Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
File: qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft (raw, json)
Hash identifier: sd8KYDb5LvTX+XJfahs3iGcHqnXlEXKt4lepLGu0Lq8=
Subject key identifier: FB:51:21:A9:B8:3F:1B:27:DB:67:C0:6A:72:BD:80:C3:ED:F5:54:71
Authority key identifier: A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4
Certificate issuer: /CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4
Certificate serial: 01A0DBA8E77ACBBA091179B876743A1265EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
Manifest number: 08CA
Signing time: Sat 26 Sep 2026 03:01:14 +0000
Manifest this update: Sat 26 Sep 2026 03:01:14 +0000
Manifest next update: Sun 27 Sep 2026 03:01:14 +0000
Files and hashes: 1: 4hGYV1HkQX7u-sK6NU3NKiUgMmg.roa (hash: nlgBOMwc0Z5SXyM7I/XYMmfHNrGRHRzrTdBqF8G4e24=)
2: qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl (hash: ZLuTlA18uAEdbNC0Zi37OtEyHZll0zks0fifTd8NWIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a8:e7:7a:cb:ba:09:11:79:b8:76:74:3a:12:65:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4
Validity
Not Before: Sep 26 03:01:14 2026 GMT
Not After : Sep 27 03:01:14 2026 GMT
Subject: CN=fb5121a9b83f1b27db67c06a72bd80c3edf55471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:92:99:bd:d1:28:43:34:a9:a3:ac:01:99:28:
2e:0e:a9:da:58:28:e3:ce:9e:be:7c:ae:8d:bc:1e:
c1:87:87:33:1f:18:37:b7:74:b6:f5:36:84:26:6a:
01:63:34:c5:b1:ed:e2:5a:1d:b8:79:58:51:0d:e5:
2c:b2:cf:00:99:23:e6:31:e1:e8:f9:a4:17:f2:d9:
99:4a:4c:35:b0:11:6e:e8:79:d9:ce:c4:24:15:99:
c1:bf:2d:4d:ad:eb:87:78:53:a3:76:9c:17:b1:55:
39:8d:48:c7:bc:80:2f:3a:35:4f:8a:52:e6:d2:0a:
2a:03:56:b5:23:9a:df:b9:c3:46:5c:cc:a9:61:9c:
63:fd:66:ca:2a:81:4b:fd:91:81:15:74:aa:2a:3c:
18:0f:bb:19:11:b6:0a:eb:d9:6b:46:a6:be:00:33:
ff:72:33:c0:f0:23:5e:47:32:a9:f9:35:86:7b:2c:
79:7d:f5:ff:43:b0:66:9d:47:71:33:67:c6:f5:81:
4f:79:05:82:3f:08:4e:e0:20:2d:f6:eb:e2:ba:40:
0a:4f:da:ab:6b:4c:53:e6:97:9d:f9:81:9e:73:5f:
8a:7e:61:10:62:79:87:58:93:87:77:35:1f:7a:86:
51:c0:2e:bc:b0:62:af:6a:37:88:93:26:8b:ff:3d:
16:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:51:21:A9:B8:3F:1B:27:DB:67:C0:6A:72:BD:80:C3:ED:F5:54:71
X509v3 Authority Key Identifier:
keyid:A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:1f:f3:3c:de:bc:0f:d4:cb:6a:03:0c:6d:c9:e8:2a:89:82:
ab:29:62:7c:2f:77:e1:94:3b:cc:98:87:62:fb:da:71:13:8e:
41:d6:03:74:a3:2a:29:9e:db:1b:f7:af:6d:5f:90:67:ca:b2:
0a:1c:94:8f:14:0f:d0:b2:13:ae:79:cd:7e:17:d8:b1:5f:16:
3a:5b:e3:19:ed:28:6b:d7:e4:93:32:cb:ed:b6:b6:c5:56:f2:
e9:65:e5:b0:42:27:39:21:ac:1d:b8:27:38:db:f5:0a:43:49:
eb:56:18:d1:2b:b6:39:75:4f:00:03:f1:54:b6:9f:e3:09:5e:
f0:22:0c:33:5f:3d:68:3b:3c:ee:29:d1:99:f5:96:34:13:08:
1e:f8:ab:62:fa:fa:00:07:78:3f:5d:0c:d6:fb:2f:88:a2:ca:
61:1d:b0:53:5f:de:2b:39:d6:52:be:3d:a3:8b:c9:03:48:d0:
82:33:3b:6c:1d:39:65:80:eb:ca:de:d1:c3:74:56:8c:63:20:
7b:13:6d:d2:c0:7d:77:42:5f:0f:ea:9d:5c:30:d8:a3:25:50:
c7:48:22:f3:d7:68:e4:78:0b:25:4f:c0:fd:a1:24:87:12:af:
d4:b8:b9:e4:39:14:30:97:9d:b0:ef:05:8a:d1:37:11:93:5c:
99:14:8e:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDbqOd6y7oJEXm4dnQ6EmXsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MGUyOGYyZTUwOWZlMzdhYzVjMzQwMWEwYThjMTEwMjli
NjIxZTQwHhcNMjYwOTI2MDMwMTE0WhcNMjYwOTI3MDMwMTE0WjAzMTEwLwYDVQQD
EyhmYjUxMjFhOWI4M2YxYjI3ZGI2N2MwNmE3MmJkODBjM2VkZjU1NDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpKZvdEoQzSpo6wBmSguDqnaWCjj
zp6+fK6NvB7Bh4czHxg3t3S29TaEJmoBYzTFse3iWh24eVhRDeUsss8AmSPmMeHo
+aQX8tmZSkw1sBFu6HnZzsQkFZnBvy1NreuHeFOjdpwXsVU5jUjHvIAvOjVPilLm
0goqA1a1I5rfucNGXMypYZxj/WbKKoFL/ZGBFXSqKjwYD7sZEbYK69lrRqa+ADP/
cjPA8CNeRzKp+TWGeyx5ffX/Q7BmnUdxM2fG9YFPeQWCPwhO4CAt9uviukAKT9qr
a0xT5ped+YGec1+KfmEQYnmHWJOHdzUfeoZRwC68sGKvajeIkyaL/z0W1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtRIam4Pxsn22fAanK9gMPt9VRxMB8GA1UdIwQY
MBaAFKkOKPLlCf43rFw0AaCowRAptiHkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVE0bzh1VUpfamVzWERRQm9LakJFQ20ySWVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS85OWU1ODUtYTY1Mi00NGYzLWE1MzEt
YTAwM2JmZGY0ZTQ1LzEvcVE0bzh1VUpfamVzWERRQm9LakJFQ20ySWVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS85OWU1ODUtYTY1Mi00NGYzLWE1MzEtYTAwM2JmZGY0ZTQ1
LzEvcVE0bzh1VUpfamVzWERRQm9LakJFQ20ySWVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlB/zPN68
D9TLagMMbcnoKomCqylifC934ZQ7zJiHYvvacROOQdYDdKMqKZ7bG/evbV+QZ8qy
ChyUjxQP0LITrnnNfhfYsV8WOlvjGe0oa9fkkzLL7ba2xVby6WXlsEInOSGsHbgn
ONv1CkNJ61YY0Su2OXVPAAPxVLaf4wle8CIMM189aDs87inRmfWWNBMIHvirYvr6
AAd4P10M1vsviKLKYR2wU1/eKznWUr49o4vJA0jQgjM7bB05ZYDryt7Rw3RWjGMg
exNt0sB9d0JfD+qdXDDYoyVQx0gi89do5HgLJU/A/aEkhxKv1Li55DkUMJedsO8F
itE3EZNcmRSO2Q==
-----END CERTIFICATE-----
Generated at Sat Sep 26 12:50:07 2026 by rpki-client