Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
File: Q9CWU4TcREh6gxcabV0FqUpq1nw.mft (raw, json)
Hash identifier: y5yQOBCWJqFvT1NxFpJ92r79mqWNwhAnkbBsSJ3/qPA=
Subject key identifier: 22:9D:4E:E1:8B:72:7A:26:40:64:04:E9:F9:E4:28:7A:88:19:11:0E
Authority key identifier: 43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C
Certificate issuer: /CN=43d0965384dc44487a83171a6d5d05a94a6ad67c
Certificate serial: 01A1065BF2D7DAEF36CE786BF098D1F6CFDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
Manifest number: 0528
Signing time: Sun 04 Oct 2026 10:00:51 +0000
Manifest this update: Sun 04 Oct 2026 10:00:51 +0000
Manifest next update: Mon 05 Oct 2026 10:00:51 +0000
Files and hashes: 1: Q9CWU4TcREh6gxcabV0FqUpq1nw.crl (hash: jDt/A44BEsdL5cLVLT06PJHG+5Xt4g6Wmr0bnQ8DexQ=)
2: m_rKth0WblNoPGrjkNfcn6MmMxc.roa (hash: S0D1n4kwGONLCb2yvnuQTTGiDLAbMsWlgwxGBJpbiPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:5b:f2:d7:da:ef:36:ce:78:6b:f0:98:d1:f6:cf:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d0965384dc44487a83171a6d5d05a94a6ad67c
Validity
Not Before: Oct 4 10:00:51 2026 GMT
Not After : Oct 5 10:00:51 2026 GMT
Subject: CN=229d4ee18b727a26406404e9f9e4287a8819110e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0f:a9:86:1d:96:33:a5:ac:d1:ac:34:4e:c7:
58:bd:f4:00:82:92:34:c2:bb:57:95:3a:37:b0:b7:
3d:86:b3:82:31:87:b2:48:50:a8:14:46:6b:47:23:
4a:a9:c5:b5:68:c8:56:a5:7e:17:bc:f1:31:7d:6e:
57:4a:ac:e1:f0:c4:d0:9b:89:a6:c4:4c:30:6c:07:
d9:c9:62:7f:c4:89:32:15:1f:97:7e:4a:a4:83:32:
9d:12:22:53:3d:d8:a3:f2:48:5d:62:cf:fb:9f:5e:
6c:b4:80:70:0f:39:6d:8e:dc:95:a5:12:96:78:33:
39:da:8c:20:c1:5b:17:77:b1:67:f6:ae:b5:f1:0d:
4f:8e:c3:d2:6d:ef:f4:44:a6:4a:2c:87:27:3e:00:
62:e0:97:96:7c:90:cf:45:b2:c2:6d:14:e5:48:99:
1f:d2:20:10:eb:7f:61:f7:24:79:b8:cd:0d:44:6c:
00:8f:77:49:56:75:96:ab:cc:7e:e5:6f:58:5f:b0:
b2:4c:8e:82:bd:a3:8b:3c:a6:04:82:99:92:a1:fc:
6b:72:aa:f6:2c:37:06:6a:93:54:f8:1d:10:4c:15:
80:26:f2:67:d0:1f:ed:9e:89:8e:f9:5e:50:d3:6f:
b9:db:34:40:07:27:ef:90:39:75:4c:d8:0e:1d:ec:
f5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9D:4E:E1:8B:72:7A:26:40:64:04:E9:F9:E4:28:7A:88:19:11:0E
X509v3 Authority Key Identifier:
keyid:43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f2:c5:61:eb:c3:62:a8:47:7f:10:3d:88:01:ae:85:a6:d8:
4f:de:68:cd:5b:ad:11:1d:88:da:dd:53:08:0b:a0:97:c2:44:
0c:9b:b7:a6:72:3d:35:38:c5:ef:29:59:73:d2:1f:92:80:ff:
54:b6:59:d3:f4:23:da:d1:f9:b9:b2:66:d5:da:89:e0:2a:7c:
67:a1:3c:eb:0e:e5:34:2d:c8:00:0e:63:fc:2f:d0:c8:41:06:
23:dc:f6:cd:36:59:f3:c3:f1:63:28:28:32:10:49:c8:c4:c6:
1f:e4:36:f1:fa:4d:df:54:10:b0:5f:ed:29:dc:a4:1e:e2:10:
b6:d2:67:aa:b3:e0:44:33:00:7e:28:ad:ef:6e:8b:64:dc:21:
eb:e8:1d:e0:da:67:d4:51:a8:20:98:15:7f:16:7c:07:d5:e8:
19:1f:f9:47:b2:a5:29:23:76:1f:a2:7e:01:57:6e:fe:5a:57:
f5:20:b2:76:06:bb:dd:78:05:82:18:d9:16:fb:33:c9:8e:cd:
c8:c4:02:85:1c:aa:70:a9:1c:30:b6:50:2a:1b:f7:4d:1f:ac:
81:89:c9:53:03:bb:94:19:be:21:71:79:c6:83:57:a0:ef:68:
93:09:d5:a2:33:a9:ef:f4:d8:09:86:62:4c:b5:39:14:b8:0e:
54:15:83:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:33:15 2026 by rpki-client