Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
File: Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft (raw, json)
Hash identifier: AOhLiNnm8G7tZTl4myDok2CA/WxO9PsdIMJAX/xgzko=
Subject key identifier: 72:39:96:63:8E:30:AD:80:D6:36:A9:D5:1B:78:F6:8F:FA:97:6E:2E
Authority key identifier: 41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31
Certificate issuer: /CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31
Certificate serial: 01A0CE2431A862FFE7ED233E83C3FD138F29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
Manifest number: 13FE
Signing time: Wed 23 Sep 2026 12:01:13 +0000
Manifest this update: Wed 23 Sep 2026 12:01:13 +0000
Manifest next update: Thu 24 Sep 2026 12:01:13 +0000
Files and hashes: 1: NQ75nb1-xJ7HIs6FdHfLr_Qn5o8.roa (hash: 0/Ed5GPxhq59pa7mSV6ONsdGXpQguRmYVeDEeOnkcHU=)
2: PXrC0OWTvC3oDvSMYzCzL7Vl-uQ.roa (hash: 2Ri2mgKyHMUEf2CJlFmGd9Z/Z2goUwzz5lX8kmekZSA=)
3: Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl (hash: ihBZMgEBwYhHANLgSWor26OvNOUa6h0muPsvQ6PTAWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:31:a8:62:ff:e7:ed:23:3e:83:c3:fd:13:8f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31
Validity
Not Before: Sep 23 12:01:13 2026 GMT
Not After : Sep 24 12:01:13 2026 GMT
Subject: CN=723996638e30ad80d636a9d51b78f68ffa976e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1a:90:49:fc:b4:1b:d5:d4:99:26:7e:66:5e:
b4:66:0b:eb:ea:a4:a6:42:49:26:da:1c:0d:8b:64:
bb:7b:5b:1a:ad:2e:12:75:4c:6c:b6:fd:e1:92:90:
c9:2c:8a:74:09:b5:3d:44:40:1d:8c:33:7e:2a:87:
b3:1a:3e:0c:58:cc:e8:9b:57:d2:7a:95:a0:0c:9d:
dd:ed:15:0c:09:4f:5d:a0:35:0c:b1:65:c5:f8:a2:
37:ab:c3:e1:ef:43:e6:0e:d9:9e:0e:8d:2d:fe:7c:
54:79:8b:08:ca:c6:0c:bc:fb:d9:67:12:e4:e2:a4:
04:ca:ce:bd:55:d4:19:b7:fb:20:b6:df:0d:f3:0c:
e5:c9:4b:9b:94:84:91:2a:ae:62:d1:5f:a4:72:9c:
e9:c1:45:d3:bc:2b:16:e8:9f:55:3c:3a:22:55:5d:
2b:11:8a:ed:eb:a5:01:fd:40:f3:ed:eb:5c:fd:43:
8f:c5:32:84:ac:0d:eb:ca:fa:ad:97:26:62:2d:2c:
84:d4:01:fb:9c:dd:68:0d:92:7f:3a:8b:3d:c1:38:
17:c8:b5:7d:c5:f2:e8:40:44:da:72:4f:e5:4a:93:
ee:b7:9a:51:c8:a1:d0:5f:a2:e8:93:b3:90:2e:b9:
a7:51:76:15:63:67:8b:0f:5a:c1:1a:93:1f:de:44:
99:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:39:96:63:8E:30:AD:80:D6:36:A9:D5:1B:78:F6:8F:FA:97:6E:2E
X509v3 Authority Key Identifier:
keyid:41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:11:00:d3:03:35:f9:b5:c9:bd:93:82:63:f7:f6:7c:42:aa:
e1:5d:ef:4c:cc:3a:52:bf:3e:51:d9:39:96:1c:44:f6:c4:38:
28:39:4b:f5:b6:5c:bf:14:91:f7:b2:0b:44:5c:7e:88:24:c0:
7e:0b:9d:c3:dd:c8:94:69:06:31:2d:9c:63:6c:d0:25:3c:40:
7d:fb:c0:e9:c8:79:de:3d:0e:15:56:e0:5c:a2:a3:71:ad:52:
a8:fb:41:e3:98:37:54:08:75:22:36:5e:7b:b5:da:28:75:e4:
4a:ca:f9:dd:81:82:0a:f0:7d:a1:ec:41:bb:87:38:30:e3:86:
82:fa:d0:d5:b6:cb:7b:1a:57:71:69:82:6c:5b:54:64:f0:a5:
f8:48:8a:ee:63:a7:59:5d:b6:1a:bd:d1:f5:22:1c:ff:06:73:
a8:34:f9:b9:6a:ed:97:ba:14:2b:cf:ef:84:20:62:98:58:19:
17:61:ff:67:29:03:25:ff:08:4d:17:18:08:64:93:e0:e7:7a:
27:53:9b:c8:cd:77:e5:7a:6a:52:49:65:56:14:48:3d:a8:3d:
50:7a:8c:ce:d7:c9:81:ee:82:99:c0:03:52:24:16:a4:9a:05:
3d:03:56:8a:48:05:3d:8d:e8:71:c7:a7:5a:1b:f1:ee:56:47:
02:e4:02:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:59:38 2026 by rpki-client