f5:8f:e1:56:41:a1:44:50:9e:48:91:51:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Validity
Not Before: Sep 29 16:02:06 2026 GMT
Not After : Sep 30 16:02:06 2026 GMT
Subject: CN=1684e2127c97df446235b09e292ec038b8e0b528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:85:e7:ec:d3:e8:29:5b:4d:b2:4d:0b:51:92:
4b:d6:a7:17:6e:33:87:0b:fd:d9:6a:4a:00:b9:eb:
14:b9:6c:fb:0c:98:ee:2a:24:e0:19:f1:d5:b2:40:
7a:a6:48:c7:0c:40:7d:68:99:cd:64:1d:02:e6:2e:
6c:b1:44:97:ed:01:2b:d4:9a:71:40:9b:2d:fd:13:
74:d5:3a:6a:55:63:d8:83:dd:c9:60:be:05:c6:0f:
58:e0:7b:f9:ba:05:42:0a:e1:ea:f9:aa:89:f1:a3:
e8:dc:55:a1:11:ef:be:eb:40:2c:91:dc:cb:dd:c4:
2d:ba:82:3b:47:87:23:ab:6c:b5:af:51:2e:55:04:
41:a6:bf:fb:8c:c5:cc:b6:5e:df:a9:bd:3c:cf:10:
2d:0e:f8:2d:e4:c9:43:78:17:41:49:2b:46:26:a8:
51:ae:4f:ed:40:c4:a0:4d:c3:49:53:eb:21:a4:15:
7c:62:1c:92:33:ce:ce:73:84:b5:5f:7d:0a:01:1c:
5e:e2:11:ba:9a:38:62:e2:83:1b:8d:57:dc:a6:81:
28:64:95:da:9b:87:37:9b:45:50:b7:c9:14:b6:0c:
f2:77:cb:c2:a1:d5:30:12:6e:53:e9:67:bd:d4:8e:
11:ee:7e:97:43:75:81:8c:aa:45:bd:8d:6c:80:7f:
aa:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:84:E2:12:7C:97:DF:44:62:35:B0:9E:29:2E:C0:38:B8:E0:B5:28
X509v3 Authority Key Identifier:
keyid:A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:46:96:39:a3:3b:e3:db:ab:d4:e5:54:61:d8:bd:10:d7:ff:
be:a6:ce:cd:c0:0c:e5:74:87:19:c2:af:9d:41:4b:01:fb:0c:
af:31:b5:fe:24:3f:b6:b9:ba:08:63:87:28:38:6c:32:75:cb:
09:6b:f8:a7:e4:b1:10:a6:0d:93:ec:1f:87:ef:eb:db:92:10:
cc:f3:68:ea:16:76:46:ff:10:51:b8:81:f3:d4:9d:7a:2f:83:
b9:ac:35:70:d5:9c:54:f3:43:88:cd:ef:62:e9:4f:17:f2:97:
f9:56:f0:e6:d9:78:f6:1a:70:34:ac:12:0a:20:5e:88:8f:3f:
a2:0a:9b:8e:47:00:58:42:49:88:9d:b5:d2:47:50:49:ed:e4:
61:42:4b:77:b9:56:cd:39:cf:1e:f6:fb:ed:07:1d:c5:99:8d:
02:e9:a7:17:27:85:5f:59:33:84:7a:56:7f:58:1e:a9:52:33:
7b:68:5f:2b:8e:1d:48:58:95:43:7f:02:0b:6c:79:af:17:68:
8b:4a:52:d7:ee:51:70:64:fc:4d:26:66:d0:77:f3:ff:19:d5:
90:7e:b5:cd:74:64:a0:41:cc:c3:52:1a:a1:85:f7:08:c0:04:
a9:83:60:ee:ce:e4:6b:1a:be:ee:1e:13:23:19:12:24:7d:64:
68:af:1a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 04:51:42 2026 by rpki-client