Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
File: q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft (raw, json)
Hash identifier: UXcD8InhtFTHfVlZNnr5jx/1/neiAXYcVIqWLGSVwP4=
Subject key identifier: 2B:99:0B:62:15:E4:4D:BB:49:55:8F:86:41:1F:26:A8:19:17:AD:61
Authority key identifier: AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
Certificate issuer: /CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Certificate serial: 01A0E32B6DD1867CEB63C405E7CBCF8BBB60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
Manifest number: 1A78
Signing time: Sun 27 Sep 2026 14:01:09 +0000
Manifest this update: Sun 27 Sep 2026 14:01:09 +0000
Manifest next update: Mon 28 Sep 2026 14:01:09 +0000
Files and hashes: 1: 8TsXg-XUAk1JE35W5iwCEn8OxHY.roa (hash: wgiKwTO+cQ6amDFPE6cljiPgi+iGvWx/hXbXkD8CRAQ=)
2: q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl (hash: o0VX46vGsCjIVHoN8zwt+u3W+EtfrmxvJA9XRTPGiX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:2b:6d:d1:86:7c:eb:63:c4:05:e7:cb:cf:8b:bb:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Validity
Not Before: Sep 27 14:01:09 2026 GMT
Not After : Sep 28 14:01:09 2026 GMT
Subject: CN=2b990b6215e44dbb49558f86411f26a81917ad61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:da:81:a5:fa:c7:cc:ff:27:83:00:81:71:7e:
db:25:78:b4:eb:5b:cb:01:eb:78:92:63:53:3e:28:
af:09:c1:cd:52:4f:1a:40:3a:54:60:29:ab:53:bf:
66:87:6d:04:14:24:ca:79:09:5f:50:62:90:cf:f8:
c4:3f:59:c8:31:e1:4f:ac:bf:27:f4:79:0e:a9:af:
34:15:3e:fa:b2:4e:a8:84:fb:af:8d:03:17:b8:60:
68:0b:6f:56:18:99:1e:61:7a:9a:81:51:93:01:f7:
9f:cf:b6:52:d3:83:09:a6:1f:0c:f0:e8:be:80:b0:
2b:78:e5:24:5e:63:f4:df:a6:c6:25:58:1b:e4:5b:
0b:10:c2:ce:0e:69:fb:c0:e1:d4:b8:1c:cf:e4:d8:
c0:07:77:77:f6:b3:5d:2e:fb:09:f5:6d:c2:39:5f:
69:84:ea:23:24:25:28:05:36:0f:2f:f4:54:ff:77:
97:e5:36:52:64:f4:db:6a:7d:23:55:4f:b2:27:39:
eb:6b:a3:07:a6:e6:34:c1:30:69:3e:a1:1b:40:82:
cf:37:ec:59:4f:e9:53:ef:17:9f:39:bf:b2:3c:b1:
39:df:59:31:aa:14:eb:8d:1b:0e:97:ca:23:43:96:
dc:62:23:61:d7:1c:27:93:50:6d:b2:ea:2b:1c:46:
70:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:99:0B:62:15:E4:4D:BB:49:55:8F:86:41:1F:26:A8:19:17:AD:61
X509v3 Authority Key Identifier:
keyid:AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:1b:d6:9f:21:47:53:61:ba:4a:de:65:c8:1f:e2:0b:80:38:
7e:84:8b:7a:11:7a:5d:fb:41:d1:40:2a:4c:6d:aa:c0:e1:b7:
e5:c4:f5:f6:5a:95:7f:37:74:2e:0d:04:7f:cc:c6:32:9b:9b:
12:c3:d3:94:0f:ea:6c:05:be:56:3b:e4:04:22:79:e0:d4:42:
88:41:d0:a5:44:12:80:69:b9:51:bf:6e:41:37:06:9d:a8:c0:
2f:d4:43:4e:ee:e9:b7:67:30:61:fc:5e:76:66:59:83:2d:0a:
d7:09:9c:35:8e:d4:63:fb:af:22:4f:c1:73:ed:8c:06:84:a0:
a5:50:b8:a6:9c:dc:6f:f7:33:f5:6b:e4:0d:e9:7c:a1:ad:cb:
9b:ca:61:e4:fc:02:d1:49:a0:b3:40:55:6e:a8:f1:a1:c9:64:
b3:87:62:3c:bb:b7:8e:86:e6:12:84:1d:34:0f:bd:38:d5:3a:
8a:ca:ac:78:8c:15:46:8a:eb:56:cf:c8:30:eb:a2:28:a2:3f:
f7:cb:00:06:2a:ab:41:a3:1d:cc:de:5c:5a:60:50:69:4d:8c:
a2:7a:91:06:32:57:7d:b1:dd:48:8a:33:11:5e:68:c8:88:63:
93:63:c8:e5:1c:ce:cb:48:78:35:43:3b:8d:56:85:e9:cf:dd:
d7:51:c7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:23:30 2026 by rpki-client