Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
File: QdELiOsk9iYtkxU2il0B4eCGDE4.mft (raw, json)
Hash identifier: 4DfH5R/zrGnCvcxgBqo1gMHPleaVcMlN7JgjwIeuMSI=
Subject key identifier: 05:09:21:0D:7B:08:2B:CC:3A:2B:E0:D4:EB:B1:17:86:96:0F:9E:04
Authority key identifier: 41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
Certificate issuer: /CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Certificate serial: 019EC06D4BDEC9496D7B52878D4BCA95E9C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
Manifest number: 0F31
Signing time: Sat 13 Jun 2026 10:00:48 +0000
Manifest this update: Sat 13 Jun 2026 10:00:48 +0000
Manifest next update: Sun 14 Jun 2026 10:00:48 +0000
Files and hashes: 1: 21M7HF4__TSSYuc94uYUsxaViMI.roa (hash: bLnj/IRZ795Oev6VIkUJOays0OV+AGQSOAXtErO1j5g=)
2: QdELiOsk9iYtkxU2il0B4eCGDE4.crl (hash: 4PWMeN2ZVbx/akAXXnUID/yhKwHeM/NXG0FrBL7KGlM=)
3: eaXikRCsLtsFiUKz6WXrDOERlPQ.roa (hash: c7SW61m3J6x7Rtxxm9NLZWtrkTB2+cri1x/k0vlq8jk=)
4: gkbICmY92gO5yWh3UUqQ3JZEKOM.roa (hash: RZ4WGmwrPF1CwIYf7Eiia3Ji+NZJkZQF8Et1XMrVS7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:4b:de:c9:49:6d:7b:52:87:8d:4b:ca:95:e9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Validity
Not Before: Jun 13 10:00:48 2026 GMT
Not After : Jun 14 10:00:48 2026 GMT
Subject: CN=0509210d7b082bcc3a2be0d4ebb11786960f9e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e1:08:6e:76:89:4a:51:26:7b:38:17:24:1c:
04:2f:11:8a:cc:40:28:ff:c2:85:ae:eb:04:b1:cb:
93:d8:ac:2e:1e:b8:93:fa:9e:8b:8e:ce:30:06:4c:
da:e0:8d:54:aa:51:7a:15:93:aa:88:ce:5a:5c:7d:
8f:8d:f2:e7:91:bf:d1:64:eb:ea:7c:96:ff:58:cc:
33:b1:b3:49:68:01:b0:7f:de:d0:e7:86:a5:83:3d:
b7:25:84:7a:d9:61:39:f6:f3:5a:69:a7:18:a4:9a:
25:70:3f:81:7f:80:66:52:f5:d5:82:5c:e0:cf:a9:
6f:53:da:37:fd:e5:5e:a8:5c:39:ec:be:e5:80:94:
71:e3:85:e9:6d:88:6b:46:02:a3:6a:70:aa:e7:af:
30:96:9f:79:b7:87:1a:fb:64:18:5d:b3:8b:0f:83:
2d:5d:38:a1:85:e4:82:60:91:92:51:0f:fd:82:ec:
fe:08:5f:8a:af:7d:1d:d0:52:3a:3f:69:ba:04:d5:
78:c2:d7:1c:9b:c9:4b:78:02:9b:13:65:a1:51:29:
01:d7:c0:61:71:85:67:bf:fd:b5:d3:b9:2c:3c:da:
1b:fb:f0:7e:ff:02:eb:c3:0a:a8:6e:5f:f4:b2:0d:
1f:e0:ae:88:74:f0:53:81:ed:e0:38:29:fc:b4:8b:
fd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:09:21:0D:7B:08:2B:CC:3A:2B:E0:D4:EB:B1:17:86:96:0F:9E:04
X509v3 Authority Key Identifier:
keyid:41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a7:d3:9f:2f:3e:85:9b:08:27:4a:ac:7c:2d:a9:f2:0f:0c:
2f:cd:1d:10:ea:38:ef:e6:df:1e:c8:46:6f:37:c6:52:fb:72:
54:e0:5f:c0:bd:b4:66:8f:d4:7a:e1:fd:1b:1b:47:a9:10:95:
c6:46:0e:77:24:67:f4:58:80:a4:ae:ea:be:22:17:85:68:17:
d5:47:42:20:4c:44:ef:88:c8:72:8c:09:41:3a:45:8e:ea:23:
18:58:cf:5e:1f:17:b2:09:13:41:31:29:82:3d:b3:86:f9:bc:
7a:88:04:78:3d:81:e5:17:4e:04:29:c9:2d:f3:11:1f:bc:eb:
48:75:27:e7:05:37:7c:b9:37:44:0c:c6:9d:7a:ca:88:17:5d:
d5:13:06:91:62:72:d0:c3:67:46:d2:81:b9:97:4e:86:cc:ac:
11:44:4e:0e:84:1b:7b:4d:af:31:b7:a7:b7:d6:c2:1d:88:4c:
c9:8d:5c:cb:a3:75:c6:f2:04:36:53:ed:d2:4a:ee:e7:45:5b:
a5:e6:71:b1:d9:fb:81:1d:72:25:8b:7f:2f:fc:88:3f:87:d7:
6a:57:5e:d1:d6:2a:44:18:fa:8a:79:89:f9:00:26:93:ea:61:
4c:d9:7a:31:7a:0a:da:a4:d7:81:6e:12:1b:66:29:c4:b6:34:
bb:ae:2e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:08:23 2026 by rpki-client