Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/ec430f-7b70-49d7-8e81-6dab2a4b2a6e/1/Q8xOC1bEDO4y1RXxPprXJSahBr4.mft
File: Q8xOC1bEDO4y1RXxPprXJSahBr4.mft (raw, json)
Hash identifier: FlTb+PmLgYvO5bRlLMlMsG77qUwKhGVD/QXqoo0w/Kw=
Subject key identifier: B8:95:AD:60:1A:34:8E:6C:44:34:D4:A0:C3:E4:12:7F:BD:60:50:14
Authority key identifier: 43:CC:4E:0B:56:C4:0C:EE:32:D5:15:F1:3E:9A:D7:25:26:A1:06:BE
Certificate issuer: /CN=43cc4e0b56c40cee32d515f13e9ad72526a106be
Certificate serial: 01A0D192A94834BF366104C24CA2F8986888
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8xOC1bEDO4y1RXxPprXJSahBr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/ec430f-7b70-49d7-8e81-6dab2a4b2a6e/1/Q8xOC1bEDO4y1RXxPprXJSahBr4.mft
Manifest number: 89
Signing time: Thu 24 Sep 2026 04:00:44 +0000
Manifest this update: Thu 24 Sep 2026 04:00:44 +0000
Manifest next update: Fri 25 Sep 2026 04:00:44 +0000
Files and hashes: 1: 1-avwUbYkGWAbngQUmLKtkGb0vQk.asa (hash: gdrOpGIWUMbLTjKVbOlssgFFN+ZM/6btb14hBTqgj4E=)
2: Q8xOC1bEDO4y1RXxPprXJSahBr4.crl (hash: 9Sw6b9wJO5jxg9Te/W+9v7stUmWKmQMcyF6zvIYEh1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/ec430f-7b70-49d7-8e81-6dab2a4b2a6e/1/Q8xOC1bEDO4y1RXxPprXJSahBr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/ec430f-7b70-49d7-8e81-6dab2a4b2a6e/1/Q8xOC1bEDO4y1RXxPprXJSahBr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8xOC1bEDO4y1RXxPprXJSahBr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:a9:48:34:bf:36:61:04:c2:4c:a2:f8:98:68:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43cc4e0b56c40cee32d515f13e9ad72526a106be
Validity
Not Before: Sep 24 04:00:44 2026 GMT
Not After : Sep 25 04:00:44 2026 GMT
Subject: CN=b895ad601a348e6c4434d4a0c3e4127fbd605014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:aa:14:dd:4a:7e:3a:03:b6:62:ba:1b:3e:dd:
1e:d9:55:5c:a8:c2:33:7a:0a:33:ab:17:f8:65:2d:
26:cd:f0:25:0e:98:0a:2a:d2:0c:c9:33:6e:ab:a9:
db:61:e1:cd:cd:59:b8:80:50:29:a1:e0:98:b7:31:
85:ac:15:a9:41:5e:e1:3a:57:54:de:8c:b1:f2:91:
8a:b4:9f:5f:ca:4f:ff:97:d0:7d:a5:f4:4a:69:0f:
31:97:7d:83:a9:1d:b1:07:9e:65:84:fd:47:76:c6:
59:42:fd:9b:47:5e:dc:ea:1f:05:b1:99:95:22:44:
ab:aa:be:5d:b9:67:9c:55:d2:ac:3c:14:0d:af:0c:
36:32:1f:e0:eb:ef:2d:ed:d6:b7:da:e6:74:a3:0f:
48:b2:4e:9d:8d:f6:a8:98:35:aa:c6:36:bb:94:a0:
55:01:c3:b1:aa:26:0b:c3:05:9c:1d:97:17:2d:ac:
a1:8e:05:c8:f5:fd:28:2c:65:e1:f2:c1:2f:98:23:
d3:58:ff:80:f0:82:7f:ac:f4:d0:13:0e:b5:af:60:
01:48:97:0e:fb:d5:99:11:e3:3f:d0:12:7f:e7:e0:
de:e0:a3:a5:8f:a7:89:44:46:41:32:60:35:62:e0:
a4:4f:15:67:f4:e6:71:7a:ee:a6:18:88:0e:84:f8:
8c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:95:AD:60:1A:34:8E:6C:44:34:D4:A0:C3:E4:12:7F:BD:60:50:14
X509v3 Authority Key Identifier:
keyid:43:CC:4E:0B:56:C4:0C:EE:32:D5:15:F1:3E:9A:D7:25:26:A1:06:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8xOC1bEDO4y1RXxPprXJSahBr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ec430f-7b70-49d7-8e81-6dab2a4b2a6e/1/Q8xOC1bEDO4y1RXxPprXJSahBr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ec430f-7b70-49d7-8e81-6dab2a4b2a6e/1/Q8xOC1bEDO4y1RXxPprXJSahBr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:13:47:ae:f4:db:c0:56:23:7a:ec:64:b1:df:11:c9:74:c0:
3b:e1:a9:e5:82:c2:57:94:c0:46:f2:4f:e9:86:15:1d:ea:f4:
81:71:57:1e:07:b3:80:de:cc:f6:43:0b:24:b8:63:fc:bc:f1:
01:87:b3:a2:dd:96:8d:0d:57:02:d1:22:f2:7c:76:0e:fb:92:
ee:63:f1:9f:ca:37:a2:f5:dd:7e:12:ba:f7:9d:66:a9:85:1d:
a7:ed:be:83:b9:1f:68:c5:92:4f:28:82:fb:a4:a5:30:b7:d2:
c2:87:6d:4b:13:62:b5:99:39:ea:cc:35:58:44:1c:e8:b8:01:
f9:28:fc:cd:c9:8f:1c:6a:e3:40:5d:47:27:04:1e:48:69:83:
db:26:80:45:bb:f5:00:18:55:4e:92:b0:2f:84:7b:02:a7:12:
d7:78:75:67:10:6c:85:7f:c6:ec:e4:0c:66:6e:1d:b5:26:72:
9f:f4:82:09:84:a3:a8:28:2d:33:23:c1:cd:a8:ec:9d:55:db:
6c:7c:41:ce:c5:95:55:61:96:9f:c8:3b:52:e5:34:14:7f:26:
0b:db:6c:87:6a:37:46:a1:5e:88:d2:9d:d5:ee:1e:86:7c:f2:
b7:fb:d6:66:2e:8b:38:45:f0:92:e2:73:0c:3a:24:c7:20:1a:
44:1a:a8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:40:15 2026 by rpki-client