Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
File: qS25uA37nJVniwfvLJU9YxB_X2I.mft (raw, json)
Hash identifier: b7PfTWhATmW7hSGI6EC6DESD41nRzfAGfyf4bdP92As=
Subject key identifier: DB:29:91:82:DC:C0:4A:98:21:0B:76:FE:93:6D:22:BA:49:1B:F1:42
Authority key identifier: A9:2D:B9:B8:0D:FB:9C:95:67:8B:07:EF:2C:95:3D:63:10:7F:5F:62
Certificate issuer: /CN=a92db9b80dfb9c95678b07ef2c953d63107f5f62
Certificate serial: 01A0DC4E1AA9B2256DD3D94B67DCAAD98995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
Manifest number: 0CD3
Signing time: Sat 26 Sep 2026 06:01:41 +0000
Manifest this update: Sat 26 Sep 2026 06:01:41 +0000
Manifest next update: Sun 27 Sep 2026 06:01:41 +0000
Files and hashes: 1: AHY4ZcpWBg0aIiFkhUXaY2emMvk.roa (hash: XYjuOSawg9GbeUiAsIFDnNUeoKdfUJFTjZesq9ksMa4=)
2: qS25uA37nJVniwfvLJU9YxB_X2I.crl (hash: c6t432VW7pqHX2Ii44TnC4TYPGK9yVNNbwcxBIfi89s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 06:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:4e:1a:a9:b2:25:6d:d3:d9:4b:67:dc:aa:d9:89:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92db9b80dfb9c95678b07ef2c953d63107f5f62
Validity
Not Before: Sep 26 06:01:41 2026 GMT
Not After : Sep 27 06:01:41 2026 GMT
Subject: CN=db299182dcc04a98210b76fe936d22ba491bf142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:49:dc:06:5d:8c:17:e2:d6:07:b9:01:f8:c0:
80:f5:72:46:2a:b8:2b:25:e5:5b:77:84:0a:12:02:
ea:ec:30:f4:87:ee:a7:12:78:45:6c:55:1b:a6:18:
6d:26:14:a5:d8:c6:c7:81:23:94:f4:d7:11:8b:cd:
36:39:7d:9c:fd:9c:e0:05:7e:22:6e:7c:2c:0c:9f:
69:54:72:24:1a:cc:33:db:3b:81:81:16:c4:5c:17:
72:83:49:58:27:cd:a6:8b:e6:0e:a0:07:a9:2d:0f:
34:8d:78:23:5e:6d:b7:02:6d:da:cb:60:fe:cc:dc:
a0:72:a4:54:a9:61:84:f6:38:c8:fb:c8:3f:52:59:
70:6a:f3:09:4d:5b:35:9b:1d:af:6c:75:7b:38:93:
be:3b:2b:8c:2e:e1:db:4d:bd:fb:a4:01:ed:70:cd:
9f:28:96:41:d7:1d:d9:2f:1f:4b:a7:60:7d:d6:31:
19:81:f8:e9:a3:9e:8e:e4:38:74:c0:39:8d:90:e6:
b4:e5:42:d1:58:b0:40:83:14:1f:6f:4f:f9:6e:d8:
da:b1:b8:72:ed:f6:4f:0f:5a:0d:d1:b0:e2:a2:4d:
ab:e5:07:7a:30:cb:61:8d:a6:28:9b:dc:79:41:bf:
05:76:f3:d1:93:8e:21:6b:46:93:7a:e8:61:66:05:
67:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:29:91:82:DC:C0:4A:98:21:0B:76:FE:93:6D:22:BA:49:1B:F1:42
X509v3 Authority Key Identifier:
keyid:A9:2D:B9:B8:0D:FB:9C:95:67:8B:07:EF:2C:95:3D:63:10:7F:5F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:73:d5:71:51:a7:6e:89:d7:30:6c:6e:09:dc:02:f4:89:dc:
8f:50:c8:de:15:70:be:30:8a:01:06:46:d6:28:72:0c:3b:d2:
63:c9:ca:6a:3c:65:9e:6a:ea:ef:0c:c4:bc:11:89:44:3c:0b:
d9:02:ef:b3:4e:a4:b8:08:f8:1a:67:e1:d0:5c:e5:59:62:ce:
a0:a6:e6:1a:47:44:6c:cc:3d:bd:ef:75:d3:9d:ab:b2:fd:51:
f6:d9:3f:9a:2c:fb:43:49:c1:7e:88:b2:14:17:4d:77:71:4f:
e0:35:e5:a1:29:4e:e0:97:dc:68:01:0c:37:e2:58:f7:3d:8b:
33:a6:62:05:4f:26:4e:3c:fd:9d:40:ad:2c:e5:b6:d5:32:f6:
aa:23:28:72:2f:2a:9c:44:8b:7c:e5:8c:1e:f3:39:2f:41:a2:
9a:09:1a:16:d7:36:eb:9b:30:86:c9:cf:1c:cd:79:f1:7e:01:
e9:88:a0:27:6e:ae:15:44:e1:83:0a:5f:1a:10:ed:d0:44:ed:
1b:db:ea:52:26:0c:25:29:8a:c3:ff:d5:13:30:ae:b9:e9:a2:
5c:1e:29:9d:f5:b7:49:70:62:f6:d1:2a:92:b8:09:94:9d:26:
0a:32:c9:25:f0:77:66:ea:37:f3:f6:ab:3b:c0:41:f0:0f:6d:
00:39:e9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:57:31 2026 by rpki-client