Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/a1c53e-ddb2-4858-825c-8ca8acef5d5c/1/QVxbNUSxjCzld4R7wbKtpTk4Wxk.mft
File: QVxbNUSxjCzld4R7wbKtpTk4Wxk.mft (raw, json)
Hash identifier: yIiNOIlZ2Ge1fvJIt+WIOEnzxVyce41gGu52FAQC3Nw=
Subject key identifier: A3:1E:5F:D8:80:21:D9:57:F6:B7:36:99:EE:D7:F2:54:58:35:AF:8A
Authority key identifier: 41:5C:5B:35:44:B1:8C:2C:E5:77:84:7B:C1:B2:AD:A5:39:38:5B:19
Certificate issuer: /CN=415c5b3544b18c2ce577847bc1b2ada539385b19
Certificate serial: 01A0C858F16B58D825A4A5699D876B761AA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVxbNUSxjCzld4R7wbKtpTk4Wxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a1c53e-ddb2-4858-825c-8ca8acef5d5c/1/QVxbNUSxjCzld4R7wbKtpTk4Wxk.mft
Manifest number: 0207
Signing time: Tue 22 Sep 2026 09:01:07 +0000
Manifest this update: Tue 22 Sep 2026 09:01:07 +0000
Manifest next update: Wed 23 Sep 2026 09:01:07 +0000
Files and hashes: 1: QVxbNUSxjCzld4R7wbKtpTk4Wxk.crl (hash: cbQET1lu99ttCSK9QJtPdBGyASnH8y8SQos/lKJS07Q=)
2: qWIzmVr_aMvnz8_UVm4flIAA-A0.roa (hash: s3nWLOdDzZcWov+Frxv6A1ZD6t4lQ0e8G2c/DIWlHD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a1c53e-ddb2-4858-825c-8ca8acef5d5c/1/QVxbNUSxjCzld4R7wbKtpTk4Wxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/a1c53e-ddb2-4858-825c-8ca8acef5d5c/1/QVxbNUSxjCzld4R7wbKtpTk4Wxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVxbNUSxjCzld4R7wbKtpTk4Wxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:f1:6b:58:d8:25:a4:a5:69:9d:87:6b:76:1a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=415c5b3544b18c2ce577847bc1b2ada539385b19
Validity
Not Before: Sep 22 09:01:07 2026 GMT
Not After : Sep 23 09:01:07 2026 GMT
Subject: CN=a31e5fd88021d957f6b73699eed7f2545835af8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:08:b0:9f:0d:80:5b:1e:94:9c:b5:77:79:f5:
fd:d4:0f:20:6a:9a:9a:55:c7:33:e3:6d:0e:49:32:
6e:91:93:73:02:68:ce:00:5d:b2:3f:ab:56:f6:d3:
14:be:64:a5:74:53:9f:09:36:9e:ab:64:66:05:66:
82:c4:c7:2f:49:5e:12:06:05:2f:83:f2:0f:12:ab:
91:6a:e2:b2:3a:6e:7a:bc:5a:62:fa:e3:7d:d6:de:
e1:01:60:41:e2:ac:ea:ee:25:14:0c:28:37:b1:eb:
7a:24:4c:8d:13:01:c1:d2:9f:1a:9d:c7:73:e6:f6:
14:92:59:71:a1:bd:18:6a:7a:b5:7d:96:81:70:44:
7c:10:6f:bb:32:5f:1f:b5:0b:05:14:66:71:4f:59:
86:9d:2c:ee:2a:9c:59:70:ec:08:24:d9:98:7b:70:
ef:fa:54:56:6e:97:be:4e:90:d5:45:7d:97:c3:bd:
83:77:64:fe:bc:1a:1c:f2:4b:50:47:e2:85:02:87:
95:4e:bd:ff:05:10:d3:cd:fb:10:e4:4e:f9:99:97:
ba:f5:7c:c7:90:fb:b9:93:4e:cc:f9:14:95:83:6c:
ea:8d:9b:45:35:fd:62:1e:0e:71:f6:46:98:34:2a:
9f:f7:89:d0:35:c0:8c:86:e4:24:64:ea:3c:43:5e:
ec:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:1E:5F:D8:80:21:D9:57:F6:B7:36:99:EE:D7:F2:54:58:35:AF:8A
X509v3 Authority Key Identifier:
keyid:41:5C:5B:35:44:B1:8C:2C:E5:77:84:7B:C1:B2:AD:A5:39:38:5B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVxbNUSxjCzld4R7wbKtpTk4Wxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a1c53e-ddb2-4858-825c-8ca8acef5d5c/1/QVxbNUSxjCzld4R7wbKtpTk4Wxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a1c53e-ddb2-4858-825c-8ca8acef5d5c/1/QVxbNUSxjCzld4R7wbKtpTk4Wxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:ba:f8:57:a8:96:a8:ea:18:df:5b:4f:89:84:59:bd:2f:9d:
06:f5:da:44:64:a5:ec:2f:3c:6e:c3:fa:ad:3b:00:ea:15:42:
8d:2c:10:5e:12:84:e6:87:71:b0:22:e7:3f:c2:3e:07:1e:53:
41:62:ab:13:dd:70:20:60:7d:a8:14:74:d1:01:db:0d:9c:4d:
c5:e1:6b:50:73:1d:56:30:d9:cc:bb:12:ae:90:f4:af:4c:e6:
fd:7b:0a:84:37:db:1a:ee:fc:d0:47:7a:40:3f:87:15:3f:a5:
2d:72:2e:78:00:1e:ca:b8:e4:17:75:6b:32:f9:f9:6b:50:37:
64:6d:10:14:7b:14:c2:cf:06:f3:5b:40:f1:cc:69:1a:76:82:
07:0d:9c:ff:ca:c2:bf:0d:88:b9:d9:fc:ed:10:52:dd:48:71:
d1:10:3b:3b:17:07:1d:1b:33:c3:9e:f2:47:b4:df:79:4d:e5:
8a:25:43:c0:02:69:df:62:fa:a7:f4:ef:80:a3:21:ab:e7:5c:
ae:aa:b7:d5:be:e0:c8:48:0b:4f:fe:e2:3a:95:40:96:53:ff:
de:59:43:00:73:3c:46:0c:61:57:4d:28:52:05:ce:97:6b:4a:
e3:05:a4:f4:bf:65:f8:6f:da:a0:d8:9a:da:1f:8e:bd:1b:3c:
e2:2b:fd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:46:23 2026 by rpki-client