Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
File: q6gfB6STo-ZDdS5mvYFG9Xca34g.mft (raw, json)
Hash identifier: oFirKCeYukQO5X/fWpkfiFyra5KwZPFcetzcSTNGwqk=
Subject key identifier: AB:00:50:A1:81:4D:D7:4F:EB:D3:02:D5:1F:6C:DE:65:DE:36:4F:A7
Authority key identifier: AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
Certificate issuer: /CN=aba81f07a493a3e643752e66bd8146f5771adf88
Certificate serial: 01A0D56FBDBFDAA70100BB95B8A80EF4611D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
Manifest number: 1A49
Signing time: Thu 24 Sep 2026 22:01:05 +0000
Manifest this update: Thu 24 Sep 2026 22:01:05 +0000
Manifest next update: Fri 25 Sep 2026 22:01:05 +0000
Files and hashes: 1: KVyFy8VhCmWDFDfi6hznjqY-CiM.roa (hash: gxDIq6BgrSNUPikORcjw6F0p9+XkSRUjM2gZnMVK/i4=)
2: mHnLIzDp0K0uZ34p1Ju5C7yV-Jc.roa (hash: ndDoF5lyW5EcQE2tsppbm+3E+OkI4cfheb+pzHW2skk=)
3: q6gfB6STo-ZDdS5mvYFG9Xca34g.crl (hash: 5PHZHp9Wgu73IXsT2D2VwLqWYmjzkbxYR2k2MUzV4VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:6f:bd:bf:da:a7:01:00:bb:95:b8:a8:0e:f4:61:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aba81f07a493a3e643752e66bd8146f5771adf88
Validity
Not Before: Sep 24 22:01:05 2026 GMT
Not After : Sep 25 22:01:05 2026 GMT
Subject: CN=ab0050a1814dd74febd302d51f6cde65de364fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5c:9c:a6:7a:a5:8b:55:87:91:27:56:a4:31:
0c:10:06:67:ab:89:6c:ef:4d:10:6f:5e:3f:9c:3d:
2d:8a:2c:d1:86:8b:32:a1:69:8d:66:87:fe:ad:04:
20:c2:49:68:25:6d:f4:ad:f3:3a:bb:38:22:55:36:
3e:e5:41:f2:3f:aa:ee:2d:68:3c:52:57:d2:45:b1:
0b:c3:59:09:b5:7e:45:5f:8b:b3:76:ef:ed:a7:a4:
04:b9:2c:21:ca:0c:3f:07:a5:32:6f:74:a0:8f:92:
79:36:11:b7:15:01:ba:38:48:47:9d:f8:09:05:b0:
bb:df:3e:af:a9:4d:f7:10:f3:73:12:22:4b:bb:c5:
da:f4:90:8a:ce:8f:96:e4:c9:3e:8c:c6:36:44:bd:
fd:69:ed:7a:92:c6:42:b0:3f:33:d6:79:c2:2f:c7:
f1:0e:17:b7:e7:0a:35:6d:94:03:b4:38:4e:cf:17:
6d:95:3c:7b:e2:7e:70:55:0a:8d:ab:de:73:f7:99:
10:54:1d:bc:8b:ba:70:6a:e8:87:3c:64:25:b8:ee:
15:88:f1:0c:b4:2e:d8:67:86:38:cc:24:09:ff:5a:
78:b4:96:e7:ab:fa:3e:47:4e:36:9b:ae:23:79:bc:
60:e5:21:f1:1d:e4:2f:b5:a6:fe:33:56:aa:76:41:
b4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:00:50:A1:81:4D:D7:4F:EB:D3:02:D5:1F:6C:DE:65:DE:36:4F:A7
X509v3 Authority Key Identifier:
keyid:AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:85:30:72:6a:6a:e7:08:38:97:35:07:04:88:62:8a:5d:ff:
45:e2:5c:ff:7e:fa:38:32:8e:74:85:1c:53:85:1a:10:68:43:
9c:e7:9c:16:0f:34:ef:94:0f:7e:40:ef:7e:ff:5a:e0:14:89:
0e:0b:99:c4:0a:b6:d9:2a:d0:90:3e:b7:39:6e:b8:0f:85:2c:
81:92:62:d8:bb:27:15:bb:61:6a:e9:f5:58:4e:7c:b3:da:12:
4e:06:c1:90:c4:3c:4c:5b:9d:ba:c9:3d:cf:78:82:fa:72:05:
a7:a8:6e:0a:c2:35:1e:6c:01:ca:b4:6c:7d:b7:7c:cf:4c:f9:
c2:93:4f:a4:27:ad:60:a4:7d:30:85:27:fa:a6:9b:02:bc:1f:
82:48:7b:ea:88:4e:d4:a3:d9:c1:ef:fb:38:e8:55:5e:53:86:
02:cf:f8:26:fe:55:9a:aa:13:02:90:e8:76:dc:3a:82:50:6c:
d5:65:de:76:d9:d4:4e:a0:db:34:02:46:66:9c:6f:26:20:c4:
71:39:9b:e1:e8:a4:b3:53:3e:d7:ac:78:cf:4b:26:e0:58:bb:
8d:b0:a8:8b:8b:13:71:a3:99:19:df:30:69:39:0e:d4:6f:60:
8e:fb:d3:15:c5:00:d0:e1:f5:84:d6:7a:5c:bb:92:84:48:59:
31:06:7c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:01:58 2026 by rpki-client