Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
File: qTnMFiHuMBCumOEnvSVKeDP9KCc.mft (raw, json)
Hash identifier: 7Hs+V8YO+WYlretpUgGQYj/y/IFtYkhtKplA2OASwTw=
Subject key identifier: 52:F2:64:DD:76:C8:97:87:FE:39:00:57:A1:E1:3D:B4:06:93:28:D2
Authority key identifier: A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
Certificate issuer: /CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Certificate serial: 01A0E0619CCBF2AC09D96C4C59998C281563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
Manifest number: 1391
Signing time: Sun 27 Sep 2026 01:01:28 +0000
Manifest this update: Sun 27 Sep 2026 01:01:28 +0000
Manifest next update: Mon 28 Sep 2026 01:01:28 +0000
Files and hashes: 1: 2laheRZxUjH9nDxMrHlm80h7z5Q.roa (hash: iosXrqOVeIIOelMUJUYMuylT0ggApUkiu1y8GJhCfso=)
2: NotYCgUHoY2zetpjr5kSm9qBY_k.roa (hash: oJRB8iWYyMlRGM13QOWyb/5+9ImlksyZccjTnLMZZYE=)
3: YOBJXpEHAMny3YxgbXhGFE9H1Dc.roa (hash: ubjGl6NH+8cXpUPkiXxOW4R61YalXFLiA+y8Gn0QEic=)
4: qTnMFiHuMBCumOEnvSVKeDP9KCc.crl (hash: snJRIM0kN7pwfqgA8AOcKQLyQv3FKG7wCH4deaP7cuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 01:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:61:9c:cb:f2:ac:09:d9:6c:4c:59:99:8c:28:15:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Validity
Not Before: Sep 27 01:01:28 2026 GMT
Not After : Sep 28 01:01:28 2026 GMT
Subject: CN=52f264dd76c89787fe390057a1e13db4069328d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b4:0c:86:03:69:59:fc:df:4e:37:ea:1a:d2:
a7:bf:b7:ad:49:b0:3a:d5:d9:2d:a6:8b:cc:eb:f7:
57:19:18:b4:03:dc:d8:0e:d4:83:4f:1b:8a:91:ef:
8f:a5:2c:a8:85:8f:d1:1b:1d:db:06:a4:4b:13:fc:
0b:a5:c2:0b:9a:ac:30:8a:79:bc:97:fa:60:5d:7c:
fc:82:99:fd:d7:9b:c1:dc:fa:dc:da:66:12:22:bc:
f9:ad:02:00:24:a5:dd:6f:ea:63:fb:ad:ce:3d:e1:
37:fe:ad:d3:f5:04:13:2d:65:f0:0f:a1:a6:5e:ce:
ed:e1:50:12:6c:d8:bc:79:f0:06:3a:24:3d:2c:c9:
4f:21:ac:74:9f:09:e9:e6:a0:5f:af:4d:97:c0:a7:
1a:95:74:97:92:33:28:26:0e:ab:1a:32:75:cb:86:
06:3e:cf:33:9d:67:f4:21:6f:dc:c4:a6:cc:06:20:
48:ff:07:8a:64:e9:41:d7:b5:91:08:63:20:12:96:
66:23:55:45:eb:73:b2:5c:4a:22:52:2f:47:2a:96:
8c:58:50:49:d0:d5:a5:cf:2b:f3:c9:92:1c:db:9b:
0b:25:ff:85:38:1a:4e:13:10:7c:8f:d2:55:10:1d:
bc:40:aa:b5:5c:71:40:bd:2f:de:c9:d0:9d:fb:c1:
08:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F2:64:DD:76:C8:97:87:FE:39:00:57:A1:E1:3D:B4:06:93:28:D2
X509v3 Authority Key Identifier:
keyid:A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:aa:63:61:e0:2c:e5:d3:8e:f6:e6:86:28:10:67:c7:a9:1c:
5b:13:7d:49:5a:8f:31:a8:7a:55:f3:bb:79:89:bb:66:ed:85:
65:bd:f5:c5:42:e0:d5:6b:67:02:54:97:3e:f7:d2:2c:39:f3:
84:cb:64:9a:a9:f2:f1:e7:1e:90:80:fe:ce:9d:92:c8:ba:a1:
3f:c0:73:57:18:30:74:93:f5:14:8d:9f:f2:75:5f:6b:4f:61:
da:d2:be:46:e0:8c:9e:52:e1:6f:b0:12:f6:ae:b1:f2:d7:0b:
a5:5e:f4:30:2a:1d:9b:02:c1:b6:27:cc:23:77:48:08:06:45:
3b:3a:fd:f9:f1:57:b2:47:a8:55:70:bb:21:fa:9b:6d:e0:2d:
9b:36:57:67:bc:ce:ad:85:e1:5d:ba:43:6e:9e:5b:56:47:14:
33:47:2c:04:e9:28:b3:11:ca:3a:b9:dd:25:7f:4d:9e:88:cd:
1c:8c:dc:90:b6:86:f4:b9:f1:b6:ec:5d:21:6d:ac:44:de:94:
4c:4f:66:89:96:cb:1f:c1:48:ca:e3:58:90:c8:b0:45:23:dc:
b1:dd:ed:2b:03:b0:fb:db:08:61:2c:ec:de:ac:29:04:f5:72:
9c:b8:1c:7b:b9:5b:7e:a3:72:68:75:62:a3:94:b0:79:cc:3c:
cc:7d:64:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:12:59 2026 by rpki-client