Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
File: QdELiOsk9iYtkxU2il0B4eCGDE4.mft (raw, json)
Hash identifier: 9MqUO255C127ICpNUUbhuXQ4cDIXU6dh4tOHAdcTFgQ=
Subject key identifier: 5D:BB:F4:CC:31:69:26:6F:B0:17:EE:71:DA:C3:66:08:94:D7:7B:63
Authority key identifier: 41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
Certificate issuer: /CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Certificate serial: 019CAB6AE483591DFBE7CD4DA2A7C3F106D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
Manifest number: 0E1D
Signing time: Sun 01 Mar 2026 22:00:35 +0000
Manifest this update: Sun 01 Mar 2026 22:00:35 +0000
Manifest next update: Mon 02 Mar 2026 22:00:35 +0000
Files and hashes: 1: 21M7HF4__TSSYuc94uYUsxaViMI.roa (hash: bLnj/IRZ795Oev6VIkUJOays0OV+AGQSOAXtErO1j5g=)
2: QdELiOsk9iYtkxU2il0B4eCGDE4.crl (hash: bwYVG11VE8elCCsVs00xn9G/3VfCNrE6mhE5ifgiqe4=)
3: eaXikRCsLtsFiUKz6WXrDOERlPQ.roa (hash: c7SW61m3J6x7Rtxxm9NLZWtrkTB2+cri1x/k0vlq8jk=)
4: gkbICmY92gO5yWh3UUqQ3JZEKOM.roa (hash: RZ4WGmwrPF1CwIYf7Eiia3Ji+NZJkZQF8Et1XMrVS7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:e4:83:59:1d:fb:e7:cd:4d:a2:a7:c3:f1:06:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Validity
Not Before: Mar 1 22:00:35 2026 GMT
Not After : Mar 2 22:00:35 2026 GMT
Subject: CN=5dbbf4cc3169266fb017ee71dac3660894d77b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cc:19:b3:f3:2f:0e:9a:62:1e:f2:2f:a3:1f:
05:da:a7:e4:30:ed:25:96:02:9d:a6:64:22:53:83:
a2:da:59:57:4c:20:c9:05:85:41:20:65:cf:71:e9:
a8:14:0a:9f:d4:d6:4b:38:c2:39:b5:cf:56:f9:ca:
64:10:7c:a2:d0:b1:f0:a0:de:3c:58:20:9b:7f:7c:
44:16:2d:b2:37:7e:32:b2:ba:ad:1f:99:bf:a5:c0:
9b:9f:7c:72:fa:ab:ba:29:9b:e3:c0:ca:2b:7d:b1:
ad:28:d8:a1:7d:e9:e2:c7:70:c9:ed:f9:ff:53:b8:
86:24:7c:83:73:e7:3e:39:44:7a:5f:df:a7:29:7b:
7e:33:76:92:d9:24:e6:bf:14:94:56:bb:7b:f5:6a:
93:bb:e2:34:01:39:d0:73:0b:d8:19:f3:18:67:03:
ea:c6:a8:7c:9f:da:41:0a:e1:de:88:1e:24:54:76:
07:06:bc:88:2e:4d:cb:c5:0a:3b:59:a9:ff:d7:57:
8e:86:3e:5c:aa:a6:e2:ce:34:de:fe:b0:51:32:27:
d5:38:8d:1d:4c:94:03:20:13:02:73:e5:2f:80:79:
42:6b:bf:3a:9c:89:e8:f7:29:8d:38:96:dc:84:f9:
56:ef:f7:91:24:24:f6:c9:57:f0:3d:6d:1c:30:9b:
f3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BB:F4:CC:31:69:26:6F:B0:17:EE:71:DA:C3:66:08:94:D7:7B:63
X509v3 Authority Key Identifier:
keyid:41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:05:26:66:fe:8b:5e:4a:f7:1d:71:67:1f:59:61:55:42:05:
a1:e3:9d:37:91:d4:5f:d2:f4:ea:71:81:d0:97:54:10:1c:3a:
b5:8b:00:70:82:72:7c:e0:60:af:0a:9a:55:3a:8e:cd:b9:eb:
e4:f0:e4:fa:00:78:2c:e1:b5:53:79:f4:b3:d6:f3:0e:7a:e0:
65:12:1a:71:cb:a8:11:91:67:77:dc:d9:6c:07:6b:09:3b:05:
4b:60:d4:1f:b7:91:2c:4e:45:03:cc:6f:de:c7:63:04:2c:96:
94:72:6e:fc:d3:cd:a3:de:fe:6b:6c:8b:39:12:89:99:5d:0e:
0b:6a:a4:7d:02:2d:16:46:ea:ab:e6:79:a8:58:ea:52:50:9a:
3d:48:b8:c8:c0:82:86:70:50:03:2b:c2:15:bc:63:63:c3:b1:
3a:d5:e9:4f:fd:4b:d5:7a:33:90:dd:68:48:a9:11:a4:1f:1d:
f0:9f:ac:72:7b:de:ba:9d:23:99:c4:14:47:4c:c7:6e:7f:37:
70:f7:de:0c:c2:a0:72:43:53:46:7a:b6:bb:7c:07:6c:73:43:
57:ae:dc:1c:00:a2:39:30:8d:c8:e6:98:e0:04:2b:c5:4f:e4:
86:33:1c:00:d2:13:e6:e4:c4:9e:d4:c6:9d:12:a5:63:d3:10:
5b:4b:23:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:19:07 2026 by rpki-client