Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
File: qGBDVsdQGuIQSyzO087cXb3BFjs.mft (raw, json)
Hash identifier: 7ohuJsmF0UuXMc9x9p8SdqxC4QtOcuh709oh1kIhm9s=
Subject key identifier: 2A:EE:86:AF:86:B4:95:EB:71:3E:F1:2C:A5:EC:6C:E6:82:60:82:04
Authority key identifier: A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
Certificate issuer: /CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Certificate serial: 01A0D5DEB59FCB86330353A54442A1E56DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
Manifest number: 0B30
Signing time: Fri 25 Sep 2026 00:02:17 +0000
Manifest this update: Fri 25 Sep 2026 00:02:17 +0000
Manifest next update: Sat 26 Sep 2026 00:02:17 +0000
Files and hashes: 1: 7bHKsta4Dp1Yop5z_TE4GuyF-pw.roa (hash: D3+G4Ub921rB7gMLWBKfq6fOLKtP+5fJMq67UB4TEGk=)
2: E6joSh_KCsRZIeJuWns6mUSAvaQ.roa (hash: /pkjUktJxl5tikLBDBKNXbabaHGDBXecObDRlAAJ4OY=)
3: qGBDVsdQGuIQSyzO087cXb3BFjs.crl (hash: YOEFjn9XelkqenA9vfcs9pXSBwuJ/uQLHOmEX/yR5kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:b5:9f:cb:86:33:03:53:a5:44:42:a1:e5:6d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Validity
Not Before: Sep 25 00:02:17 2026 GMT
Not After : Sep 26 00:02:17 2026 GMT
Subject: CN=2aee86af86b495eb713ef12ca5ec6ce682608204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f3:36:cb:b0:b9:6a:8a:58:62:41:e3:12:52:
c7:8e:4a:ba:86:09:0f:2a:3a:15:92:8d:63:be:d0:
23:d2:f3:c4:db:50:e5:e0:cc:97:76:87:fa:6d:2f:
fd:a6:da:b0:f0:7a:6b:f4:97:c2:b1:08:18:44:c8:
fd:77:eb:a5:d5:eb:97:94:85:78:90:8c:1d:f0:25:
7e:c7:ec:37:a3:38:01:65:65:d6:e0:b9:31:f8:fb:
bd:cc:c7:89:95:b7:06:19:59:54:dd:fa:5a:fe:18:
a4:16:ed:73:28:1f:39:ec:d6:b8:b1:61:b2:ad:3e:
db:7e:18:a9:12:7c:65:d1:9b:d2:80:a2:a7:2c:c2:
ee:77:23:82:d8:de:73:8d:99:f6:f6:d3:7f:04:f7:
2d:9d:e5:8f:62:3d:33:1c:60:40:33:31:57:59:6e:
42:c6:88:52:5a:52:f5:e6:b3:a7:29:69:d0:10:78:
95:3d:05:9b:74:52:08:26:6f:e6:12:7b:32:c6:5c:
07:6f:fa:db:2e:64:63:e1:a9:15:90:cc:74:eb:fe:
55:9b:33:a9:cc:d5:84:91:f3:1b:bb:69:0c:77:3e:
cc:6b:9b:be:66:f3:ec:86:f5:48:a4:23:db:0d:06:
65:b2:34:43:7b:aa:52:8b:3b:c4:4a:85:e0:8e:e5:
04:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:EE:86:AF:86:B4:95:EB:71:3E:F1:2C:A5:EC:6C:E6:82:60:82:04
X509v3 Authority Key Identifier:
keyid:A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:0a:3d:de:c1:48:8d:ee:1c:bb:76:8e:23:cf:48:1b:01:e5:
94:01:91:04:dc:fc:c5:8c:e6:c3:5c:c7:83:7f:90:8c:61:de:
ce:86:ee:db:94:e8:6a:20:25:80:63:09:ac:f0:5a:cf:c8:b0:
82:9b:a6:1b:be:18:47:58:f7:d5:61:4f:f0:a1:a1:1c:c3:05:
44:3b:ff:f1:8f:85:f9:f1:0f:46:3a:03:d9:70:73:6e:3e:69:
32:8f:63:88:f7:e0:29:9b:00:34:38:17:b0:0c:28:8f:f6:56:
3c:d4:f8:93:e7:1e:c6:25:8e:7f:b7:d4:3f:93:91:2f:d0:fa:
88:17:5b:64:2f:d4:04:d8:a4:fd:75:d9:fe:d1:ef:73:0b:73:
58:f9:9c:c0:49:56:65:ef:3f:96:12:cc:ab:77:81:9a:61:c0:
45:f3:58:d2:6d:e0:ee:87:be:dd:ab:6b:1e:bf:8b:c8:70:6f:
27:f2:14:99:7f:7b:55:c5:08:5f:6a:bf:a9:d1:2d:6c:61:cb:
84:fd:07:d5:7d:db:0b:06:a5:12:40:7b:f7:86:02:98:8e:34:
17:10:28:52:38:ce:ac:73:d9:d7:e9:19:af:34:c3:14:7d:0f:
4b:8f:a6:2f:a8:4b:52:bc:f0:9f:a1:6f:ae:db:1c:c5:5f:25:
89:6e:89:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:08:10 2026 by rpki-client