Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
File: Q9CWU4TcREh6gxcabV0FqUpq1nw.mft (raw, json)
Hash identifier: n9lE52uTolBsXZDlbPuOfuscAhZyS2lTh2p7IvA3rVw=
Subject key identifier: 38:46:98:43:79:23:58:D3:FC:18:03:98:10:A6:AC:F6:15:AF:27:A0
Authority key identifier: 43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C
Certificate issuer: /CN=43d0965384dc44487a83171a6d5d05a94a6ad67c
Certificate serial: 019F9391FE421AA7EB67DDA977562F2AC707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
Manifest number: 0468
Signing time: Fri 24 Jul 2026 10:00:46 +0000
Manifest this update: Fri 24 Jul 2026 10:00:46 +0000
Manifest next update: Sat 25 Jul 2026 10:00:46 +0000
Files and hashes: 1: Q9CWU4TcREh6gxcabV0FqUpq1nw.crl (hash: Ui4E/4c+7QgG+EssK8USQuoh9ckYKE21eFDxXFbfZ4c=)
2: m_rKth0WblNoPGrjkNfcn6MmMxc.roa (hash: S0D1n4kwGONLCb2yvnuQTTGiDLAbMsWlgwxGBJpbiPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:fe:42:1a:a7:eb:67:dd:a9:77:56:2f:2a:c7:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d0965384dc44487a83171a6d5d05a94a6ad67c
Validity
Not Before: Jul 24 10:00:46 2026 GMT
Not After : Jul 25 10:00:46 2026 GMT
Subject: CN=38469843792358d3fc18039810a6acf615af27a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c5:9e:c8:a6:d0:93:1c:1e:9a:89:5f:9e:1c:
1e:d5:6e:70:55:66:c9:25:a2:44:74:11:df:c3:cb:
51:d6:dc:6d:c6:50:e6:7e:a1:e7:b4:20:fd:d7:d4:
3b:9f:b9:8c:da:81:11:3c:c2:23:43:a0:41:a1:2a:
8a:6c:f4:b3:2e:10:15:3b:af:33:39:06:e9:19:06:
8c:91:e8:f6:32:2f:d6:fd:b4:b7:16:f6:6f:76:07:
c0:b9:d8:90:5c:07:ce:e5:69:c3:6c:b8:25:47:7b:
96:4e:8f:63:62:6e:98:0f:8d:8d:38:3c:04:3b:e5:
47:36:09:b3:45:f0:8e:75:89:8a:da:03:eb:a4:d4:
aa:98:e3:ec:a4:d5:bc:4d:43:66:9d:74:97:4d:00:
9e:99:b0:21:94:9d:5d:c3:b6:b0:b8:99:ec:39:ef:
8e:33:75:48:fd:71:28:bd:68:f8:86:44:cc:98:58:
a5:e9:39:91:2f:d5:c7:67:bf:76:fe:37:fc:16:83:
c3:c5:35:e6:76:ed:e5:b7:eb:09:c0:7e:9d:dc:b5:
80:d7:74:35:84:35:96:43:70:07:c6:70:94:27:3c:
32:b3:39:3d:ec:e9:12:0a:e2:01:12:75:52:63:3f:
12:e2:e8:25:7a:9b:68:87:69:3f:6f:4f:41:d8:b7:
aa:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:46:98:43:79:23:58:D3:FC:18:03:98:10:A6:AC:F6:15:AF:27:A0
X509v3 Authority Key Identifier:
keyid:43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:1b:6f:cf:75:ed:ff:0a:09:cc:a2:3d:1b:b7:f2:4f:87:56:
42:f3:1e:f7:8c:99:95:42:13:61:e5:04:84:9f:76:b9:8d:32:
48:d6:9e:85:21:a9:61:31:4b:03:7e:eb:35:63:27:3a:11:6e:
00:91:ba:d3:80:28:c5:4d:45:73:7f:1f:7b:bf:fb:49:6a:0f:
54:88:41:9f:4b:a8:68:67:c3:82:cf:b8:8f:92:ce:38:dd:a9:
2c:de:25:be:dc:86:bf:1e:7a:fe:0f:58:ee:2e:b8:77:ff:7d:
73:63:25:77:b1:b0:e2:70:a6:02:1f:b5:7b:eb:46:7d:58:4c:
9e:75:2e:ac:20:cd:f8:ff:99:a0:2f:46:1a:10:a9:4b:4e:14:
57:14:b1:67:e0:69:f5:9f:5b:62:58:6d:6a:7a:6f:8b:16:a3:
1b:b3:45:53:e4:8a:9f:a5:0e:b9:f5:2d:98:a1:e6:57:be:d4:
95:15:6d:e7:ff:9e:3a:ab:55:10:a9:84:89:27:b8:80:7a:7e:
ea:40:b1:51:c1:3a:0d:77:52:c1:88:1e:ec:16:0d:cc:31:72:
70:47:1c:ff:cb:5b:5c:3e:b7:75:3f:6d:bb:e9:ad:bb:cf:d3:
5c:b4:86:19:b0:5b:11:25:ba:17:4a:4a:5d:fc:80:21:28:05:
a9:b6:a2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:03:35 2026 by rpki-client