Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
File: QpNhzRgdhu9U6-L8kagOxTTOrHg.mft (raw, json)
Hash identifier: iv7bV8MlMqt0Z0hk+w60W6MrMItHDEKXU5WV4QlrkxQ=
Subject key identifier: 93:9A:44:08:A4:C5:B5:78:F2:C1:88:04:95:3F:00:9F:B2:9E:FC:E6
Authority key identifier: 42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
Certificate issuer: /CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Certificate serial: 01A0D049187974A68E000765BE7B9E57031F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
Manifest number: 0E9D
Signing time: Wed 23 Sep 2026 22:00:46 +0000
Manifest this update: Wed 23 Sep 2026 22:00:46 +0000
Manifest next update: Thu 24 Sep 2026 22:00:46 +0000
Files and hashes: 1: 9pGoDb8m8-uHunZG0g4IpC_J3W8.roa (hash: j9T9+HzYFR2vUjj6NG2JWZokXgG77nlwhtywobwQLLE=)
2: QpNhzRgdhu9U6-L8kagOxTTOrHg.crl (hash: 8tP30kQuQvib0kjFyHsEHLQxwjDtPM+9KJztMJgBNpY=)
3: fdAWH39zdbtm7mMYQ8ChXiiwNho.roa (hash: DJA2F7Y08swfNI9bds3Jp09xBGdfNtIaDN7pjPNot9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:49:18:79:74:a6:8e:00:07:65:be:7b:9e:57:03:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Validity
Not Before: Sep 23 22:00:46 2026 GMT
Not After : Sep 24 22:00:46 2026 GMT
Subject: CN=939a4408a4c5b578f2c18804953f009fb29efce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1c:54:b3:09:e5:9c:ba:2b:7d:dc:7d:a6:d9:
38:25:bf:ec:f5:44:93:db:dc:b8:bd:bd:fa:08:c0:
aa:cf:e7:5a:5e:97:12:fc:85:13:98:db:54:63:7e:
59:1b:53:d4:3e:a4:c9:3f:4a:09:d0:06:fa:81:84:
a6:93:ca:16:32:ac:e2:ac:c9:00:44:a8:85:7f:ab:
f4:34:0b:fc:a6:50:e0:48:89:e1:6d:f4:78:22:d4:
a7:54:6a:b0:e1:5a:b8:4e:3e:d5:21:03:6b:72:94:
f0:ea:0c:b1:6b:bd:3c:f6:ca:e8:51:1e:6a:0a:17:
fa:f0:49:da:c6:08:d9:68:92:26:0a:78:9b:93:b3:
79:29:51:cb:14:4d:32:a3:e8:4b:60:10:c1:ad:9c:
48:a8:30:c6:a0:47:6b:ff:05:5c:96:7d:a3:63:15:
90:8f:0a:e1:95:0b:4a:8e:9c:0a:2a:82:78:d1:aa:
24:bd:50:ac:e9:fa:14:8d:81:a0:4c:55:92:ac:88:
41:8f:c3:bc:bf:b5:50:b6:f3:52:61:23:09:18:13:
b1:4e:b2:f1:56:6b:e8:49:04:ed:e5:de:46:3f:62:
af:01:80:96:ed:00:f9:10:e9:93:49:1c:b2:91:6d:
48:7f:64:e1:dc:1c:9d:cc:34:c5:cf:15:b0:8d:3c:
22:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9A:44:08:A4:C5:B5:78:F2:C1:88:04:95:3F:00:9F:B2:9E:FC:E6
X509v3 Authority Key Identifier:
keyid:42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:42:ca:4a:c9:a5:7d:02:c7:d3:54:6a:84:8c:a7:2d:13:29:
61:f7:6d:c6:08:75:20:9d:2e:50:91:87:e7:8b:30:2c:1d:18:
39:fb:e7:50:fc:ab:f6:e7:75:05:33:06:27:b8:39:11:de:87:
e5:d0:91:83:5a:68:79:f0:61:58:d4:b9:56:91:5e:7b:f0:1d:
1d:a6:e7:80:c3:67:3a:11:8c:52:8e:8e:fd:0a:00:84:28:a1:
51:8f:0a:cb:35:4b:73:77:c9:02:49:f9:41:ff:cb:e6:77:1a:
35:51:1e:d4:d2:ea:b7:bb:98:8b:8e:33:fe:9c:81:02:1d:2b:
66:fc:52:5c:e4:11:c7:9a:70:7a:4e:46:4b:3c:6a:ea:4f:a4:
16:35:a7:81:3a:01:a0:78:dc:d2:fb:27:36:ee:04:7c:86:d2:
39:cf:02:a7:0d:b2:79:0f:bb:d6:26:d1:bf:08:1d:eb:8c:9c:
c0:f2:9d:ec:2f:81:ea:b1:bf:62:f6:fb:71:15:8a:a8:8c:9a:
06:0d:a0:1b:a6:e9:6a:ba:78:d9:dd:44:dd:71:ec:20:4a:5c:
5e:b2:d7:33:c0:dc:4c:c3:ce:33:61:0b:73:11:c9:e7:5f:22:
bc:f7:44:f8:d7:89:dc:ca:8a:db:a6:62:35:2a:5a:88:4e:4b:
3c:39:ca:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:01:33 2026 by rpki-client