Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
File: fQtE5JJUnht9pTLIDDSIUMWkToA.mft (raw, json)
Hash identifier: T/4QhmtyWofW6//0gIY5AuEPH25CpcTj629Rm7oP//Q=
Subject key identifier: 4D:2B:F7:E7:F9:E8:41:95:28:99:8F:76:E1:9A:95:67:0C:00:BD:80
Authority key identifier: 7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80
Certificate issuer: /CN=7d0b44e492549e1b7da532c80c348850c5a44e80
Certificate serial: 01A0D0B6B6339A4F58E57A3628DABC67666C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 00:00:30 +0000
Manifest this update: Thu 24 Sep 2026 00:00:30 +0000
Manifest next update: Fri 25 Sep 2026 00:00:30 +0000
Files and hashes: 1: fQtE5JJUnht9pTLIDDSIUMWkToA.crl (hash: WiNlcMvHU0GnI7u4TPk6xHdsidyhHE/Xb2FAs2bIjMA=)
2: uTfCO2CQvjnwzxgvmE8a-0Q3PkE.roa (hash: uXLhOjnuwZec+7he1bSLRYP9Be1CjyK6Z98Hp44cEVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:b6:33:9a:4f:58:e5:7a:36:28:da:bc:67:66:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0b44e492549e1b7da532c80c348850c5a44e80
Validity
Not Before: Sep 24 00:00:30 2026 GMT
Not After : Sep 25 00:00:30 2026 GMT
Subject: CN=4d2bf7e7f9e8419528998f76e19a95670c00bd80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ae:68:45:2a:b4:43:77:15:a9:71:ff:8b:e7:
e1:c6:48:17:cf:3a:86:47:50:fe:f7:85:f5:91:88:
6a:1a:b4:94:a3:6c:57:82:16:b4:77:6f:9b:40:51:
33:a7:e3:9c:74:9f:76:13:17:94:8e:0c:05:86:a3:
5b:bb:ab:95:f7:f6:a0:04:48:51:cc:51:96:3f:37:
76:39:d5:7a:6d:03:e1:35:b2:39:31:fe:ab:1a:c3:
b9:b2:70:0b:a8:f0:dc:fa:3f:e5:56:bf:ee:e5:6f:
69:09:2b:5b:07:6b:77:80:de:8b:22:3d:19:1e:c7:
20:d1:9d:c3:23:34:89:cd:2b:78:dd:34:d9:14:92:
66:74:a4:fb:cb:f7:4b:99:79:78:7c:35:14:1e:4e:
c2:87:75:95:57:ad:93:33:8f:7e:38:29:ab:5e:be:
8f:a2:ec:c1:1b:35:a6:e1:8d:ce:89:cb:1a:f8:d8:
60:e8:2d:fa:e5:14:91:71:a3:32:f0:79:3d:b3:55:
ae:fc:df:d0:00:b0:50:80:a3:ed:47:b9:1c:6e:f7:
bb:41:28:af:65:8b:1b:b8:69:f8:18:df:c0:87:b7:
1d:b7:6b:da:75:c2:9c:25:cf:a0:c6:88:b6:d0:60:
f3:5f:2d:3a:77:c9:06:1d:7c:e1:54:9c:7b:b0:da:
37:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2B:F7:E7:F9:E8:41:95:28:99:8F:76:E1:9A:95:67:0C:00:BD:80
X509v3 Authority Key Identifier:
keyid:7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:85:34:ad:bc:3c:65:99:9f:c8:65:e7:e3:5f:03:8f:ff:8e:
a5:ee:b2:b2:84:63:9e:99:26:2c:8a:c0:5b:f7:57:b6:bd:d5:
87:9e:63:91:08:64:85:eb:1c:78:3e:23:7c:c2:c4:f4:b5:de:
f9:75:40:02:67:f1:45:9f:61:80:82:ea:f2:b1:71:9f:b0:70:
8b:a8:45:b9:6a:88:cc:69:1f:67:a9:28:27:de:dd:45:31:59:
90:41:ad:56:be:68:85:4d:59:ad:9f:8a:82:b6:48:3d:f1:98:
a8:cc:96:c4:f5:37:a3:c1:3b:ac:3b:be:c0:54:10:31:06:a2:
96:10:51:74:37:27:32:2f:c9:e3:ad:09:d5:bf:57:77:bf:07:
6a:31:ef:b5:ea:a8:ec:be:d9:7f:79:7f:6f:20:2f:71:b8:40:
84:fa:47:31:cf:74:ce:33:d7:76:65:b8:95:f2:0c:ed:35:56:
fa:b1:85:4c:cb:b4:28:e4:c3:bc:82:fc:c2:d2:83:79:e8:fb:
ec:c6:c2:97:b8:32:1c:11:f4:5a:e2:4d:fc:7f:bb:23:3c:67:
3e:41:ef:1b:c8:b2:7f:8e:86:94:68:90:f2:14:7a:7e:3e:21:
bf:18:85:ad:66:68:9b:08:3c:1d:f8:6a:69:5b:8f:ef:7e:a3:
68:98:d9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:24:22 2026 by rpki-client