Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/qryfZKSO6lUh4en6qBB5jwiVRrY.mft
File: qryfZKSO6lUh4en6qBB5jwiVRrY.mft (raw, json)
Hash identifier: entyWOIYymu6XLV+omQOou2NiNqMkjS38wCD+v+9dx4=
Subject key identifier: 2C:D8:61:85:0D:65:AE:8B:5B:B4:BC:16:34:B9:05:31:9C:F8:CA:A8
Authority key identifier: AA:BC:9F:64:A4:8E:EA:55:21:E1:E9:FA:A8:10:79:8F:08:95:46:B6
Certificate issuer: /CN=aabc9f64a48eea5521e1e9faa810798f089546b6
Certificate serial: 01A0D539558A142FAB01D734065230989192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qryfZKSO6lUh4en6qBB5jwiVRrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/qryfZKSO6lUh4en6qBB5jwiVRrY.mft
Manifest number: 01C9
Signing time: Thu 24 Sep 2026 21:01:39 +0000
Manifest this update: Thu 24 Sep 2026 21:01:39 +0000
Manifest next update: Fri 25 Sep 2026 21:01:39 +0000
Files and hashes: 1: k4UjBMhNQbPGGmHnVoiBgJBmSf0.roa (hash: VIQo5uhjjTbtUBi5ti8/TlUnmadL+OWUvZa3u0tyfm0=)
2: qryfZKSO6lUh4en6qBB5jwiVRrY.crl (hash: rdyeWZqBTUjZzlXTZS5ZmkEtoZVCl4Sz+g3owQu8rwQ=)
3: zVSrTTqebRmSnsneDFxGS3_YpGc.asa (hash: fmf7CqwekntqfwrIibO6rpKxFjgw/RTj5EEUnDmjI/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/qryfZKSO6lUh4en6qBB5jwiVRrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/qryfZKSO6lUh4en6qBB5jwiVRrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qryfZKSO6lUh4en6qBB5jwiVRrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:39:55:8a:14:2f:ab:01:d7:34:06:52:30:98:91:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aabc9f64a48eea5521e1e9faa810798f089546b6
Validity
Not Before: Sep 24 21:01:39 2026 GMT
Not After : Sep 25 21:01:39 2026 GMT
Subject: CN=2cd861850d65ae8b5bb4bc1634b905319cf8caa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:01:6b:49:23:ef:71:62:5d:28:bb:c6:d4:a2:
35:82:c1:e1:cf:e3:f4:e0:30:b9:39:a7:83:ac:91:
25:e8:e4:f0:b7:11:8e:de:b1:6f:7a:1c:26:c9:00:
8a:ed:ee:8c:0b:a6:b8:47:49:9a:08:9c:8a:d5:e8:
51:91:80:76:df:7b:23:d1:38:78:13:76:08:d5:7c:
a3:80:91:51:0c:98:23:45:24:45:b7:b5:87:20:a3:
9c:fc:05:18:39:c5:0a:cb:c4:27:2c:de:d8:6e:15:
61:32:3e:03:38:ea:66:f3:d6:7d:08:a1:be:81:74:
80:a0:e4:86:cf:fd:88:95:0b:5a:da:a6:2a:15:66:
c1:4d:55:f1:a3:0b:e1:ed:78:34:f9:95:20:c6:46:
b4:74:4a:a3:fe:23:79:f4:6d:c2:23:d3:76:3f:92:
f1:fe:61:e3:01:ff:23:0d:e0:08:eb:0a:f7:2a:27:
10:dc:47:0e:b1:f0:b0:2f:37:bd:30:b1:5f:e9:e8:
2b:a1:92:2d:a3:78:78:7e:1d:c0:b3:25:f1:ae:a1:
e1:c4:0a:cf:15:ca:3e:42:e2:d1:5c:a5:ba:eb:b8:
af:6b:44:d8:45:e7:b5:94:e8:2b:e6:98:de:04:f8:
e5:a2:c6:30:b8:2d:50:8c:18:28:54:37:72:a7:b4:
d5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D8:61:85:0D:65:AE:8B:5B:B4:BC:16:34:B9:05:31:9C:F8:CA:A8
X509v3 Authority Key Identifier:
keyid:AA:BC:9F:64:A4:8E:EA:55:21:E1:E9:FA:A8:10:79:8F:08:95:46:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qryfZKSO6lUh4en6qBB5jwiVRrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/qryfZKSO6lUh4en6qBB5jwiVRrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/qryfZKSO6lUh4en6qBB5jwiVRrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:8c:e8:ce:8c:8a:b8:44:81:aa:b2:0b:66:a1:dd:38:b1:22:
a6:12:f3:fa:ca:26:a1:c1:5a:a9:b2:cd:94:6c:32:97:15:4c:
c8:96:7a:1a:3f:f5:61:e1:64:e2:5a:c4:a7:d1:b5:4d:f4:b0:
89:4c:b5:40:75:2c:40:96:b1:91:5e:01:d7:ea:81:f5:0f:f1:
03:a4:5c:62:0f:b5:2a:b3:bf:1b:67:0d:67:81:e7:2b:7e:c7:
89:16:b5:d4:ff:68:c4:91:01:ae:6c:b2:48:68:1e:e4:76:bc:
50:d9:29:91:22:ee:14:0c:4a:e3:e3:57:8b:cc:c3:b9:c0:b3:
cd:55:03:1e:26:33:02:25:32:62:38:91:4e:34:c3:54:fa:44:
aa:a7:27:5b:3f:86:d8:90:63:32:8c:2b:3e:98:7c:d0:55:a6:
13:52:9c:95:58:68:c9:55:f5:3b:8d:d9:ca:1f:e0:06:1f:dd:
7a:35:af:79:e1:55:fa:51:dd:d5:77:b3:d9:90:33:a4:46:88:
87:39:d8:43:59:b1:0f:16:f5:83:81:aa:c0:90:8e:24:6f:12:
f5:d6:81:7a:04:e5:01:55:7d:88:a8:5f:4d:07:24:ce:1d:9e:
74:90:39:23:9f:4e:de:81:d5:59:06:c6:01:21:f5:fb:b3:29:
38:6c:7a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:53:20 2026 by rpki-client