Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
File: qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft (raw, json)
Hash identifier: WL95kxSQeJs+Dvxg2KJSFpcBOwX5Rqo05cMUyZq8Owk=
Subject key identifier: 9C:CD:7B:2A:40:A0:11:17:33:F3:99:CF:00:20:68:AA:91:D1:7B:58
Authority key identifier: A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45
Certificate issuer: /CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45
Certificate serial: 01A0D8725FDA723D23C8BCD9AB7B9C8332EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
Manifest number: 0C43
Signing time: Fri 25 Sep 2026 12:02:49 +0000
Manifest this update: Fri 25 Sep 2026 12:02:49 +0000
Manifest next update: Sat 26 Sep 2026 12:02:49 +0000
Files and hashes: 1: KkyFxTRdXEokTgrrlmxAqjiu7ZQ.roa (hash: xjVxn6VE0DsxVNBeCrJPg5ZSsJvDyeaJISylTts3lDo=)
2: qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl (hash: vNNFKU4mEBUrF4Y+8VVDBMfyiSpAGfk+28DKENfr508=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:5f:da:72:3d:23:c8:bc:d9:ab:7b:9c:83:32:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45
Validity
Not Before: Sep 25 12:02:49 2026 GMT
Not After : Sep 26 12:02:49 2026 GMT
Subject: CN=9ccd7b2a40a0111733f399cf002068aa91d17b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:2d:53:5a:74:ed:f0:b4:bb:65:61:e5:7c:d6:
de:d0:b1:15:a0:e6:70:ff:e1:36:fc:94:07:10:a3:
30:72:5f:3c:a2:cd:66:28:73:7a:c0:4e:b0:cb:17:
8e:64:ba:15:dd:a4:21:eb:87:5f:64:b3:0a:a2:6f:
bf:bb:c2:98:90:e6:5c:1f:07:e7:e6:45:2e:33:ad:
b6:f0:90:e0:f5:ae:fc:93:48:8c:e0:b8:77:08:5c:
5d:35:c5:45:be:fd:77:f4:e8:20:e2:b6:cc:b3:f6:
d9:c0:ba:a5:ea:15:ca:ab:c7:e0:b2:c9:61:a5:60:
a6:16:7c:59:c1:e1:c8:95:b6:45:98:18:16:bd:49:
a7:59:b9:ce:7d:bb:9a:bb:cd:58:b9:cf:ef:5e:c4:
2a:1f:a5:a1:5f:44:c9:04:2f:26:d8:5f:e3:5b:ca:
98:73:2f:f9:da:6e:cb:63:48:59:c6:58:a2:7c:d6:
ff:37:a0:2e:ec:e1:41:81:46:ea:45:7a:4f:04:76:
65:cf:ed:6f:b0:05:e3:29:9d:5b:ac:04:09:9c:03:
4b:bc:cc:9b:95:b6:de:5d:bd:21:69:aa:ca:a3:57:
a4:bc:fc:d3:71:d6:54:30:1a:bd:18:2b:a0:bb:19:
dc:7e:99:6c:fb:2c:45:b7:d7:66:3f:23:33:ae:b4:
87:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:CD:7B:2A:40:A0:11:17:33:F3:99:CF:00:20:68:AA:91:D1:7B:58
X509v3 Authority Key Identifier:
keyid:A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d5:ef:3a:dd:29:2f:63:03:08:6e:13:f4:b3:0b:16:91:c9:
4d:80:bb:57:6b:a7:16:69:f3:da:74:4c:fe:28:39:a1:56:df:
11:b4:dd:28:d6:ed:a8:da:72:9f:a1:c8:ed:fd:d9:15:e3:5e:
c1:70:81:36:92:8c:8b:93:ca:3a:fb:a0:13:50:f6:69:4f:eb:
1f:51:65:cc:2f:69:33:d8:c8:57:08:d8:8c:43:50:4c:c0:25:
f2:ff:02:a7:4c:e7:4c:c2:f0:64:2a:b1:00:86:d6:a4:94:58:
ce:fd:cb:c7:cc:91:13:ac:d3:76:ab:08:9e:e1:d2:a8:62:89:
10:80:90:bf:a6:7d:c9:14:2b:f8:54:4b:86:7f:7f:0a:74:13:
9f:42:96:28:1a:71:00:6d:ce:42:66:c7:4b:42:ce:9f:0b:a3:
c9:51:49:c8:a5:87:11:9d:ab:bd:6e:04:5a:23:ed:74:10:f0:
a1:3a:3d:fd:d4:1b:98:3f:e1:ba:d1:d7:b2:4e:8a:9a:76:6e:
92:78:82:60:3f:91:73:1d:b3:4c:1e:26:d7:be:bb:b0:93:49:
cc:ac:7c:3a:65:31:f8:fe:c2:88:17:4b:7f:30:a2:b3:a9:d7:
16:4f:6f:a9:6d:70:50:0a:56:4a:5b:74:b0:26:23:a9:53:85:
c0:57:fb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:20:00 2026 by rpki-client