Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
File: QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft (raw, json)
Hash identifier: 2UWDHZGwX7uJ7TV8fEcmheaoMW3iiplq+VRcwDgyh1k=
Subject key identifier: AE:9A:0F:A4:03:1C:F9:0C:CC:A0:2C:B8:E1:95:D9:45:D0:1F:D4:50
Authority key identifier: 42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
Certificate issuer: /CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Certificate serial: 01A129C3D45464DB739E14A69141627C86A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
Manifest number: 17D7
Signing time: Sun 11 Oct 2026 07:01:02 +0000
Manifest this update: Sun 11 Oct 2026 07:01:02 +0000
Manifest next update: Mon 12 Oct 2026 07:01:02 +0000
Files and hashes: 1: QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl (hash: QUbTb75b0gRdwbReu/r7uB/iJUEx6XLPJBiiW509hr0=)
2: SsfnBHuvPDESg4pTMTaqtv9nT-Q.roa (hash: ZrITCydyp3ig8q1pUL+0pHbv4soXKIcGIYDQm4wHpvo=)
3: c-KZaw3UumwWkGCg1_3weGS8B-U.roa (hash: 2AcxA0Jqp/dgXDEXPcxhpKLcjp+xB4KSRrsphLc65kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:c3:d4:54:64:db:73:9e:14:a6:91:41:62:7c:86:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Validity
Not Before: Oct 11 07:01:02 2026 GMT
Not After : Oct 12 07:01:02 2026 GMT
Subject: CN=ae9a0fa4031cf90ccca02cb8e195d945d01fd450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:63:8b:41:13:f2:4a:32:d2:ca:76:44:f9:5e:
1a:5f:1a:97:c7:81:f8:c4:b0:35:75:2e:6f:ad:a9:
c5:2f:25:7b:d7:0e:7f:04:e1:13:07:d4:83:dc:dc:
bc:22:44:83:b8:03:13:a3:ca:43:e8:21:7a:a0:15:
37:5b:4e:70:23:96:f6:fd:85:c0:da:a8:18:81:23:
49:85:b9:01:0a:63:ae:00:86:33:91:51:bc:e9:00:
e1:bd:f4:fe:01:ce:e5:d0:15:3d:c1:f7:5d:03:0a:
55:ad:ef:d5:53:70:20:e2:eb:89:ad:09:ae:5b:17:
c9:c0:69:fb:11:85:c6:59:b7:52:48:0e:f1:4e:86:
5a:2e:07:d6:13:a4:d0:1d:e4:0c:20:17:95:ae:d7:
04:e3:da:95:f3:18:bc:75:15:d6:48:99:1a:fd:a8:
af:13:a2:23:ac:ee:56:61:ad:d6:41:eb:4f:38:e9:
42:4b:1b:63:38:c2:87:91:d7:d5:66:4f:fa:2b:ee:
20:30:50:3f:aa:c4:3c:f6:75:01:98:0d:24:e5:d8:
85:6b:ec:19:e1:50:53:ca:f6:4e:08:57:05:9a:63:
c9:ce:93:61:3a:1c:c0:0a:f4:ed:43:4e:1a:31:ca:
56:63:89:11:04:30:ea:0c:56:92:4b:bc:6b:78:85:
1b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9A:0F:A4:03:1C:F9:0C:CC:A0:2C:B8:E1:95:D9:45:D0:1F:D4:50
X509v3 Authority Key Identifier:
keyid:42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:34:b1:7a:6d:4b:81:df:86:eb:6b:7a:d8:df:9e:9a:0b:d6:
68:e4:1c:ee:24:c5:60:24:59:ec:36:d1:09:da:d3:ce:52:93:
3a:e6:3d:e4:58:3d:da:32:a4:ba:9e:98:47:b2:da:07:b7:7a:
0d:69:28:de:18:ef:16:f8:fd:74:64:c2:c8:54:d7:8d:ff:fa:
bd:28:bf:21:69:5f:b3:60:17:1d:5d:16:36:56:25:5f:cc:0b:
66:cc:58:b0:0a:b7:14:c4:6b:79:32:c4:77:ae:53:7a:17:34:
48:76:56:5e:fb:e5:50:e8:ca:0c:30:20:48:63:8b:9f:fb:4d:
40:2f:ba:5d:3f:84:cd:0b:f6:0f:12:af:f1:e2:e6:e8:61:e0:
fa:c0:c0:dd:98:02:1d:ed:60:14:ef:9a:7b:15:69:3c:44:3e:
10:e6:54:fc:ac:3f:2c:b1:01:0c:67:5c:69:d3:bb:08:7d:08:
e3:02:25:65:25:22:68:d8:9c:a3:0a:61:b1:36:69:a8:10:ff:
ce:78:24:59:b7:1e:78:1f:8e:89:6d:0d:8b:d4:dd:c6:a6:1b:
aa:34:ed:14:1d:86:b7:02:b8:ed:f0:3a:60:86:24:45:8c:3d:
57:c3:26:2e:c9:28:b1:4a:44:36:85:1b:37:0c:c3:b6:c6:9e:
af:ce:78:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:25:17 2026 by rpki-client