Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft
File: qif1ErChAmXfKzRvFDpkXDgnQr4.mft (raw, json)
Hash identifier: DXC59fyVis3GbvRcaLpSqWf2JLNtG6/FjDz1hBNZDsQ=
Subject key identifier: 52:94:5A:68:09:5D:E6:9D:8B:06:E8:E8:24:12:25:2F:99:49:13:4E
Authority key identifier: AA:27:F5:12:B0:A1:02:65:DF:2B:34:6F:14:3A:64:5C:38:27:42:BE
Certificate issuer: /CN=aa27f512b0a10265df2b346f143a645c382742be
Certificate serial: 01A0D23734F96B3C4A0AFBB31C023018213A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qif1ErChAmXfKzRvFDpkXDgnQr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft
Manifest number: 0A83
Signing time: Thu 24 Sep 2026 07:00:28 +0000
Manifest this update: Thu 24 Sep 2026 07:00:28 +0000
Manifest next update: Fri 25 Sep 2026 07:00:28 +0000
Files and hashes: 1: WbPNn7HgAhOI-xcSV59jqV7XkIk.asa (hash: q10EmKCO+2aYQLSKZlFHbu0pSN1E6ixFHJPzyXaJy+I=)
2: jcc4yW3OL1E7Kj5I3mk5eumiQPQ.asa (hash: NfneSVCezm9SCYMNzPCLoGYj9M9/pdm5oImHAQYysyI=)
3: qif1ErChAmXfKzRvFDpkXDgnQr4.crl (hash: M3EoOnPOqzyBhr8sHWWiMGU3HSFD14b/6ciDGFEHoH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qif1ErChAmXfKzRvFDpkXDgnQr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:34:f9:6b:3c:4a:0a:fb:b3:1c:02:30:18:21:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa27f512b0a10265df2b346f143a645c382742be
Validity
Not Before: Sep 24 07:00:28 2026 GMT
Not After : Sep 25 07:00:28 2026 GMT
Subject: CN=52945a68095de69d8b06e8e82412252f9949134e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e1:25:c1:d8:e5:46:3e:09:d6:16:85:78:59:
a1:e0:48:61:73:c0:69:b1:89:51:cd:0c:74:29:d8:
ae:31:f6:4a:10:0b:72:53:e6:0c:de:e1:7a:44:32:
0d:de:4a:4d:bc:e6:28:42:83:f7:92:0a:cc:d1:e7:
0c:54:d2:c1:4b:76:ee:10:f5:5a:1b:62:c5:74:d2:
51:94:99:d5:83:5c:e2:5d:fc:ff:a3:56:a7:2f:5d:
9e:18:22:a2:96:3c:92:a9:3a:80:d0:34:d1:c9:6d:
d7:29:77:73:38:36:57:a3:cc:97:6e:b2:c0:8d:6c:
f1:c8:76:a5:9d:94:f6:9e:02:32:fd:98:25:bd:a9:
71:57:6f:91:be:44:c3:65:31:b6:3e:58:fe:3a:1c:
85:5a:15:d6:11:0f:6b:3c:dd:93:00:5a:64:2c:ec:
60:3d:6b:ae:3a:c1:31:c9:a6:a5:29:e0:f6:fd:91:
02:96:fb:f8:36:63:1f:25:b4:4f:9e:73:11:38:cb:
59:51:3c:40:e9:02:67:dc:79:ea:d1:db:e5:11:91:
5e:44:bb:f9:95:f2:da:d7:4b:3f:e5:3e:b8:c9:16:
10:7a:30:d8:5d:70:c5:63:81:d3:31:3c:37:27:e6:
e3:9f:57:29:2b:d5:17:80:01:84:44:86:8f:f7:6b:
4b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:94:5A:68:09:5D:E6:9D:8B:06:E8:E8:24:12:25:2F:99:49:13:4E
X509v3 Authority Key Identifier:
keyid:AA:27:F5:12:B0:A1:02:65:DF:2B:34:6F:14:3A:64:5C:38:27:42:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qif1ErChAmXfKzRvFDpkXDgnQr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:4e:70:42:89:69:25:c2:f4:9e:d4:cf:89:52:26:78:a7:e7:
56:50:5a:fb:fc:34:02:8f:4e:30:15:db:28:1c:6e:aa:9e:99:
43:15:0b:f5:90:4f:dd:df:95:3a:6b:cf:29:c5:7c:5a:a1:ef:
27:e9:b2:5c:4d:76:90:3a:e1:4f:df:b8:e5:25:d8:e9:df:9e:
de:22:c7:b7:1c:06:86:20:dc:68:c8:6f:06:45:14:40:4b:46:
9e:24:86:45:c0:ce:98:e2:77:77:d3:88:d4:a3:a5:42:f9:85:
c3:89:0f:c1:bc:5a:9b:1b:84:08:6d:39:69:b8:05:1f:22:b1:
20:d6:eb:89:c7:57:2f:ea:36:9e:bd:ae:b7:8e:a5:40:93:5f:
85:3c:07:40:a6:b3:4f:06:aa:b7:24:ac:04:2c:92:85:55:de:
88:ba:4f:70:4b:1d:5f:6e:c6:91:83:91:a1:7e:a5:ba:b4:51:
93:67:97:60:f3:e3:9c:c3:f0:8b:51:b4:66:44:d2:e5:8b:f1:
f9:1b:ab:cc:6a:3d:8c:68:9c:b5:a8:42:15:79:53:5a:41:f6:
65:32:0a:1a:81:ba:4d:bf:ff:ba:97:a2:18:66:53:ef:58:62:
ce:63:31:8a:25:57:21:bd:19:e1:b1:68:95:fb:03:a4:bd:87:
b4:bc:03:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:54:40 2026 by rpki-client