Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
File: Q57sdw36ZitOpkoCLus46D2q4ig.mft (raw, json)
Hash identifier: 14peF+cBMDmpRAitDJ0/DqM3roYu6mOINp6MnWBp5gI=
Subject key identifier: 47:2E:4D:D6:18:C0:28:6C:B0:DA:94:C3:9D:A6:9A:7F:2B:B4:EE:E3
Authority key identifier: 43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
Certificate issuer: /CN=439eec770dfa662b4ea64a022eeb38e83daae228
Certificate serial: 01A0EEF934951F683CF4B82FD017512D16DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
Manifest number: 0C12
Signing time: Tue 29 Sep 2026 21:01:44 +0000
Manifest this update: Tue 29 Sep 2026 21:01:44 +0000
Manifest next update: Wed 30 Sep 2026 21:01:44 +0000
Files and hashes: 1: PYhdlsUvc6cMikLsj2CZu44GozA.roa (hash: TWRSUVS4O6iaQs3ZX5NWtc+VI0J6VDPVPjsAdIWPgM0=)
2: Q57sdw36ZitOpkoCLus46D2q4ig.crl (hash: X7SrZwClN6DC+owzjlMJziPJZ/0M25n/7cvF/L5pgQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:f9:34:95:1f:68:3c:f4:b8:2f:d0:17:51:2d:16:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439eec770dfa662b4ea64a022eeb38e83daae228
Validity
Not Before: Sep 29 21:01:44 2026 GMT
Not After : Sep 30 21:01:44 2026 GMT
Subject: CN=472e4dd618c0286cb0da94c39da69a7f2bb4eee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3f:0a:fd:82:16:c1:0c:28:c5:cf:b5:bd:da:
40:12:96:0d:1f:e3:45:f9:7b:dc:60:7c:59:2f:af:
82:12:40:36:c8:02:ac:29:ca:86:3e:9b:f2:0f:d1:
b5:86:76:12:a6:d3:0d:e5:44:a3:26:17:b9:03:9d:
c6:f9:23:3a:9d:17:c1:48:a8:e1:c1:90:3e:0f:f7:
74:e0:74:ac:c2:53:0b:f0:aa:8a:4d:2b:74:ac:76:
1f:0a:e2:b6:b7:0b:94:8e:9b:5a:eb:c3:fb:25:f7:
8a:6e:58:81:3b:21:12:92:60:31:d0:d7:7b:e3:9c:
ca:20:e6:c7:0c:75:c4:de:fe:b4:2d:81:aa:65:1e:
2e:5f:d4:ea:6c:68:95:32:31:a6:15:c5:27:d7:4f:
c9:95:31:95:18:49:71:ae:18:5f:f3:a2:97:51:32:
5b:56:68:ed:28:3e:b8:11:61:11:d4:fc:65:d7:3e:
ea:13:2b:ea:aa:d0:01:aa:e5:47:11:4c:07:59:1a:
1f:2c:5e:50:82:e1:55:a9:ae:71:b4:72:e5:c1:bc:
e6:fe:af:f3:8c:26:ef:b2:92:a1:7e:b2:57:f1:28:
2d:8b:e8:69:73:66:35:8e:a4:aa:9c:9c:02:b6:bb:
d5:a2:91:15:d2:90:42:c9:d3:eb:b8:fd:18:c4:02:
1c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2E:4D:D6:18:C0:28:6C:B0:DA:94:C3:9D:A6:9A:7F:2B:B4:EE:E3
X509v3 Authority Key Identifier:
keyid:43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:72:f3:8e:11:4e:df:1a:db:19:8a:62:02:76:f8:f5:18:70:
6e:3b:9d:29:ea:5e:b1:3b:f4:cd:f0:5e:a9:f0:58:f0:1b:5e:
a5:a3:4a:ec:32:cd:a3:13:85:de:1c:b6:60:35:e9:04:a3:91:
fc:83:a2:2b:67:22:39:cb:99:e4:f5:79:0b:8e:1d:05:41:5e:
70:e9:30:cc:d5:1b:76:52:ba:35:35:d7:ee:6e:75:36:6b:4f:
39:98:dd:82:be:34:b8:15:54:1d:07:e6:03:fe:85:c1:17:ed:
c5:e4:c8:71:13:c9:a9:1e:66:bc:b9:ed:eb:64:ac:fe:68:ff:
f7:16:a3:6c:ba:17:bf:4b:2e:76:fd:8a:2a:66:46:9e:7d:b0:
d5:09:0a:fd:fc:6b:6f:dc:2c:60:7d:78:b1:8e:b2:f4:2a:94:
1f:52:a2:fe:34:e9:3a:c6:a9:15:1b:6e:4e:1b:6b:ed:bc:bb:
e1:88:6f:da:09:7e:f7:a4:45:cf:3f:7e:43:db:35:88:d7:75:
10:b5:c6:f9:f6:bd:72:34:1d:85:23:4e:55:63:87:4b:bb:2f:
fe:9f:4b:44:b1:48:a2:24:f9:45:c8:11:96:59:c8:74:b1:ad:
ff:d6:70:52:59:61:88:57:cf:22:52:1d:73:15:80:8f:28:df:
c8:c9:d3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 02:03:51 2026 by rpki-client