Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
File: Q68umH0rY63apa3BePMekNh2qqc.mft (raw, json)
Hash identifier: 3f9ng/cSQGMxzw6sBK+12uwSXPKXqN+2lIz5ElMRYrI=
Subject key identifier: E1:B9:EB:A6:1C:05:C2:10:93:09:E1:62:92:3F:F2:61:44:E7:90:1A
Authority key identifier: 43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
Certificate issuer: /CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Certificate serial: 01A0D1247988735FFD5A477B4796984DFCE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
Manifest number: 1A76
Signing time: Thu 24 Sep 2026 02:00:23 +0000
Manifest this update: Thu 24 Sep 2026 02:00:23 +0000
Manifest next update: Fri 25 Sep 2026 02:00:23 +0000
Files and hashes: 1: 6h1PvR00lCR4R_OK63mWuUNm8Ow.roa (hash: nK88CLEdk1ROq2MFGTRKCThSy5zWr4KCZ19shw/qtOU=)
2: LkGDyqDRG7mHRocUIkDmSuw1vWQ.roa (hash: J9hPT1FhbaaEOwCdYHU6hR/yFBmZm/8O5bYD8Dyfv0Y=)
3: Q68umH0rY63apa3BePMekNh2qqc.crl (hash: AOUKW3eBmWVrlr8nYn2qS6e8VXrHBZS8hp+rNPSCEyg=)
4: qLlkVW88V5PBegH_90cR2KF7_xI.roa (hash: FkgU7aRp19Haw31aWCRlRZvTAOJ47Up6IijdLGyXvAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:79:88:73:5f:fd:5a:47:7b:47:96:98:4d:fc:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Validity
Not Before: Sep 24 02:00:23 2026 GMT
Not After : Sep 25 02:00:23 2026 GMT
Subject: CN=e1b9eba61c05c2109309e162923ff26144e7901a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:03:96:fc:0a:a0:07:38:1b:b6:14:8a:d2:55:
14:ea:e8:c6:e1:b8:4a:8d:05:1f:f1:71:d0:28:d4:
83:42:d3:5e:a7:26:af:83:84:86:3e:2d:e5:3d:b7:
06:7e:7e:34:d9:d3:08:61:65:60:f0:92:8f:6a:e2:
c2:ca:04:9e:90:5d:64:e5:b2:43:05:c8:73:84:00:
93:c3:f1:85:04:71:15:e4:be:2a:79:7e:2f:8b:40:
42:1d:15:4c:c3:bf:da:86:75:be:76:87:99:e6:45:
6e:c9:39:26:c5:2a:19:69:8c:56:44:b0:39:7e:99:
12:48:33:86:e3:8f:0a:ba:ef:39:67:8a:32:df:c8:
ab:eb:ec:01:e4:67:33:ca:66:5b:30:fd:72:04:e0:
7d:78:e4:56:b4:ea:33:2c:60:c6:a8:82:ea:1a:39:
80:0c:b1:b0:5c:59:fc:ba:ec:62:42:ea:92:76:a2:
8c:b3:d4:36:be:81:6d:40:75:43:42:49:f0:dd:20:
5c:d9:97:c8:80:47:52:30:1e:66:15:df:48:c6:f0:
89:80:09:18:98:01:4b:a8:e7:1d:4c:e3:44:59:77:
19:6c:fc:50:4e:18:e1:38:34:41:36:01:e9:f9:8b:
d1:25:31:9f:9b:22:00:a3:21:8c:9d:0a:92:fb:bf:
a3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B9:EB:A6:1C:05:C2:10:93:09:E1:62:92:3F:F2:61:44:E7:90:1A
X509v3 Authority Key Identifier:
keyid:43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:75:78:d2:9c:24:03:84:66:55:a0:44:43:5c:b5:d2:cf:68:
3e:db:5e:3a:6d:b9:98:67:1e:f8:98:14:99:4a:4e:67:57:73:
a5:70:3a:c4:f4:d9:aa:b7:57:45:64:04:af:a6:fe:60:f9:bf:
95:f2:d6:d4:7c:a3:2d:db:6c:35:ab:29:b7:e1:f4:52:6e:74:
09:48:62:d3:4d:5a:a9:ac:5e:0f:66:e7:34:53:c8:45:d6:e0:
1e:46:9e:42:3a:d3:cc:cd:d5:33:bb:22:5c:69:42:ff:cc:8d:
c8:36:50:47:87:a5:ca:ef:93:36:2b:98:5e:37:72:15:ef:81:
c4:9e:29:5d:c6:f4:93:da:d2:5c:d1:ea:f7:a3:88:1a:5a:40:
a2:67:ec:b3:67:35:89:eb:30:b9:8b:fb:34:8b:1d:c0:00:fd:
85:89:89:0c:2e:05:09:36:84:76:62:c8:13:31:9e:12:d8:20:
00:a7:ca:4f:ec:92:42:7c:38:7b:1b:66:9d:1f:00:61:9d:41:
38:f0:da:02:6a:d4:90:d5:06:6e:1c:72:6d:61:82:bc:8b:c2:
3d:9a:e7:3e:cc:28:08:11:85:0b:2b:ea:5c:3a:32:71:08:1f:
6c:2d:b0:fd:86:07:2f:8d:a8:53:08:28:ef:a5:12:0a:81:70:
dc:ce:ac:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:33:16 2026 by rpki-client