Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
File: QRoqlAW9oWccEHdvRCYnPJBOStA.mft (raw, json)
Hash identifier: 1892SlrnuSbXltEW5sS22I3kLG61ta2Qr5kiE1Osq1g=
Subject key identifier: 13:61:DF:42:67:71:9C:29:D1:30:2E:52:E7:7F:AC:92:7B:84:F9:28
Authority key identifier: 41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
Certificate issuer: /CN=411a2a9405bda1671c10776f4426273c904e4ad0
Certificate serial: 01A0C10CBCF63F8CECCD7E55D80610DDF8F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
Manifest number: 1A68
Signing time: Sun 20 Sep 2026 23:00:32 +0000
Manifest this update: Sun 20 Sep 2026 23:00:32 +0000
Manifest next update: Mon 21 Sep 2026 23:00:32 +0000
Files and hashes: 1: JhKTt4vHe2Da6Kx5S6KE0aGaD54.roa (hash: nw0ozHE1LZlyAK+hkXXsJOHymcfFOhmuSyMz6eBbqyE=)
2: O5zwSwZaq-PnYfyFgUGaYTtXVCc.roa (hash: EcphMyhwWu+HB1619MCd3HbMcseN3a1eZUs2rmX7LwY=)
3: QRoqlAW9oWccEHdvRCYnPJBOStA.crl (hash: alLbol57laaro9jT+B4nGBG3aZ1KjKzfP3Lo6G/oU2I=)
4: mV0XT4eYWUzPfujoqVHWBgPdVhw.asa (hash: SxQBgXkzl2s7ZSzL5zFHD8gDFNbcwGk2HGZOyqJzEQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:0c:bc:f6:3f:8c:ec:cd:7e:55:d8:06:10:dd:f8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411a2a9405bda1671c10776f4426273c904e4ad0
Validity
Not Before: Sep 20 23:00:32 2026 GMT
Not After : Sep 21 23:00:32 2026 GMT
Subject: CN=1361df4267719c29d1302e52e77fac927b84f928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0c:48:72:c1:f6:0c:db:7c:f5:ae:b0:68:7c:
fe:cd:15:82:a7:61:23:32:79:b1:38:95:c7:f5:10:
28:23:42:8f:e1:75:9a:5c:59:32:70:ec:d4:6a:a7:
77:51:a8:1e:b2:f5:5d:a2:e8:ae:60:09:37:d7:ca:
bc:6d:35:b3:97:35:45:ec:ae:c7:69:44:6d:ce:b9:
fb:a9:5a:da:55:04:39:f7:1f:7d:d0:29:23:cc:fd:
44:3c:59:3e:ba:54:5d:be:54:85:bf:95:06:f3:24:
31:3c:f3:c5:ff:a3:ad:7e:10:51:93:5f:d6:4c:2e:
29:26:62:73:af:df:e4:84:2e:b3:6d:f7:ce:a8:84:
8b:1e:98:30:88:4b:71:b9:d4:9a:ca:d0:fa:36:80:
45:e5:1b:61:35:8e:72:56:ec:5d:ef:7f:42:d3:06:
16:aa:e4:42:b9:31:c8:13:ac:92:b1:40:64:76:0a:
a1:bf:a7:48:cb:4b:00:67:58:2e:7e:9b:55:ed:32:
ed:1e:b9:9b:b4:0b:6c:07:41:8e:5b:38:01:19:cc:
25:61:c9:b9:19:7f:13:37:5d:af:44:24:6a:26:8d:
f9:ac:c2:88:af:84:4a:5c:10:d2:b1:66:2d:bd:68:
6e:35:b9:02:c4:0e:6d:85:92:95:81:32:db:dd:fa:
15:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:61:DF:42:67:71:9C:29:D1:30:2E:52:E7:7F:AC:92:7B:84:F9:28
X509v3 Authority Key Identifier:
keyid:41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f6:98:29:ff:8f:c4:4b:59:b1:a1:bf:1c:a6:50:b9:ff:5c:
23:54:25:81:a0:61:aa:a8:65:5d:ac:cc:bf:2b:f1:a1:f7:43:
e3:c6:43:3e:b9:53:f9:70:f4:62:e8:09:9b:58:60:7e:cb:cb:
bf:2d:97:20:d7:66:10:97:7a:e5:bb:41:95:df:71:18:aa:96:
02:82:43:17:79:e2:49:a0:f6:5f:77:48:e1:c0:77:87:d9:24:
db:76:95:af:17:ce:a1:51:af:81:09:f4:ad:52:bf:39:5b:22:
5b:60:5e:6b:d4:d5:de:b2:ba:d0:bd:17:f2:fc:41:09:95:83:
71:74:d2:c6:59:91:4c:90:eb:92:63:f9:90:3e:48:95:29:01:
f0:df:6a:29:6f:d4:f2:3e:45:f0:10:34:5a:55:4f:f2:26:24:
5b:f8:00:e7:76:7a:8a:83:dc:b3:bf:b4:5b:65:ff:9b:28:ef:
21:fd:f2:2c:ea:32:37:83:65:a7:ff:7c:41:5b:53:a8:e6:be:
fc:eb:e2:a2:25:08:b5:c7:52:48:cb:ba:6d:30:ce:f2:92:08:
4c:61:35:c9:2a:f4:32:bb:a1:51:6b:dc:ad:6e:21:9a:36:24:
a4:03:7f:cf:43:d8:9b:d3:27:19:00:be:46:19:c1:c6:b4:04:
71:b6:36:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:15:34 2026 by rpki-client