Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.mft
File: qfNHED7zSa2C8basQ-dsD_o4wvg.mft (raw, json)
Hash identifier: PEozhE06P4zWyUXTCj+VgWGiiRCbJnsnBNKSvvwdfY4=
Subject key identifier: C9:B2:B2:70:B9:D4:33:9A:95:BB:82:F7:5B:62:12:49:C8:92:98:53
Authority key identifier: A9:F3:47:10:3E:F3:49:AD:82:F1:B6:AC:43:E7:6C:0F:FA:38:C2:F8
Certificate issuer: /CN=a9f347103ef349ad82f1b6ac43e76c0ffa38c2f8
Certificate serial: 01A0F2D66F535E0B4D3309D25FF7E311DF25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfNHED7zSa2C8basQ-dsD_o4wvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.mft
Manifest number: F7
Signing time: Wed 30 Sep 2026 15:02:14 +0000
Manifest this update: Wed 30 Sep 2026 15:02:14 +0000
Manifest next update: Thu 01 Oct 2026 15:02:14 +0000
Files and hashes: 1: Cegt9gCk36CfyQoZLzS4cnrOmWA.roa (hash: yHvXAS+TMxPI4zuMGTC5jZ53ix1/BV7IdsaANR877aM=)
2: qfNHED7zSa2C8basQ-dsD_o4wvg.crl (hash: S6ogtEk5KggWRC6RZn/1g4yz0fiU/kTzvIro3xv41V4=)
3: voGOvW0BRa27Yr9p1xeqy3udyvc.roa (hash: JKI8fmA0jDEWhuhuTal1D06exvXzvzQH3NDd7ekumtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfNHED7zSa2C8basQ-dsD_o4wvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 15:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:d6:6f:53:5e:0b:4d:33:09:d2:5f:f7:e3:11:df:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9f347103ef349ad82f1b6ac43e76c0ffa38c2f8
Validity
Not Before: Sep 30 15:02:14 2026 GMT
Not After : Oct 1 15:02:14 2026 GMT
Subject: CN=c9b2b270b9d4339a95bb82f75b621249c8929853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:af:13:da:3f:d4:15:ba:6e:88:61:8d:c9:51:
0f:52:e9:83:0b:2b:c6:48:a7:8c:d3:1c:9c:44:f5:
94:1d:c6:ef:ad:40:b0:9d:31:7c:f3:80:1d:ff:98:
00:54:be:2c:3b:d5:1c:2b:e9:fa:0c:a1:84:b9:ca:
23:19:53:bd:4b:2e:29:c1:15:e4:8d:49:28:c3:dd:
b0:13:4f:4c:1a:b4:2f:46:0c:1d:1a:28:ab:0e:a1:
28:44:12:81:a6:ab:07:04:9f:66:c9:2b:51:4a:cb:
4c:35:15:08:eb:3a:84:08:1a:c7:07:de:7a:e3:0b:
6a:9b:b6:78:ac:0e:98:68:dc:38:7c:97:31:59:36:
b6:a8:84:0f:f3:35:53:70:f7:f1:53:fb:2b:8e:56:
0c:80:ad:55:93:0e:c1:61:61:c9:a1:aa:9b:76:b4:
75:5e:e7:92:23:3e:79:65:98:b6:02:6e:81:0e:1e:
ac:7e:81:bf:ad:bf:bb:7a:b6:cd:a1:82:79:b6:22:
1f:19:19:95:88:b7:2a:4d:99:6c:7f:e1:79:37:65:
c2:d4:00:87:b8:f6:55:44:08:6d:2d:3e:82:41:82:
be:85:ea:66:35:44:20:ae:69:74:98:94:7b:28:ed:
ad:dd:a6:72:99:51:e9:b1:83:2f:76:43:d8:86:b2:
4a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B2:B2:70:B9:D4:33:9A:95:BB:82:F7:5B:62:12:49:C8:92:98:53
X509v3 Authority Key Identifier:
keyid:A9:F3:47:10:3E:F3:49:AD:82:F1:B6:AC:43:E7:6C:0F:FA:38:C2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfNHED7zSa2C8basQ-dsD_o4wvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:37:77:42:fb:ee:5a:ed:99:cc:17:b5:0e:4b:87:d4:9d:a1:
b0:2a:5d:68:2a:b3:b3:ae:13:75:ec:d6:73:75:1e:d9:64:90:
d0:d9:4f:91:20:dd:32:ff:0d:15:fe:ce:59:be:4d:ef:ea:f8:
5f:15:ed:57:f1:a2:3c:bd:bd:85:b7:f3:06:00:c4:8c:2e:f0:
01:05:37:f1:51:d9:03:36:c3:8c:0b:ce:75:9c:46:72:25:a8:
c5:a0:ca:de:46:cf:ea:b4:41:8a:4e:6e:f8:97:03:49:d0:bb:
f4:f2:66:5c:ff:87:02:4e:52:4b:0a:f7:36:bd:c6:be:ff:b2:
f2:32:bf:4c:16:87:dc:1b:12:79:f4:6f:97:1b:13:b8:a2:df:
08:3a:8c:90:55:4a:7c:7b:c5:5e:ec:5c:01:25:74:05:1d:b2:
e2:16:fb:03:18:04:7e:c5:66:ea:60:0b:0b:36:6b:14:8f:dd:
13:b9:79:99:74:53:dd:30:66:8b:5d:7c:cb:1b:11:f5:e9:f6:
e2:95:7f:64:11:92:3b:1f:af:15:a6:32:1d:b9:8d:0f:cf:30:
f1:0e:f2:47:48:4c:85:80:25:ea:d9:2f:79:53:72:cc:59:6e:
f6:69:c1:76:e6:2d:3a:42:9f:fb:c9:71:95:54:f2:4f:57:b4:
58:74:c6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 01:30:47 2026 by rpki-client