Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
File: QdELiOsk9iYtkxU2il0B4eCGDE4.mft (raw, json)
Hash identifier: 9OkddZpLWuEAkiq99T7K4pvdt7iHKjHGaDsI6+YQO/o=
Subject key identifier: 69:83:F7:B6:D9:3F:C5:3E:A9:3A:CC:AB:B3:24:D0:23:E8:32:87:98
Authority key identifier: 41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
Certificate issuer: /CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Certificate serial: 01A0D94CC2CC133DBEF11EF0BD52497FFD41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
Manifest number: 1047
Signing time: Fri 25 Sep 2026 16:01:21 +0000
Manifest this update: Fri 25 Sep 2026 16:01:21 +0000
Manifest next update: Sat 26 Sep 2026 16:01:21 +0000
Files and hashes: 1: 21M7HF4__TSSYuc94uYUsxaViMI.roa (hash: bLnj/IRZ795Oev6VIkUJOays0OV+AGQSOAXtErO1j5g=)
2: QdELiOsk9iYtkxU2il0B4eCGDE4.crl (hash: xIkasTDnLsk9hR9icIfJIbchcLgQc2sIIJSNQ/zDJZo=)
3: eaXikRCsLtsFiUKz6WXrDOERlPQ.roa (hash: c7SW61m3J6x7Rtxxm9NLZWtrkTB2+cri1x/k0vlq8jk=)
4: gkbICmY92gO5yWh3UUqQ3JZEKOM.roa (hash: RZ4WGmwrPF1CwIYf7Eiia3Ji+NZJkZQF8Et1XMrVS7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 16:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4c:c2:cc:13:3d:be:f1:1e:f0:bd:52:49:7f:fd:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Validity
Not Before: Sep 25 16:01:21 2026 GMT
Not After : Sep 26 16:01:21 2026 GMT
Subject: CN=6983f7b6d93fc53ea93accabb324d023e8328798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:97:ac:49:ff:fb:e1:78:0a:68:2b:dc:21:13:
ec:a3:19:f9:9b:09:83:f4:86:7a:20:76:8e:f0:78:
94:84:ea:8c:4f:8e:81:44:61:74:f6:cd:8d:bd:0a:
f6:42:81:3b:ce:56:92:17:df:69:5e:9c:7c:24:cf:
12:37:3e:f2:3b:b6:30:90:48:d1:e3:68:84:78:19:
ac:2a:ac:57:a6:48:37:10:82:3d:6d:5c:b4:8b:9c:
7a:4d:35:ba:9f:7c:47:11:1a:4a:b3:0c:15:d9:c8:
03:08:f9:95:e1:5f:59:6d:0a:de:f7:41:58:f1:43:
ce:f4:70:1f:2f:b9:c5:92:60:cc:31:5a:a8:16:01:
58:ea:8c:27:59:e3:c7:09:26:aa:2f:63:8d:33:2d:
42:94:61:fa:c1:93:ef:cd:1a:ed:0a:1d:61:bc:2d:
2e:04:41:a7:37:7f:17:2c:bb:3d:51:1d:80:a8:a4:
e0:d8:59:77:81:7d:86:5c:73:34:54:fd:b7:11:05:
c6:2d:b6:51:06:0f:92:5b:51:bb:88:96:d9:da:f4:
cb:0a:97:8f:18:c0:0e:5e:1d:6a:fd:47:b8:1f:b9:
6d:12:a5:4b:01:cf:45:9d:c2:8e:20:ba:eb:65:6c:
f7:45:90:1d:c1:b7:ae:6b:c7:42:34:28:41:75:92:
53:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:83:F7:B6:D9:3F:C5:3E:A9:3A:CC:AB:B3:24:D0:23:E8:32:87:98
X509v3 Authority Key Identifier:
keyid:41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:08:77:8c:de:db:e9:6d:f5:98:94:5a:a6:6d:73:03:4f:6a:
40:08:96:bc:77:b0:84:53:1e:8a:e3:74:b1:07:de:44:ca:37:
3b:e5:ae:37:df:cc:49:ec:bb:2b:a5:8d:34:c2:33:0b:39:b7:
98:ec:7f:40:48:f2:d4:08:8c:6b:e9:b8:eb:51:25:e1:ed:19:
5e:db:e8:c9:87:04:d6:97:92:f8:3f:3f:b0:ce:13:30:72:36:
19:a5:d7:df:7e:55:36:fa:4e:4f:e9:2b:df:8a:48:b0:71:75:
6f:8d:79:e1:de:bf:63:08:7e:2c:36:0c:f1:f1:7a:71:e1:13:
f8:08:fc:05:02:53:5f:ed:81:a2:f2:77:96:07:c4:34:78:05:
65:b1:bd:50:4a:92:5c:50:d4:a4:68:6b:d8:3e:81:07:e0:7d:
56:ba:1b:12:84:cb:b8:a1:67:b5:76:01:b7:0b:0b:c0:b1:07:
c0:d1:bb:f9:1a:33:c9:ec:af:5f:ad:ab:21:12:1e:c1:ef:1b:
b8:f9:05:63:ac:5d:92:a3:66:91:ba:b2:8d:3c:0e:db:fc:e4:
42:c8:d5:39:72:d4:a6:fe:fc:da:10:6d:6e:36:b5:10:c8:90:
14:1b:be:cd:ba:19:78:64:13:40:dd:08:03:7d:e2:19:f9:8b:
29:4a:bb:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:53:48 2026 by rpki-client