Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
File: QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft (raw, json)
Hash identifier: q0pYwVTQjFHGDi8u8XkUmCMfJ/dN8t2q7rd3l/e7uM8=
Subject key identifier: 49:AF:E8:EE:96:B4:C0:D2:35:8C:BE:21:98:61:23:90:75:3E:AF:21
Authority key identifier: 43:0A:56:48:E1:D4:6B:66:2F:4D:1D:CC:06:6D:39:42:7C:65:F0:D1
Certificate issuer: /CN=430a5648e1d46b662f4d1dcc066d39427c65f0d1
Certificate serial: 01A0E13D5BB35BEE1A898C9E5F71BA265EB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
Manifest number: 1A75
Signing time: Sun 27 Sep 2026 05:01:29 +0000
Manifest this update: Sun 27 Sep 2026 05:01:29 +0000
Manifest next update: Mon 28 Sep 2026 05:01:29 +0000
Files and hashes: 1: 9talkSrwDgnaCxDO4CeVrwCobYU.roa (hash: YP25gB5idoPvdLAQ6DcYcc8fU/wCBS3MFRk7Mh6hG84=)
2: QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl (hash: aUypn6ZuOnvWv+yurMpTIwAwatvmI6Gr8TbsoGGtuBY=)
3: pe0y6D9YFwdUoOdD0yoX4k8o7Rg.roa (hash: lD1kQU1t2awKdohr2NZ+PC7BmU3yOJRyp13CGfdz+Js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:3d:5b:b3:5b:ee:1a:89:8c:9e:5f:71:ba:26:5e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430a5648e1d46b662f4d1dcc066d39427c65f0d1
Validity
Not Before: Sep 27 05:01:29 2026 GMT
Not After : Sep 28 05:01:29 2026 GMT
Subject: CN=49afe8ee96b4c0d2358cbe2198612390753eaf21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2a:55:09:e8:b9:24:ea:2f:d2:00:cb:d9:fd:
cb:17:62:bf:ce:98:d2:92:83:05:f0:27:d5:2c:d2:
84:bc:5e:81:4a:87:6d:52:2f:fc:9e:8d:eb:ef:4a:
49:a2:5a:ab:81:c6:08:61:39:52:08:30:99:36:57:
ff:1e:f4:12:cd:7b:f3:47:c0:3d:f9:fa:88:b1:19:
61:b7:88:d3:3d:4a:7d:ba:21:76:c4:c5:89:fc:a8:
19:45:63:4b:56:35:12:fc:97:61:f4:e6:9a:2a:81:
32:4e:f4:cc:dc:7d:bb:b8:9b:e8:7c:95:0f:67:49:
0d:66:ca:75:bf:db:a7:66:1e:10:b7:9e:a5:58:e1:
c7:73:de:89:98:27:23:b2:fd:6e:77:33:4c:52:c3:
26:08:f5:a1:77:6f:e5:7d:c1:a8:22:be:eb:1d:04:
d0:02:6c:21:38:57:9a:d0:e0:9a:4d:c3:f5:34:a3:
f2:39:13:be:53:87:23:5c:a7:99:a9:85:16:87:37:
32:47:ec:d4:03:e4:ec:c6:24:7e:5d:fd:38:76:90:
79:9e:9e:4a:c9:97:a6:9d:41:70:be:41:c8:75:64:
8a:8c:8d:8d:c7:1c:2d:9c:2d:c7:c7:74:9a:27:26:
63:c3:9d:4b:bc:65:2b:8c:86:1b:b6:69:7d:4e:43:
58:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:AF:E8:EE:96:B4:C0:D2:35:8C:BE:21:98:61:23:90:75:3E:AF:21
X509v3 Authority Key Identifier:
keyid:43:0A:56:48:E1:D4:6B:66:2F:4D:1D:CC:06:6D:39:42:7C:65:F0:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:80:30:9d:54:06:b9:c4:bb:3a:bd:d2:dc:72:82:91:fb:39:
53:be:7d:ae:21:e3:7a:23:1a:af:0a:a5:9a:e7:ad:19:22:f1:
7a:6f:e2:1a:c9:ab:ac:7f:52:2f:11:3e:99:77:df:5b:aa:54:
7c:b0:b5:b4:d1:c0:8a:14:26:a2:c4:fd:89:38:59:4a:a1:fd:
8b:81:a8:36:c6:6b:cf:4c:d1:92:4f:ca:45:cd:e6:da:1f:ea:
cc:87:a0:6e:ba:d8:d6:b2:f4:ea:38:48:e1:d3:7e:3f:5f:f1:
cd:5d:b0:87:17:e0:36:08:97:a8:97:91:0d:96:b9:cc:f9:ba:
20:86:48:57:15:23:86:59:e3:bf:b7:dd:b8:b2:95:7b:4d:16:
00:41:9e:b2:78:ca:eb:b4:42:22:b1:25:a6:37:db:e4:7b:87:
e6:19:73:2a:8e:d3:0f:2f:ea:5e:12:97:8d:6d:42:cf:29:62:
29:bf:c6:78:d5:27:40:db:96:72:ff:7e:47:8a:1b:f2:98:b2:
e6:05:d0:56:5b:f8:36:90:a5:ff:de:4f:59:51:1d:18:5e:ec:
5c:9c:cc:ac:42:c5:55:dd:88:ee:1f:b4:fc:71:f5:4f:c0:fe:
5f:16:68:f6:cd:53:44:69:0c:7f:34:3e:5b:68:c7:b7:26:b3:
98:9b:bb:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:35:10 2026 by rpki-client