Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
File: QDx-hd5J15JM5Q09ap5S6enC4xI.mft (raw, json)
Hash identifier: BIyG4a5fTmzzMRHGaohYCF5wPUd99OXoV/W3IoIhWno=
Subject key identifier: 9A:EC:CE:7A:CA:5D:DC:CA:8E:0A:18:FD:E1:D8:42:18:B1:1A:85:2B
Authority key identifier: 40:3C:7E:85:DE:49:D7:92:4C:E5:0D:3D:6A:9E:52:E9:E9:C2:E3:12
Certificate issuer: /CN=403c7e85de49d7924ce50d3d6a9e52e9e9c2e312
Certificate serial: 019D9A75037EBC2D36B3C32CB6F222C7ECE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
Manifest number: 1688
Signing time: Fri 17 Apr 2026 08:00:52 +0000
Manifest this update: Fri 17 Apr 2026 08:00:52 +0000
Manifest next update: Sat 18 Apr 2026 08:00:52 +0000
Files and hashes: 1: QDx-hd5J15JM5Q09ap5S6enC4xI.crl (hash: FmNULcVekUllQNt1LoHst5Qeza02eBemO1rTPpavhd8=)
2: i-5JU6m0HCD3U3xlIXpYe2CvZ6s.roa (hash: DdvpLWQk/bI8gzJCBKoMFQlNjo/QKF7hqu6rxtSiFmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:03:7e:bc:2d:36:b3:c3:2c:b6:f2:22:c7:ec:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403c7e85de49d7924ce50d3d6a9e52e9e9c2e312
Validity
Not Before: Apr 17 08:00:52 2026 GMT
Not After : Apr 18 08:00:52 2026 GMT
Subject: CN=9aecce7aca5ddcca8e0a18fde1d84218b11a852b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8a:65:02:7c:21:33:50:0b:b1:f2:b3:e9:e5:
0a:04:74:c8:e7:23:1e:93:4c:04:22:43:d5:ed:e7:
42:19:45:34:8f:69:74:bf:df:f6:a3:af:35:bf:d6:
3f:fd:92:fe:c8:c7:f5:d7:0a:ed:31:dc:d5:02:25:
43:22:cb:8d:41:1d:25:93:ee:24:3b:80:6a:6b:0e:
72:c3:48:de:6d:3c:06:06:da:d8:70:81:8e:14:bc:
7b:42:e3:cc:4a:38:9a:b3:8c:0d:fe:8b:80:ea:1a:
26:0f:67:ec:93:10:3c:a5:4c:ce:aa:38:41:6d:15:
00:a6:6b:a1:a8:72:69:75:22:1d:84:38:ab:8f:6f:
9c:f0:f5:4a:dd:4a:f4:00:41:1b:84:d8:e8:cb:fe:
96:51:38:1d:43:a7:74:5b:92:ba:28:1f:0a:4e:67:
8c:a3:4c:f5:fb:29:60:27:87:e2:37:b7:c0:13:6a:
3c:9a:44:f4:17:c6:1f:13:83:db:94:b8:86:3c:95:
50:55:15:dd:e1:91:9b:38:4c:a8:36:8b:38:78:87:
a8:35:ae:99:f1:6f:ea:dd:2f:55:c3:a4:d0:04:9e:
b4:af:4c:76:fe:23:3c:74:2e:23:29:6f:2b:22:9e:
d2:69:c6:d2:09:65:b9:dd:25:1c:f1:b2:63:1f:17:
6f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:EC:CE:7A:CA:5D:DC:CA:8E:0A:18:FD:E1:D8:42:18:B1:1A:85:2B
X509v3 Authority Key Identifier:
keyid:40:3C:7E:85:DE:49:D7:92:4C:E5:0D:3D:6A:9E:52:E9:E9:C2:E3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:07:6e:ce:55:de:47:18:cd:0d:37:9d:7e:93:2a:0d:33:a8:
ea:45:9a:75:f2:92:b9:9f:01:ec:ec:67:35:80:93:a1:a0:75:
57:3e:2c:09:0e:60:99:74:4d:35:d4:29:49:ec:0b:68:bd:9f:
8f:cb:7c:cb:b2:10:39:90:8f:e1:22:dc:05:79:5b:fb:bc:3c:
fb:34:11:70:46:fe:c9:e8:07:b1:bd:60:35:b1:2a:82:9e:10:
40:f5:e9:47:4f:61:ba:5d:31:72:55:c5:f3:9a:82:e6:14:53:
1f:99:d0:d7:70:9e:f2:a3:51:1a:d7:c4:e7:7a:9c:c8:4a:c7:
f9:44:6d:5b:20:44:4a:f1:ab:09:02:46:64:56:7d:42:9e:74:
62:08:a4:d1:a1:11:0f:a7:27:7c:fa:e7:00:81:ea:77:2a:1b:
26:0c:11:aa:a9:e7:70:3a:86:60:17:a0:5e:85:b9:25:db:c6:
c5:08:33:14:6c:5b:92:47:21:3b:86:e8:83:3f:a2:89:9e:63:
0b:e6:fd:21:45:fe:b0:19:1e:f5:5c:8c:06:38:05:30:0c:5c:
4f:37:35:0a:bd:ca:38:2e:eb:f3:49:a1:81:dd:69:90:01:15:
a3:ed:53:d5:8e:9c:c2:17:5f:b2:bf:e8:2a:91:10:dc:d9:45:
fa:dc:29:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:05:32 2026 by rpki-client