Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
File: qx0OfoGLr5p6-5hmEkKSphqvuMo.mft (raw, json)
Hash identifier: iaTTQamXz3cAxU9hurtZj3OoB+SCjtxOoQW4sAB1QzM=
Subject key identifier: A6:A1:07:6B:1B:C8:F0:8A:69:2F:13:90:0B:CB:56:32:EA:D7:99:31
Authority key identifier: AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
Certificate issuer: /CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Certificate serial: 01A0EAE543922293BA294E76357999021B2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
Manifest number: 1A82
Signing time: Tue 29 Sep 2026 02:01:28 +0000
Manifest this update: Tue 29 Sep 2026 02:01:28 +0000
Manifest next update: Wed 30 Sep 2026 02:01:28 +0000
Files and hashes: 1: E_pvlXfH-_8Fl9xtt4-r8I-I2Wk.roa (hash: CAT6hhcy6gNQOJHA0DTluxIpTJS1s6DqnJJcDnZ2tTQ=)
2: HrIDUx_18W3aDcgzp0a-tZsGpP8.roa (hash: cPyVftTbNGSIIN5cX0+FBbwXCXBqNj2p4PsBxHd4Gn0=)
3: qx0OfoGLr5p6-5hmEkKSphqvuMo.crl (hash: wMi5VkkNxxRhjPIEBVrOkWIk2QSHwGcuSpXGcz6ezQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 02:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:e5:43:92:22:93:ba:29:4e:76:35:79:99:02:1b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Validity
Not Before: Sep 29 02:01:28 2026 GMT
Not After : Sep 30 02:01:28 2026 GMT
Subject: CN=a6a1076b1bc8f08a692f13900bcb5632ead79931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6f:68:f6:f3:6e:76:3c:19:79:47:ff:f6:ca:
c8:03:0a:c1:9d:f6:6c:40:24:9e:b1:5d:be:ea:f1:
6b:d7:00:00:99:30:03:88:a1:e6:85:43:43:df:88:
93:e9:60:e0:e0:8a:ae:c8:00:1b:ab:89:ba:04:f3:
78:a5:a6:f7:b4:e2:5a:31:3a:74:94:2e:d2:44:df:
64:18:7f:46:01:11:12:92:52:e8:7c:fe:41:43:0d:
91:dc:91:82:d6:6d:5b:30:42:76:39:9b:e4:82:b8:
bf:0b:a9:ab:25:8a:f9:c7:6d:95:20:6b:5e:d7:23:
e3:ec:48:36:cf:62:45:4b:67:5d:df:ba:d2:65:04:
89:eb:18:a0:4c:47:15:ad:c6:4f:95:a1:a9:57:11:
75:f0:c8:21:4e:fe:9c:b3:4d:af:79:dc:5f:ed:63:
b6:08:b2:dd:59:a8:5b:97:6f:97:38:e6:3d:f2:57:
ba:f0:19:57:df:97:93:fb:0c:48:5a:62:eb:b7:6d:
22:c7:32:78:75:8c:a1:54:47:75:ea:e3:31:1b:aa:
7c:87:4c:ee:e1:39:47:52:79:e8:cd:c1:31:6d:40:
c5:97:ce:a4:e4:51:f0:0a:c1:51:78:09:42:91:ac:
ea:e7:54:fc:01:01:6b:47:56:a1:dd:dc:9a:46:67:
61:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A1:07:6B:1B:C8:F0:8A:69:2F:13:90:0B:CB:56:32:EA:D7:99:31
X509v3 Authority Key Identifier:
keyid:AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:93:5e:cb:e0:b5:5b:47:36:b1:be:1c:b2:02:25:13:33:69:
cc:d4:48:da:ae:b1:60:a8:69:c4:67:c6:65:bc:1b:fb:ec:0a:
29:fe:92:bf:6b:ae:13:0a:3d:9d:bd:3d:76:5a:9b:71:ef:02:
ec:53:32:b6:d7:2c:c8:66:fe:78:6e:5d:55:24:e9:07:bc:f6:
cb:a5:0c:0d:75:88:95:4c:0f:72:1d:b6:6f:71:63:14:af:c8:
0b:91:37:9e:aa:84:f4:dd:61:e4:af:fb:a9:10:e9:58:f4:1c:
91:bc:ab:97:5c:ef:69:be:a8:ae:75:cf:be:b2:68:72:67:4a:
d6:e1:09:d9:06:9a:0a:3d:39:d1:79:07:1e:d7:dc:53:57:7f:
4b:0e:3d:e1:f2:0e:e2:ff:a1:d6:7b:ad:a9:b8:c4:8a:ec:2e:
f7:c4:9f:9d:b1:40:fa:c0:4b:12:23:70:60:80:e9:47:5d:02:
3e:90:6d:59:e5:5a:13:56:32:bf:98:4d:bf:77:d8:31:c8:dd:
7b:88:4f:d3:c9:78:50:f3:90:e1:a4:14:ee:d8:02:ee:51:85:
54:18:e4:2e:57:16:4d:3a:2a:47:99:5d:87:e7:e0:49:93:ae:
af:65:f9:19:81:40:a4:78:97:f9:b1:ac:91:cc:b8:f4:2f:22:
bd:3f:29:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:28:46 2026 by rpki-client