Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
File: qft75iSm8jMZjio089nZhCmrpGE.mft (raw, json)
Hash identifier: vR3jE5Ns0i9BbDAmVQhegA9PSYTGMfwc44ndLkhb6e4=
Subject key identifier: CD:41:82:5B:E8:07:42:FC:83:6D:85:B5:65:A0:03:73:36:B3:2B:4E
Authority key identifier: A9:FB:7B:E6:24:A6:F2:33:19:8E:2A:34:F3:D9:D9:84:29:AB:A4:61
Certificate issuer: /CN=a9fb7be624a6f233198e2a34f3d9d98429aba461
Certificate serial: 01A1231C921CA94894E42DC74842E6DB1FB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qft75iSm8jMZjio089nZhCmrpGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
Manifest number: 02F6
Signing time: Sat 10 Oct 2026 00:00:37 +0000
Manifest this update: Sat 10 Oct 2026 00:00:37 +0000
Manifest next update: Sun 11 Oct 2026 00:00:37 +0000
Files and hashes: 1: DEtXANHZs-ySfJ2DbeIG2FY0feA.roa (hash: CiC1X69cIhHbTBPnPYg9pS10KzYxN0NPXzJ/qp7bwgE=)
2: qft75iSm8jMZjio089nZhCmrpGE.crl (hash: 0hZMYfXAgAB/0tgyg/VMPfefBFJDKO/gKQaMZwuOVB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qft75iSm8jMZjio089nZhCmrpGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:1c:92:1c:a9:48:94:e4:2d:c7:48:42:e6:db:1f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9fb7be624a6f233198e2a34f3d9d98429aba461
Validity
Not Before: Oct 10 00:00:37 2026 GMT
Not After : Oct 11 00:00:37 2026 GMT
Subject: CN=cd41825be80742fc836d85b565a0037336b32b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8d:e8:20:9c:e0:ad:f8:a4:70:75:43:9c:6f:
d5:98:3b:cf:c2:a8:92:21:89:48:73:fb:e9:91:e1:
d3:c0:95:b9:4a:f4:f8:d1:ce:e6:58:8a:2c:20:75:
12:2c:da:24:e9:26:5e:2d:4f:29:94:0a:06:72:df:
bb:bf:37:ab:a5:19:d6:e5:71:bd:64:e3:44:c8:54:
89:85:55:20:bb:08:c5:e5:93:80:26:0c:40:85:ee:
26:3a:6b:cd:20:d7:69:4b:31:f6:46:34:ba:6d:cf:
13:17:aa:5d:1d:a5:cb:37:69:f5:eb:7b:8f:6e:19:
3c:d1:5c:6c:9d:49:09:db:91:cf:14:98:e1:68:d1:
20:52:dd:39:8f:5b:68:13:8d:ba:62:e1:ab:df:db:
4a:4e:1b:9f:42:6a:45:6c:21:91:dd:36:07:30:ba:
30:a6:fd:7f:d2:f8:01:51:6f:12:04:c0:78:f5:e5:
82:ba:cd:4a:6b:bf:90:f4:87:a2:43:ae:0e:1b:ed:
eb:59:90:67:62:84:6e:67:d2:a1:1e:67:69:62:0d:
81:f5:40:91:26:10:98:57:2a:0b:ca:c6:76:42:70:
9b:c3:6a:98:b8:fa:63:b7:53:0f:68:b0:5b:89:3f:
cb:fb:e5:e6:6c:c4:78:49:a6:2e:d6:a5:1f:0e:4b:
1d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:41:82:5B:E8:07:42:FC:83:6D:85:B5:65:A0:03:73:36:B3:2B:4E
X509v3 Authority Key Identifier:
keyid:A9:FB:7B:E6:24:A6:F2:33:19:8E:2A:34:F3:D9:D9:84:29:AB:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qft75iSm8jMZjio089nZhCmrpGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:04:de:8b:30:84:4d:52:ef:14:af:d6:7e:dd:e4:4d:0a:0b:
a0:60:6b:e1:a5:00:66:8d:55:d4:9f:34:36:a4:aa:40:b9:49:
e2:4d:83:cb:18:a2:7e:02:0e:0d:50:45:df:db:88:d2:e8:96:
fc:e2:e1:56:c1:07:1c:be:14:17:cc:7d:99:11:4c:3e:a5:b6:
ae:de:49:a8:14:70:b7:f1:f7:3e:a9:a8:60:eb:fb:85:b5:7e:
32:15:e6:ac:66:d2:bb:92:de:f2:e0:24:72:b6:dd:f9:b3:8c:
5f:cd:b5:bb:39:69:5f:9e:cd:bf:cd:47:1f:81:b3:d4:09:3b:
01:ad:ca:82:fd:90:ea:3c:98:c6:50:c3:3c:b9:5c:9c:a9:30:
18:9f:25:b7:21:34:8d:f6:a7:36:74:02:8f:2c:a8:5d:69:a4:
13:9a:ea:53:64:3f:ba:7f:d7:37:a7:13:f4:81:28:66:51:0d:
41:a8:22:c4:37:1f:db:56:60:7c:9e:c5:7e:4e:8d:32:d3:49:
3d:a4:ec:39:c6:74:a1:e7:0e:f8:80:86:60:07:7f:5d:d5:f0:
7f:e0:37:1b:76:e8:be:a1:1d:a3:b4:90:1a:68:48:d3:2e:b5:
8a:70:c4:73:72:6a:0a:2e:99:76:74:7e:51:3d:44:29:4b:b1:
71:c0:5e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:20:10 2026 by rpki-client