Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
File: qCoCPr2xLpceeocp2Cankkz36DI.mft (raw, json)
Hash identifier: GnKIkDI6SlyWOzQ66XzdUHffjwVUOyPDVxsscgIe4eY=
Subject key identifier: 54:F6:D2:2A:9F:0B:2A:10:66:A1:F0:09:36:3C:CD:31:A8:E4:D1:E4
Authority key identifier: A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32
Certificate issuer: /CN=a82a023ebdb12e971e7a8729d826a7924cf7e832
Certificate serial: 01A0DC854FA6D0DFAE01F0EA6800BEBA2BF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
Manifest number: 0F8F
Signing time: Sat 26 Sep 2026 07:01:59 +0000
Manifest this update: Sat 26 Sep 2026 07:01:59 +0000
Manifest next update: Sun 27 Sep 2026 07:01:59 +0000
Files and hashes: 1: A-8nhpgeRouHY2UnNZP3Ty36Mq4.roa (hash: 0Z1tKMjOQH8GDFQdN2zkZ1XfpKKTrB+7t0AWIQlWOsU=)
2: nUmVeUkNC8_ViD_UA6x1PEPc9jI.roa (hash: SFQUWNNE8spFBp4DjpdKZ/dLlID0cBvRZXOgsiCgoVM=)
3: qCoCPr2xLpceeocp2Cankkz36DI.crl (hash: FRAbiLjFDFpDYMU6LA1ejoVDHlNJJAoiSgEvBWlTQGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 07:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:85:4f:a6:d0:df:ae:01:f0:ea:68:00:be:ba:2b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82a023ebdb12e971e7a8729d826a7924cf7e832
Validity
Not Before: Sep 26 07:01:59 2026 GMT
Not After : Sep 27 07:01:59 2026 GMT
Subject: CN=54f6d22a9f0b2a1066a1f009363ccd31a8e4d1e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:61:6d:b1:96:93:85:9e:70:ba:cc:e2:7b:3f:
0f:87:84:49:e1:f7:98:3e:d6:99:58:bd:9c:39:07:
ff:05:db:a4:06:e3:3f:7a:8d:b7:f5:6c:ab:68:61:
82:fe:e8:e8:4e:a0:85:bc:6f:03:0d:6b:ba:0d:ee:
9a:0a:aa:51:0e:a4:6a:e0:dd:90:e9:42:56:a1:b6:
0a:62:d5:ab:3b:ff:02:2d:fc:46:34:e5:a4:ad:c3:
f6:5b:cc:3c:09:a4:27:34:f8:90:99:54:00:b6:74:
f7:ee:23:fb:80:7f:1e:4e:cc:b8:36:0e:ca:46:20:
e2:6d:ab:06:a0:78:3a:fc:2e:32:82:78:3a:76:80:
1b:e4:fb:c7:0f:cf:61:31:4a:56:e4:ef:ca:e6:ee:
ec:bc:e6:a9:06:44:e2:fe:ce:54:5c:81:41:4d:1a:
f7:48:23:b4:91:e0:66:c3:71:8f:c8:b2:99:17:32:
ae:cb:01:a1:3f:92:dc:51:65:5d:64:96:66:2d:58:
01:d4:1e:a8:37:42:b4:5e:61:92:91:36:01:5a:6a:
34:61:5f:54:f7:bb:cd:38:be:80:16:e0:22:84:3c:
e2:52:b4:64:72:86:d4:e7:07:8c:2f:de:e9:c8:78:
16:59:0f:7d:f7:db:d0:2e:93:fa:f9:47:9b:f2:7e:
95:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F6:D2:2A:9F:0B:2A:10:66:A1:F0:09:36:3C:CD:31:A8:E4:D1:E4
X509v3 Authority Key Identifier:
keyid:A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1a:6b:df:63:07:a7:a8:30:24:a5:fc:4d:63:f4:74:35:51:
e2:40:97:7d:00:c6:33:9b:04:6f:3f:86:c3:75:cc:f8:4d:1b:
bf:58:39:6b:46:be:fd:f4:64:d2:86:e4:81:33:e4:13:29:16:
d3:9c:6f:78:57:e9:2b:c0:c4:b6:c3:94:8f:f9:5b:99:48:46:
59:d0:40:f8:1f:c2:75:20:d5:a1:f8:5e:c1:2d:b9:a1:36:0d:
e5:dd:c2:af:ee:9f:a3:74:f0:97:7d:1d:69:b8:7b:96:02:0a:
57:88:ef:a8:fe:ea:29:1c:12:ba:9a:03:a0:70:b1:5d:7c:53:
9f:70:8b:6c:85:5c:21:de:27:fe:d8:20:11:7d:3a:23:f3:08:
6c:84:59:23:16:d1:b3:97:d4:ec:7f:88:71:7d:26:bf:1d:0c:
e9:47:c3:43:ea:95:88:75:de:6e:ef:25:78:a4:e8:21:e6:ac:
05:5a:e2:d7:a8:76:44:79:00:ea:4e:0b:23:ff:7f:62:fe:e8:
bb:ec:10:49:61:3e:e3:3d:8d:90:95:03:84:1e:ca:fa:dc:2f:
f5:c5:56:99:c9:ab:af:1a:9e:8b:ba:22:24:f9:ac:2c:47:30:
0b:0e:d9:57:62:ec:3f:a6:8c:41:49:02:db:bf:97:43:e3:19:
4d:3f:a7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:46:28 2026 by rpki-client