Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
File: Q8d7RzY2gTePrORmFB1UzIg5nPU.mft (raw, json)
Hash identifier: KPp5tScS5vpS3tDVX6Xx09/zqvVLb4OsbIKzdn7ZjNU=
Subject key identifier: 88:36:27:1E:65:D1:C5:12:6C:9E:94:EF:A2:25:FA:5B:CE:07:9B:6B
Authority key identifier: 43:C7:7B:47:36:36:81:37:8F:AC:E4:66:14:1D:54:CC:88:39:9C:F5
Certificate issuer: /CN=43c77b47363681378face466141d54cc88399cf5
Certificate serial: 01A0D3835FB387628E5191C5336C51436D50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
Manifest number: 19FF
Signing time: Thu 24 Sep 2026 13:03:17 +0000
Manifest this update: Thu 24 Sep 2026 13:03:17 +0000
Manifest next update: Fri 25 Sep 2026 13:03:17 +0000
Files and hashes: 1: 1XdNFJlYALUGMKogiIBRKN_MGo4.roa (hash: E2oHH/KY2uFlsQZera9X/UCkx0/EdwNbRkr7QYI3dr0=)
2: Q8d7RzY2gTePrORmFB1UzIg5nPU.crl (hash: iuN2TqxHAuk8vhT4wkDee35wcDpaZVc7wvTWYf67kaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:03:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:83:5f:b3:87:62:8e:51:91:c5:33:6c:51:43:6d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c77b47363681378face466141d54cc88399cf5
Validity
Not Before: Sep 24 13:03:17 2026 GMT
Not After : Sep 25 13:03:17 2026 GMT
Subject: CN=8836271e65d1c5126c9e94efa225fa5bce079b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3b:58:26:47:a0:46:5e:79:9e:1c:2c:2c:48:
d0:e2:2e:0e:43:02:c4:ec:dd:2b:ee:d8:a3:3c:92:
b8:b5:05:05:51:bf:a5:58:01:dd:83:72:08:5f:d8:
c5:d0:07:03:68:88:22:c7:ae:ee:04:62:9d:fb:7f:
a4:ff:dd:48:a9:ee:14:cf:17:21:3f:0e:8d:bd:8c:
25:2b:df:a6:37:0b:78:ac:69:07:96:77:0a:cb:1b:
23:ba:cc:db:63:e1:46:e7:25:69:c0:76:bc:a0:4d:
35:80:36:42:eb:18:d1:ab:7a:3b:62:b7:1a:f0:f5:
a9:c8:e3:f9:32:a8:76:60:d0:3d:99:7c:b6:cf:68:
a7:a4:9d:7b:b2:18:99:9c:fe:81:90:61:cb:e0:39:
66:37:a8:b9:a6:50:22:e5:d6:90:d4:71:9f:8a:7c:
7e:29:fd:1d:9d:c2:d8:cd:d3:5f:07:dc:a5:b1:d4:
33:07:b9:5a:ae:ff:a8:bc:73:d6:80:5f:51:ca:f1:
9e:e7:09:95:a7:5f:8b:0d:d3:4c:3d:cc:e8:86:53:
d0:ad:e5:b9:2c:2d:2f:73:eb:3a:b7:dc:50:80:36:
ba:ec:fc:be:99:15:92:ac:e0:a3:23:c5:c4:a7:43:
0f:2f:ae:b7:95:2b:f7:b2:d1:f4:59:1d:95:ec:03:
ed:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:36:27:1E:65:D1:C5:12:6C:9E:94:EF:A2:25:FA:5B:CE:07:9B:6B
X509v3 Authority Key Identifier:
keyid:43:C7:7B:47:36:36:81:37:8F:AC:E4:66:14:1D:54:CC:88:39:9C:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:4f:6e:80:86:2a:78:8b:5d:27:8d:7a:2a:5d:53:6a:46:08:
b3:28:d0:44:e0:d4:ea:d8:8e:88:7a:a0:4c:ab:16:d2:2c:18:
21:e7:78:4f:01:47:84:d2:81:54:a3:e3:6d:57:07:df:f4:88:
07:c6:d1:fc:fe:1c:87:db:b0:a5:1f:e2:07:5c:12:8f:4c:46:
d0:c6:6f:47:80:e7:b1:26:7d:6d:4b:3d:7b:3c:25:2b:4d:6e:
24:d5:71:69:5e:52:d8:75:53:4f:3b:77:33:f3:cb:2d:28:57:
11:2e:11:76:f8:ff:58:d9:01:b7:72:1f:7c:24:62:35:1f:73:
15:ac:a7:d7:fd:4d:30:2d:0e:46:ed:91:3c:d4:89:6d:9c:ea:
98:20:71:dc:7f:ca:f1:2b:6f:15:5a:49:5a:f3:07:10:9c:43:
f5:c7:b4:6e:c2:91:b1:fa:ba:67:eb:58:fd:38:d0:c5:a4:a3:
bf:bf:39:7a:dc:73:b1:c4:e1:f3:d1:e3:03:92:79:b4:ed:38:
47:0e:ed:ac:d0:6d:3f:2c:af:cf:0c:58:31:91:8d:27:5b:6f:
5e:a4:b1:1f:e6:ed:b9:d2:c6:f9:6f:8a:4c:55:d2:a6:5a:45:
53:e8:44:d2:f0:e2:03:09:b2:24:a4:30:74:4d:fa:88:77:a9:
a0:4a:cc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:49:57 2026 by rpki-client