Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
File: Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft (raw, json)
Hash identifier: BJF/amn/CrDZ/vA2emuO060IhkXQg4i9t1gkorCXkxw=
Subject key identifier: 08:4A:B8:EB:00:93:4A:B8:5E:87:90:CF:24:52:65:BD:C2:D4:B7:54
Authority key identifier: 43:CF:41:61:93:A1:C2:ED:30:56:B6:47:E5:A4:65:03:14:8E:38:24
Certificate issuer: /CN=43cf416193a1c2ed3056b647e5a46503148e3824
Certificate serial: 01A0FC7D573524735364B62F6F9B3B41BE70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
Manifest number: 0B42
Signing time: Fri 02 Oct 2026 12:01:07 +0000
Manifest this update: Fri 02 Oct 2026 12:01:07 +0000
Manifest next update: Sat 03 Oct 2026 12:01:07 +0000
Files and hashes: 1: Q89BYZOhwu0wVrZH5aRlAxSOOCQ.crl (hash: fWOMjflciMUl3wdm25qA6b4PRe7jP70nsEgimEqYbm4=)
2: uRy6lNHq57rdX7_VPdepBDiNmnc.roa (hash: 65Rm9CIooU3CDnzNITl4VhD3i1B6DOi7f6KdO4ec990=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 12:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:7d:57:35:24:73:53:64:b6:2f:6f:9b:3b:41:be:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43cf416193a1c2ed3056b647e5a46503148e3824
Validity
Not Before: Oct 2 12:01:07 2026 GMT
Not After : Oct 3 12:01:07 2026 GMT
Subject: CN=084ab8eb00934ab85e8790cf245265bdc2d4b754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2d:4c:8b:b6:58:a5:a9:93:b5:7c:68:cb:4d:
03:85:de:00:fd:17:64:6c:11:be:43:b8:3c:11:e2:
3f:b4:3f:6a:76:65:21:4c:4c:3e:0c:f8:52:79:fe:
45:58:92:57:59:82:c0:13:44:1c:87:82:4c:c3:da:
11:35:f2:24:b5:58:47:32:f8:4a:66:70:38:52:c5:
c4:24:5c:fb:a4:57:af:50:66:34:c4:67:1c:ad:29:
7e:97:ac:af:96:65:05:20:9b:6f:de:25:21:8e:20:
5e:15:67:32:be:96:53:f6:f0:36:aa:93:5c:9a:84:
48:30:06:5a:39:8d:ae:ec:3b:fe:cb:48:5f:d9:06:
c2:ba:52:f1:05:96:2e:14:79:e1:3f:1d:0e:8a:a2:
10:0c:e6:dd:06:7c:38:f4:6a:40:50:41:42:a5:de:
2c:bc:45:75:00:ee:1b:02:18:f9:70:de:e3:20:2d:
d4:fc:9c:b2:e5:c2:a7:8c:d9:06:c4:b3:bd:f8:2e:
62:b7:65:62:64:31:70:9d:13:2a:dd:97:4f:d0:15:
9e:81:e6:32:e7:09:c8:04:cd:4b:80:d5:17:c9:3e:
17:9b:6c:fe:fd:0f:48:77:7f:d1:b0:7b:80:b2:01:
0e:a7:31:23:41:15:46:ed:d8:18:fc:2b:44:38:99:
1e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4A:B8:EB:00:93:4A:B8:5E:87:90:CF:24:52:65:BD:C2:D4:B7:54
X509v3 Authority Key Identifier:
keyid:43:CF:41:61:93:A1:C2:ED:30:56:B6:47:E5:A4:65:03:14:8E:38:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:76:01:47:3e:29:5e:43:04:05:e0:ab:62:d6:24:43:ea:97:
c8:1d:f5:6d:c8:33:32:31:17:d4:6f:25:8d:0c:e6:70:75:44:
13:de:1c:60:4a:2a:2c:2f:bb:79:52:99:ec:1a:db:4c:75:9c:
c9:a6:9c:13:8d:cf:11:b1:33:13:c2:a1:62:d8:04:3f:67:fa:
e0:f5:91:81:27:df:07:3e:a5:2e:92:9f:be:ee:09:5c:03:c5:
4b:0a:1f:2e:36:51:d3:97:91:18:99:76:cb:f4:64:71:26:dc:
90:8f:c2:3c:91:30:ce:dd:ca:1d:c7:5b:28:a8:92:7a:5d:95:
e2:4a:ce:4c:e3:e7:26:23:31:34:55:a3:ec:ca:4d:5c:34:12:
e7:63:8a:79:ee:18:f1:53:3d:b7:12:c3:f8:b0:a2:eb:88:59:
5a:55:8f:32:f8:72:ae:4d:16:f3:63:42:a5:c9:35:eb:6c:0f:
c4:d4:ba:63:cc:d6:9c:86:3e:ee:bd:6d:ad:b4:de:13:53:e1:
77:a0:b6:a1:f1:94:1c:00:0e:37:1c:1e:ae:bd:f4:c8:17:55:
db:5c:7f:de:aa:14:a1:8c:dc:4b:e2:41:ef:db:cc:fe:90:df:
13:f2:28:df:e8:db:a0:69:dc:83:5d:45:ad:eb:dd:a7:1c:cf:
ec:33:38:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:09:41 2026 by rpki-client