Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
File: Q8FllZZq-wus8deTfyRdagUiIaM.mft (raw, json)
Hash identifier: ct2+0Z43VZX41em8jBqRr8ZGBSFoQDeTXPb/SN+Xxuc=
Subject key identifier: E6:EF:67:2D:C0:DA:CB:73:D0:51:BA:40:DA:49:4D:0E:3C:B2:32:E8
Authority key identifier: 43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
Certificate issuer: /CN=43c16595966afb0bacf1d7937f245d6a052221a3
Certificate serial: 01A0D19218F86661E9F47EC4F37743A78A7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 04:00:07 +0000
Manifest this update: Thu 24 Sep 2026 04:00:07 +0000
Manifest next update: Fri 25 Sep 2026 04:00:07 +0000
Files and hashes: 1: 4txRYI484TEAkKZQuGXE7v7kNFE.roa (hash: 0LHuR+m3x801pvrNDlfkYNVRhvh7QTNXeF2avzGdu+o=)
2: 7j99n4d6ANqzBKZIb7AtbN16HNM.roa (hash: rlAo1p9sV9yO7tsi280DXkwJRnsLW38pb6gpoEvvu7w=)
3: Oo3ap3FWMfZFuKT_5X4cPgbvWBY.roa (hash: SClF6a/p5GxrqHhEbYnu5sljGKEXM6UG1fAy0VW6itY=)
4: Q8FllZZq-wus8deTfyRdagUiIaM.crl (hash: V7NarzsikRTQtnxJ3/jLEZQumAG+P1tqUYd7BQ6nrUI=)
5: ZoLYEk24uuNv33EjJ4m1okSNS6w.roa (hash: aOyue5Aqc/KW4Mnoyy7ahJjLtcQmVKEsi36/Y3I9yHA=)
6: aj9euBKzI3NIH66jZPh8bbmGI6A.roa (hash: 8jTNJ61hr37vcKXTL8TlYqDMnFRq1ith6TwEVeBelwE=)
7: nH1OKpXJbAvAHxN6XWdXMd6gZuY.roa (hash: j3S1I730IB3QQneXnDNotR19hJRoRUA2SbUVmp/YndQ=)
8: ottEKlKze703Xucot2ljZZmoong.roa (hash: 1DtEnDgUDcQi4vqWCrTRW5+Lsqb1kTbcbswrOF8wGaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:18:f8:66:61:e9:f4:7e:c4:f3:77:43:a7:8a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c16595966afb0bacf1d7937f245d6a052221a3
Validity
Not Before: Sep 24 04:00:07 2026 GMT
Not After : Sep 25 04:00:07 2026 GMT
Subject: CN=e6ef672dc0dacb73d051ba40da494d0e3cb232e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:eb:8d:b8:ae:95:35:35:ec:4d:c2:3c:b2:27:
da:aa:1d:8c:63:33:da:60:d6:8a:44:5d:91:64:8e:
38:91:25:e5:cf:28:7e:83:8b:f6:92:8d:8d:d2:3d:
54:34:a0:78:b0:c3:8d:c2:65:50:8f:85:77:84:86:
81:85:c8:2c:46:f4:6c:5f:bb:a8:74:28:c0:19:46:
e5:ff:f1:33:8c:70:d4:76:da:2b:52:1e:74:e5:60:
6e:d6:22:13:1e:ad:0c:8b:7f:d4:fb:bc:52:88:ee:
bb:67:a7:dd:d0:33:24:2c:44:00:17:51:bb:64:fa:
27:41:73:31:9b:d6:02:a3:a3:9d:d6:f3:9f:43:91:
a7:9c:63:00:73:e4:8f:b9:35:fa:56:6a:30:5a:02:
11:50:37:cd:02:bb:85:ac:28:1d:67:23:12:b7:80:
52:a3:83:0a:38:0d:2c:21:99:ab:2e:c9:35:34:30:
30:af:7f:25:08:f1:76:0d:24:f4:31:b8:9f:91:af:
1c:a3:8e:39:8e:96:a4:40:0c:a5:81:58:d4:a5:1b:
22:a6:2e:dc:1d:4f:8d:3e:7f:b7:39:6e:e8:c1:a8:
b0:49:2e:4e:67:82:70:5d:13:ad:8a:c1:c7:6a:a6:
29:0b:42:b9:ad:97:23:f6:dc:5f:b1:07:d9:d5:59:
3a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:EF:67:2D:C0:DA:CB:73:D0:51:BA:40:DA:49:4D:0E:3C:B2:32:E8
X509v3 Authority Key Identifier:
keyid:43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:aa:14:83:b6:c3:06:67:c5:b7:7f:8e:bc:23:6e:c0:70:f8:
e8:a8:22:61:1e:1d:93:a6:e7:8a:92:66:3d:12:7d:9a:fe:34:
75:f5:35:fe:54:3a:ef:e6:bb:0c:41:54:83:14:aa:85:c9:85:
8f:8c:90:63:3c:ef:d3:80:26:09:15:87:b3:e4:8d:f4:23:cc:
3a:48:02:37:1b:dd:e9:4b:e4:51:30:ea:91:bc:39:cd:ac:ac:
62:96:5a:ac:e0:63:97:c4:16:f7:ca:d1:36:f8:23:aa:d3:04:
c3:b1:f3:d2:3a:69:ff:e2:e5:fd:db:37:a4:78:87:78:71:0f:
ad:f8:67:47:73:15:cb:16:1f:b8:94:72:b3:e0:4e:f8:5e:26:
02:2f:1d:ad:42:39:51:0d:f0:18:ae:25:2c:e0:bb:21:f2:5c:
bf:28:06:08:d0:77:f4:71:59:7f:0e:57:8d:89:16:42:d8:8d:
67:0b:c5:54:57:48:f8:34:04:ae:b2:db:1a:12:59:e1:27:57:
69:89:cf:25:ab:cb:15:85:b3:5d:8e:91:41:14:4d:90:24:e2:
88:61:56:e3:18:d9:11:e7:f1:ff:1c:bd:c3:79:02:65:f3:cc:
c8:ea:13:e3:a8:5f:74:62:b8:eb:f6:35:0b:4a:dc:fa:75:e9:
62:cd:79:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:06:49 2026 by rpki-client