Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
File: qyftHOpDIcScPKEPOv-v29rVMsI.mft (raw, json)
Hash identifier: qje5jDRMaHl1AKL7NfwQhkMqITde7ZFxDzxsnFQmoVo=
Subject key identifier: 8C:51:A6:86:B9:6D:F0:47:B9:64:78:3F:60:92:95:18:C6:72:BD:6B
Authority key identifier: AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
Certificate issuer: /CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Certificate serial: 01A0D0493ABBAB0DED78DC9C89D87E1F5826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
Manifest number: 1A73
Signing time: Wed 23 Sep 2026 22:00:55 +0000
Manifest this update: Wed 23 Sep 2026 22:00:55 +0000
Manifest next update: Thu 24 Sep 2026 22:00:55 +0000
Files and hashes: 1: PdSSD1pY2R8sHhODVspC8pD1XNg.roa (hash: Hdy0mlxbyoY3S5V4w6LQ+HVJLICaMsGMYmJLwRUw9C8=)
2: gQS_1Ytr-O-IsbRGOtGTDvNNYeY.roa (hash: s9JwwcRfagDOyb+VnD4SIPFLvOjPpaDEvmlIEjUU6Jk=)
3: qyftHOpDIcScPKEPOv-v29rVMsI.crl (hash: JAXeAROEEHtcKxGDviEiHqtS8k5zTPDgis7b3e4CJxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:49:3a:bb:ab:0d:ed:78:dc:9c:89:d8:7e:1f:58:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Validity
Not Before: Sep 23 22:00:55 2026 GMT
Not After : Sep 24 22:00:55 2026 GMT
Subject: CN=8c51a686b96df047b964783f60929518c672bd6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:97:5d:55:c0:a6:bc:f4:25:65:e1:75:d9:fe:
10:05:2b:e6:a3:ab:b4:a1:ff:36:db:31:eb:44:39:
7b:8f:3b:30:80:d3:12:9d:fe:a2:7a:a9:74:eb:56:
d2:68:9e:05:08:aa:23:e4:31:55:90:78:df:98:a8:
b8:48:6d:18:75:29:fe:a5:0d:b2:92:1d:cc:83:02:
d4:ad:e9:6d:9c:04:62:1f:f4:98:00:a7:1c:57:60:
b2:7d:db:8c:b9:7c:3e:65:b5:7c:c9:53:0f:7f:42:
32:21:5b:12:5d:89:cf:88:03:1a:74:03:48:83:ae:
0b:d1:b5:9c:ac:0c:48:49:93:7f:53:37:8f:14:0e:
ac:05:34:a8:8e:66:e2:6c:f4:eb:44:75:58:da:11:
e0:80:c1:60:5c:76:1b:fc:05:b1:f5:bb:3e:d5:ee:
fb:ae:ff:a4:64:b9:f3:e3:5b:8d:e7:6b:bb:55:b3:
c9:df:bf:01:fc:9a:4e:d6:51:a9:12:95:83:4d:2d:
e7:d2:68:c0:40:d9:33:d2:0d:81:64:6d:99:41:4c:
29:3f:c6:06:f7:91:93:91:01:ca:78:fb:7d:98:7e:
d0:a4:72:8a:31:ae:0e:79:d6:d0:51:44:36:ac:51:
51:13:83:de:86:c3:a0:bb:bb:0a:c6:0e:44:c8:43:
05:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:51:A6:86:B9:6D:F0:47:B9:64:78:3F:60:92:95:18:C6:72:BD:6B
X509v3 Authority Key Identifier:
keyid:AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:6e:ac:59:76:66:fc:32:fc:c7:ee:ab:ad:cd:e7:94:60:95:
22:cd:80:f3:33:d5:f2:4c:b5:11:ba:b7:18:d1:e1:15:df:02:
58:0e:e1:83:ca:23:ea:53:c8:1c:90:78:24:31:0c:c4:5f:7b:
5b:60:ee:75:9c:06:1c:58:42:c3:25:d6:7c:9a:4f:a4:a0:a2:
80:73:38:14:63:73:e7:4a:fd:9d:85:1d:75:57:e4:35:27:8b:
da:b6:85:85:f6:ae:76:cd:1d:1d:b5:82:40:4c:bf:51:54:31:
7f:00:7f:9d:e8:76:92:f7:cb:0c:37:55:55:69:69:f1:34:a6:
2b:4c:c6:34:ee:c6:00:67:40:f2:22:aa:6c:61:30:58:c5:0b:
59:9c:45:bd:2c:9f:e2:76:56:e3:0a:9d:8c:46:ee:2f:80:a5:
33:3b:0a:be:f8:23:01:75:64:55:25:68:75:dd:8b:67:8b:b4:
99:af:c1:df:f7:6f:77:7e:c8:9d:40:d4:b0:36:61:9b:48:13:
23:b1:fb:48:bb:61:62:56:14:dd:b4:12:3e:47:a4:0e:8b:f9:
ff:16:ac:cf:b9:5a:8e:ec:24:5d:e0:f4:93:c5:eb:30:a6:cd:
e9:f0:c0:86:db:43:53:b9:4c:66:9c:67:84:4b:a3:02:51:46:
1c:06:ba:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQSTq7qw3teNycidh+H1gmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMjdlZDFjZWE0MzIxYzQ5YzNjYTEwZjNhZmZhZmRiZGFk
NTMyYzIwHhcNMjYwOTIzMjIwMDU1WhcNMjYwOTI0MjIwMDU1WjAzMTEwLwYDVQQD
Eyg4YzUxYTY4NmI5NmRmMDQ3Yjk2NDc4M2Y2MDkyOTUxOGM2NzJiZDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5ddVcCmvPQlZeF12f4QBSvmo6u0
of822zHrRDl7jzswgNMSnf6ieql061bSaJ4FCKoj5DFVkHjfmKi4SG0YdSn+pQ2y
kh3MgwLUreltnARiH/SYAKccV2CyfduMuXw+ZbV8yVMPf0IyIVsSXYnPiAMadANI
g64L0bWcrAxISZN/UzePFA6sBTSojmbibPTrRHVY2hHggMFgXHYb/AWx9bs+1e77
rv+kZLnz41uN52u7VbPJ378B/JpO1lGpEpWDTS3n0mjAQNkz0g2BZG2ZQUwpP8YG
95GTkQHKePt9mH7QpHKKMa4OedbQUUQ2rFFRE4PehsOgu7sKxg5EyEMFFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIxRpoa5bfBHuWR4P2CSlRjGcr1rMB8GA1UdIwQY
MBaAFKsn7RzqQyHEnDyhDzr/r9va1TLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXlmdEhPcERJY1NjUEtFUE92LXYyOXJWTXNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84NjU0OTAtNzhlNy00M2I0LWIyZmQt
MWQwYmY1MjA4ZjkwLzEvcXlmdEhPcERJY1NjUEtFUE92LXYyOXJWTXNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi84NjU0OTAtNzhlNy00M2I0LWIyZmQtMWQwYmY1MjA4Zjkw
LzEvcXlmdEhPcERJY1NjUEtFUE92LXYyOXJWTXNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlG6sWXZm
/DL8x+6rrc3nlGCVIs2A8zPV8ky1Ebq3GNHhFd8CWA7hg8oj6lPIHJB4JDEMxF97
W2DudZwGHFhCwyXWfJpPpKCigHM4FGNz50r9nYUddVfkNSeL2raFhfauds0dHbWC
QEy/UVQxfwB/neh2kvfLDDdVVWlp8TSmK0zGNO7GAGdA8iKqbGEwWMULWZxFvSyf
4nZW4wqdjEbuL4ClMzsKvvgjAXVkVSVodd2LZ4u0ma/B3/dvd37InUDUsDZhm0gT
I7H7SLthYlYU3bQSPkekDov5/xasz7lajuwkXeD0k8XrMKbN6fDAhttDU7lMZpxn
hEujAlFGHAa6ww==
-----END CERTIFICATE-----
Generated at Thu Sep 24 06:12:15 2026 by rpki-client