Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
File: QdFPKPmNO9zEXhkibx9WFw4xKr8.mft (raw, json)
Hash identifier: 9mnfmtpt0UityFBZAPmZ9hdFQB4a4C5r6bdMEM+I/6M=
Subject key identifier: 3B:82:1B:EE:7B:A8:08:CE:6E:8B:09:11:56:8A:59:F4:75:23:2B:1E
Authority key identifier: 41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF
Certificate issuer: /CN=41d14f28f98d3bdcc45e19226f1f56170e312abf
Certificate serial: 01A0CCD9DB4B944427A00D20390AC4202858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
Manifest number: 1A6B
Signing time: Wed 23 Sep 2026 06:00:24 +0000
Manifest this update: Wed 23 Sep 2026 06:00:24 +0000
Manifest next update: Thu 24 Sep 2026 06:00:24 +0000
Files and hashes: 1: NuvWFYQk-kiKl2MmMjAPNDb8So4.roa (hash: HNkfwrKS+V0tdXG/bTci5kuusdPPHQbnnFcQ26SERCU=)
2: QdFPKPmNO9zEXhkibx9WFw4xKr8.crl (hash: BWhy82ssYPnppMD+q91zxZR2mBrW5kD8QVkLXn+IOdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:d9:db:4b:94:44:27:a0:0d:20:39:0a:c4:20:28:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d14f28f98d3bdcc45e19226f1f56170e312abf
Validity
Not Before: Sep 23 06:00:24 2026 GMT
Not After : Sep 24 06:00:24 2026 GMT
Subject: CN=3b821bee7ba808ce6e8b0911568a59f475232b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:06:09:a0:14:45:bd:54:12:bb:47:32:d1:e7:
7f:55:5a:cd:08:59:dc:a1:cb:10:79:78:5b:ca:d8:
94:29:01:48:21:0e:2a:16:33:78:a3:2c:fc:8b:60:
54:1c:cc:1b:52:1e:de:02:01:1b:48:af:9f:e4:81:
f7:14:14:6d:34:06:9a:69:51:3f:22:11:fe:9f:07:
cc:58:32:e2:ba:e7:80:83:c9:eb:95:a3:6d:ac:a4:
c6:89:82:b4:b3:8f:99:56:48:09:dc:33:d7:88:29:
05:72:63:cf:4c:4f:d7:6d:77:92:65:36:93:72:c3:
2a:e5:65:9f:fb:7d:64:28:7a:b2:78:0a:c7:ba:7b:
68:cf:f5:0b:ca:84:6b:f3:be:bd:d8:62:b2:ce:65:
19:27:8a:98:5c:fd:53:ba:e0:27:cc:3e:bc:20:92:
de:ea:cf:77:ee:fc:32:61:34:0c:eb:f3:54:9d:c7:
1a:92:03:be:6e:29:c9:70:b7:3b:46:2f:d3:77:26:
91:20:eb:78:d4:b8:9d:11:72:d0:64:e6:82:35:14:
80:fe:86:5e:15:d6:c8:bb:d3:49:ac:7a:34:7e:fb:
00:f4:44:62:5f:a1:6b:19:65:82:1e:bc:1c:99:de:
02:a0:68:bb:cb:98:10:5a:5c:c7:4c:d3:34:8d:16:
b5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:82:1B:EE:7B:A8:08:CE:6E:8B:09:11:56:8A:59:F4:75:23:2B:1E
X509v3 Authority Key Identifier:
keyid:41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:49:16:12:05:d7:dc:10:2c:4d:08:60:8b:d5:4d:6e:32:b9:
e3:e2:40:7d:7d:6f:98:04:c8:58:7b:c6:ee:e1:fb:94:2c:32:
2b:82:2c:7b:eb:60:01:f6:7d:33:1d:47:fb:a4:45:80:ba:02:
89:8f:86:5a:df:3d:55:a4:be:10:e2:ea:88:0f:a0:91:72:0b:
f4:d8:66:e3:e1:6a:d9:95:b8:d8:4d:e1:bc:82:53:aa:10:2e:
bc:1f:c5:39:a3:e1:11:56:f8:3c:7c:99:12:c6:7d:79:3d:8c:
b6:b8:c8:ca:e5:2d:b1:8d:74:ed:29:fd:b3:64:17:c5:fa:41:
c0:a6:d7:b5:bb:23:03:11:54:f2:c5:ea:c9:4e:d8:58:c3:d1:
c1:49:db:d3:5f:33:75:35:da:9d:90:a1:4d:0a:4e:44:f9:c5:
7c:e6:fa:31:3c:90:7a:11:8a:85:5e:99:fd:f8:21:d7:d5:07:
4f:cf:b4:5c:78:9e:39:07:d8:a6:78:2d:81:87:ce:68:f4:2b:
14:32:d9:c1:ad:05:01:06:d9:2b:a3:0d:1e:55:e6:82:79:52:
79:4b:a7:63:b3:2e:14:5d:63:db:c6:e8:d3:1d:ad:80:4d:5f:
96:03:04:98:f5:04:82:a9:84:53:9a:d9:a8:07:61:f6:fb:40:
72:38:03:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:20:18 2026 by rpki-client