Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
File: Q664_1W9RlALJ9uc8d7CVidrK2o.mft (raw, json)
Hash identifier: yP0witZBiTE7egiBwq+unwIQ8kywQP2cb6iX+faIyNs=
Subject key identifier: F9:9D:09:C9:EB:28:C3:4C:3F:6B:E1:18:76:75:31:46:7C:AA:41:08
Authority key identifier: 43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
Certificate issuer: /CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Certificate serial: 01A0DBE03DAB90487CA62432C2FCF1AA323C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
Manifest number: 0768
Signing time: Sat 26 Sep 2026 04:01:40 +0000
Manifest this update: Sat 26 Sep 2026 04:01:40 +0000
Manifest next update: Sun 27 Sep 2026 04:01:40 +0000
Files and hashes: 1: 0jAsd4jHu2P4YiShWU_tmFjG-Xo.roa (hash: 6hlBHdr9FEW88angOioMbp5usn4/nEWFUcWTWPzZueU=)
2: Q664_1W9RlALJ9uc8d7CVidrK2o.crl (hash: dwg+ew3Q/2ldejZa8nWsYRLfGtZdtRe/JZd6Yz9g2HE=)
3: kniFntdxPbS1jBvN0hKNK7QT914.roa (hash: Hc1QVDwdt4HeTUIYJSo4nwn3K1JUnhk+8tjIWHMrCAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 04:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:e0:3d:ab:90:48:7c:a6:24:32:c2:fc:f1:aa:32:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Validity
Not Before: Sep 26 04:01:40 2026 GMT
Not After : Sep 27 04:01:40 2026 GMT
Subject: CN=f99d09c9eb28c34c3f6be118767531467caa4108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:36:c7:c4:a2:18:c2:80:69:e2:b6:6f:77:ba:
2c:a6:b9:3d:17:e0:61:8e:fc:89:5b:9e:ac:18:d0:
e8:b4:54:b9:80:97:bf:1f:1b:a3:a2:e3:5e:d8:a8:
7f:a2:e5:b8:ee:de:55:09:f3:65:ca:7a:1d:40:3b:
c1:1e:2c:84:20:00:91:79:f8:01:32:42:9a:64:93:
18:76:ff:2d:00:49:fc:c9:5a:86:99:c9:cd:6e:3d:
d8:a8:e9:c0:de:ff:d2:ad:20:73:d2:0d:91:35:a9:
59:79:dd:6f:1b:99:e1:5c:3a:73:07:af:dc:25:f7:
dd:c7:d9:e6:5d:04:08:41:87:f7:d9:ce:65:40:25:
5a:4c:da:5f:85:f7:59:a1:cd:7a:9a:e0:9d:0e:75:
51:69:cb:00:53:c0:a6:9a:18:38:f9:74:ea:7b:36:
52:f6:44:de:13:fd:54:e3:00:61:46:b2:ac:c9:a2:
0b:1d:8f:3b:8d:84:ba:8c:ae:14:75:f1:66:f4:2f:
78:9d:be:f5:e0:b2:7d:68:a7:5d:73:95:6b:52:d4:
88:bc:69:25:5a:01:e6:c6:a9:32:28:1c:83:06:de:
ff:0e:6a:b4:1b:43:9a:73:2c:c3:2e:f6:f9:76:17:
64:80:60:11:c9:b7:bc:a7:29:aa:77:0b:57:b9:9b:
e8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9D:09:C9:EB:28:C3:4C:3F:6B:E1:18:76:75:31:46:7C:AA:41:08
X509v3 Authority Key Identifier:
keyid:43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:77:33:d3:64:50:f5:4c:0a:d4:ee:52:46:af:2a:43:e0:93:
fc:65:8b:40:f5:8a:91:75:70:7c:b6:d8:3a:13:45:9c:9a:32:
09:73:88:50:06:b2:6b:de:7e:d1:65:28:52:dd:46:92:74:0b:
1f:64:26:af:a8:3f:7b:fa:1a:85:58:be:3c:42:0a:4c:52:1c:
f4:cb:5e:62:6e:0d:b6:d7:da:9f:62:75:52:22:40:1a:11:25:
57:a8:99:56:22:fc:3b:7e:1c:70:72:58:60:4e:76:ab:ca:ed:
46:1d:c4:fe:b1:f3:bd:6d:f4:d6:81:eb:04:7a:09:66:5d:2c:
bd:e2:cd:21:79:ad:6c:0c:72:25:55:82:9b:5b:79:ea:27:89:
3b:d9:02:36:9e:31:d1:4a:39:2f:47:3c:a0:97:b2:49:81:c0:
97:d7:dd:9f:2c:f7:90:68:f7:c6:79:68:89:8f:61:54:0c:8e:
ce:d4:9d:82:c8:0e:1f:8e:6e:c7:04:c5:f4:0c:5f:b8:35:fd:
d3:1e:30:25:f7:ea:13:33:92:49:53:ea:71:39:14:50:76:85:
0e:1a:e7:54:e2:a5:d0:27:5f:f3:4f:8a:53:4f:43:2c:bc:17:
70:48:55:4c:a7:70:82:0c:3b:d5:a3:f5:4f:08:8d:4d:ab:6b:
b1:00:8f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:13:36 2026 by rpki-client