Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
File: qnv9Qg21yuutoaIFXYe8faKwnAc.mft (raw, json)
Hash identifier: Ag1i4wGwZ0LLTo4DFSGfNljNOUzoMmRJ8xg+9lBUwaU=
Subject key identifier: A0:87:CD:4E:AD:94:FF:44:C5:03:6A:42:65:03:EB:2F:9E:1F:7C:64
Authority key identifier: AA:7B:FD:42:0D:B5:CA:EB:AD:A1:A2:05:5D:87:BC:7D:A2:B0:9C:07
Certificate issuer: /CN=aa7bfd420db5caebada1a2055d87bc7da2b09c07
Certificate serial: 01A0DA5F801A88D79622E8F414DBA9F29D2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
Manifest number: 0511
Signing time: Fri 25 Sep 2026 21:01:26 +0000
Manifest this update: Fri 25 Sep 2026 21:01:26 +0000
Manifest next update: Sat 26 Sep 2026 21:01:26 +0000
Files and hashes: 1: qnv9Qg21yuutoaIFXYe8faKwnAc.crl (hash: QAZO3MKaimGiDO1l4+e+HF93hGdzDff+y5BC+im7XdE=)
2: tHTr07ZBhUD8R_5r3PxqgiRA1CA.roa (hash: /8DCcSpchfgecurYBVc/dGLfkDOCG1kP3rKMMF22VmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 21:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:80:1a:88:d7:96:22:e8:f4:14:db:a9:f2:9d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7bfd420db5caebada1a2055d87bc7da2b09c07
Validity
Not Before: Sep 25 21:01:26 2026 GMT
Not After : Sep 26 21:01:26 2026 GMT
Subject: CN=a087cd4ead94ff44c5036a426503eb2f9e1f7c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:98:f8:07:97:23:e3:3c:7f:20:13:f6:32:0d:
46:d3:c8:44:96:82:10:14:ea:f7:7a:d0:98:e5:8b:
0e:91:79:da:03:4b:2e:00:ca:81:6c:64:db:d0:bb:
8d:a1:a7:f4:57:18:34:18:a5:5f:73:bc:f0:0f:29:
34:81:d6:cc:78:70:ec:73:52:da:fd:2f:bf:20:70:
95:24:32:d0:93:6d:d9:e1:d6:f6:05:2c:dd:b0:11:
98:3d:71:03:26:a3:fd:cf:92:85:0c:33:2e:3b:82:
63:fd:55:14:ad:d6:8d:71:06:b3:3f:e1:51:6d:23:
f7:df:dd:f3:9b:30:73:52:16:ef:f7:a3:17:4d:84:
f4:fb:04:14:a6:20:dd:1b:e0:47:f9:ca:bb:ed:ff:
f1:0a:3c:ac:62:67:df:ad:20:52:a0:c3:65:d2:bf:
64:36:48:e9:f0:29:51:c1:73:cf:19:f5:b8:3d:70:
3e:c4:a6:3e:da:0d:b5:8e:f1:e4:11:1e:9d:87:5a:
a5:5c:28:7e:e5:2e:e8:44:a0:0e:66:b4:cb:c9:e3:
77:4c:88:4a:81:48:a5:99:bb:b5:f5:5e:1b:37:66:
85:36:96:30:7e:d4:ab:69:23:9b:34:bb:aa:ab:1e:
c0:04:10:0e:2d:99:74:46:ed:fd:43:1b:f7:53:5a:
a1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:87:CD:4E:AD:94:FF:44:C5:03:6A:42:65:03:EB:2F:9E:1F:7C:64
X509v3 Authority Key Identifier:
keyid:AA:7B:FD:42:0D:B5:CA:EB:AD:A1:A2:05:5D:87:BC:7D:A2:B0:9C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:38:1d:32:c4:a9:bf:48:3d:ac:76:f6:45:d7:79:0c:21:1e:
16:6a:c3:43:2c:10:e7:10:6a:03:80:20:c9:1c:e4:de:4a:fe:
4f:3c:dd:3c:57:ae:b4:8e:06:95:c5:16:a3:1a:33:81:e0:fa:
8d:ce:02:02:0a:86:db:65:92:5f:e6:20:ef:17:44:33:a9:35:
aa:66:65:fd:c2:97:40:89:5a:a1:58:02:be:21:4f:38:55:78:
19:f2:7c:96:e1:2f:e7:12:ae:ff:e2:b0:fc:12:76:17:15:fe:
5a:89:81:18:c0:a3:23:82:34:84:07:b2:18:24:aa:6b:10:4b:
ac:b6:9a:19:d6:3c:05:97:65:d8:f3:ea:76:5e:04:13:24:84:
f7:25:fc:50:81:48:e9:a9:9f:d7:87:e3:1b:d1:a3:d4:8c:23:
90:80:2b:e2:67:25:74:48:85:13:eb:d1:7d:5b:2c:b6:b4:29:
22:c8:d4:ac:c7:24:7e:a2:53:d7:8a:95:f0:65:09:9d:83:b8:
18:7b:4e:40:49:6d:b9:2b:8d:35:87:3b:4d:34:50:fc:20:f8:
22:da:d2:64:f7:d3:ed:9a:20:e7:70:b2:ab:40:99:8f:d5:26:
19:ed:da:ee:eb:60:11:b7:e0:28:87:5d:72:53:f3:2f:bf:9a:
d5:70:41:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:06:46 2026 by rpki-client