Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
File: qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft (raw, json)
Hash identifier: a6KCpE+c+gTSfObSlwBDNjWDUkCWPnyBPkn8xuchuYI=
Subject key identifier: 62:F5:B7:67:8C:B0:97:22:B1:BC:E7:EC:6F:6C:56:1A:B3:08:17:DA
Authority key identifier: A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C
Certificate issuer: /CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c
Certificate serial: 01A0D9BAAFF1CA3187F826DB9DB13DEF291D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 18:01:25 +0000
Manifest this update: Fri 25 Sep 2026 18:01:25 +0000
Manifest next update: Sat 26 Sep 2026 18:01:25 +0000
Files and hashes: 1: U4sjdHd-gX-XqAKv1_i_s77A5sw.roa (hash: R8Ebp8RZ69ktsKpPiMp0a78DZiZYGn/b1MPxbWALvI0=)
2: qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl (hash: bsCO3NYhsp8AKjHSkiCrmactCwG/a0UPRbnArDeCPK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:af:f1:ca:31:87:f8:26:db:9d:b1:3d:ef:29:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c
Validity
Not Before: Sep 25 18:01:25 2026 GMT
Not After : Sep 26 18:01:25 2026 GMT
Subject: CN=62f5b7678cb09722b1bce7ec6f6c561ab30817da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f0:f2:d7:6b:9e:14:01:4a:b6:44:77:74:07:
19:9f:35:75:ce:32:30:25:1c:02:a0:b2:c1:df:53:
77:ed:e2:48:ca:d9:42:83:e4:e7:7c:64:33:7f:d1:
ca:73:3c:e9:89:1b:a6:17:68:d3:78:b7:d6:2e:3b:
7b:37:ef:08:41:3f:4a:57:9c:13:76:2a:2f:e4:03:
54:94:48:f7:2d:a4:54:9a:4b:1f:f3:17:32:ae:a3:
dc:3d:34:9f:9f:68:c6:14:10:42:b0:d1:fe:59:61:
74:9d:1d:91:2c:d6:91:fc:9f:87:cd:c1:ae:e7:75:
89:98:34:23:93:3a:e3:99:65:9e:87:b9:73:32:92:
59:f8:e9:38:e1:a6:88:71:b0:c2:b2:7f:21:3f:59:
84:dc:39:22:a5:d2:bb:d6:8f:db:73:fd:65:2e:1d:
a2:7b:d1:ab:dd:0d:f1:f4:d7:95:2e:12:5d:67:d2:
bd:f2:a0:78:2d:e0:9d:ec:e5:b2:9e:36:be:6c:c6:
6c:f9:e2:01:8a:84:32:d6:94:b5:d4:a1:77:29:8a:
d7:39:f3:4e:5d:ff:57:43:ab:00:2b:35:6d:e7:3b:
39:41:3c:6e:9d:4f:97:24:84:be:bc:0e:e3:c3:91:
2b:b9:ad:ce:1d:5d:2e:91:53:84:77:7a:bd:30:28:
ad:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F5:B7:67:8C:B0:97:22:B1:BC:E7:EC:6F:6C:56:1A:B3:08:17:DA
X509v3 Authority Key Identifier:
keyid:A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:a6:07:29:db:fd:54:c7:35:6f:48:9f:bc:4a:d0:5c:56:43:
96:f6:ea:01:99:c1:78:dd:83:04:3c:22:05:96:37:56:02:8e:
34:c7:1e:ab:69:9e:d3:c9:ca:71:19:6c:17:58:79:71:d6:03:
38:91:bf:bf:2e:3c:99:16:d3:0e:60:4b:ef:2a:14:8f:4b:8d:
8f:87:4e:63:02:b0:c0:64:61:ba:fd:c4:f9:f0:41:92:39:e7:
3f:a4:8b:85:4d:69:ec:75:cd:cc:f7:eb:8d:2d:be:45:52:c1:
d7:18:50:45:4c:1c:e2:f2:3e:a3:44:79:21:e6:b1:2c:0e:3a:
18:df:d8:1b:6a:74:44:90:a1:e4:f0:0b:68:37:9b:0b:a2:73:
18:ad:8b:4c:22:48:f9:f9:29:98:46:30:2a:b0:3e:64:fc:19:
12:58:dc:1a:aa:8d:8d:6b:fe:8e:5b:d4:62:ab:2b:5e:ff:19:
f0:1d:5a:27:30:5d:4e:be:24:fb:89:8f:e4:2f:a2:45:35:09:
78:57:07:bc:53:ae:7e:12:be:51:fd:e7:ca:8c:fe:64:24:5e:
eb:2f:60:07:cc:16:aa:a1:f3:d0:0c:e7:c2:09:14:b6:8a:f6:
fb:fa:67:86:38:7b:86:8d:b0:41:b6:7a:1c:d9:86:66:2b:78:
53:e9:35:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:36:10 2026 by rpki-client