Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/d6e721-c47e-4869-adc1-13cb308f66a3/1/QdOwOPqgIOZecYN6sLNPJO4MGts.mft
File: QdOwOPqgIOZecYN6sLNPJO4MGts.mft (raw, json)
Hash identifier: HnHjNi+v7rvAWPSmirO0wFXeEdjsap1EAFbW0bNLx/M=
Subject key identifier: 01:B3:F5:F3:C1:19:F0:46:F5:22:A9:C4:3E:BB:7C:DD:46:CF:67:E1
Authority key identifier: 41:D3:B0:38:FA:A0:20:E6:5E:71:83:7A:B0:B3:4F:24:EE:0C:1A:DB
Certificate issuer: /CN=41d3b038faa020e65e71837ab0b34f24ee0c1adb
Certificate serial: 01A0C3321DB2F8C4E4CCB54E756CCC2EAB04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdOwOPqgIOZecYN6sLNPJO4MGts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/d6e721-c47e-4869-adc1-13cb308f66a3/1/QdOwOPqgIOZecYN6sLNPJO4MGts.mft
Manifest number: 6D
Signing time: Mon 21 Sep 2026 09:00:36 +0000
Manifest this update: Mon 21 Sep 2026 09:00:36 +0000
Manifest next update: Tue 22 Sep 2026 09:00:36 +0000
Files and hashes: 1: 0PYj6M6nRs80PGa_n3IppzJD-2Q.asa (hash: qQd/vrO+5CDXir2IL3bvHvBXxqq6ploQiA7O3KLv7+I=)
2: QdOwOPqgIOZecYN6sLNPJO4MGts.crl (hash: wiNULFURwXp67T3gy4li70i7tuhSh1oOibg5U5N/UXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/d6e721-c47e-4869-adc1-13cb308f66a3/1/QdOwOPqgIOZecYN6sLNPJO4MGts.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/d6e721-c47e-4869-adc1-13cb308f66a3/1/QdOwOPqgIOZecYN6sLNPJO4MGts.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdOwOPqgIOZecYN6sLNPJO4MGts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:32:1d:b2:f8:c4:e4:cc:b5:4e:75:6c:cc:2e:ab:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d3b038faa020e65e71837ab0b34f24ee0c1adb
Validity
Not Before: Sep 21 09:00:36 2026 GMT
Not After : Sep 22 09:00:36 2026 GMT
Subject: CN=01b3f5f3c119f046f522a9c43ebb7cdd46cf67e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:89:f0:08:e0:79:84:f4:e0:1c:25:39:17:d8:
27:a1:34:84:26:64:80:01:c6:92:79:a0:ea:c2:02:
81:8d:78:f4:94:d1:46:3c:fd:a9:bb:23:7b:ec:a5:
97:af:3d:e5:3d:88:c5:c2:f2:ce:ac:1c:69:94:b7:
85:96:45:ec:d0:67:b4:bd:5d:5d:fd:95:81:40:51:
0b:b4:53:d6:7e:89:8d:40:42:87:93:4b:a5:00:b7:
70:26:10:0c:0d:34:5e:35:93:12:38:16:5e:37:45:
b8:8f:ae:2c:ca:e3:a6:6a:d2:91:08:9c:de:81:5c:
c5:84:11:36:09:07:97:cd:69:dc:d0:b8:0e:93:2c:
87:cb:97:40:ac:41:7e:96:f8:61:13:9f:b5:69:24:
02:b6:95:e7:65:67:18:f6:d2:87:08:c6:1c:97:4b:
84:18:06:8a:50:3b:22:78:31:86:1d:24:12:b8:b6:
44:1b:50:24:79:07:d6:15:87:0b:13:b4:b4:c5:41:
7f:a5:92:db:ad:88:e7:97:02:a2:58:b0:10:23:9f:
97:e4:19:57:12:21:cb:3e:61:a7:00:81:cc:e6:d0:
67:16:83:26:46:ee:d6:36:cc:87:69:fe:ec:ee:6d:
7a:ba:10:34:96:0e:77:1b:9a:c4:74:de:87:32:49:
de:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B3:F5:F3:C1:19:F0:46:F5:22:A9:C4:3E:BB:7C:DD:46:CF:67:E1
X509v3 Authority Key Identifier:
keyid:41:D3:B0:38:FA:A0:20:E6:5E:71:83:7A:B0:B3:4F:24:EE:0C:1A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdOwOPqgIOZecYN6sLNPJO4MGts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d6e721-c47e-4869-adc1-13cb308f66a3/1/QdOwOPqgIOZecYN6sLNPJO4MGts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d6e721-c47e-4869-adc1-13cb308f66a3/1/QdOwOPqgIOZecYN6sLNPJO4MGts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:89:f6:65:62:3d:f4:96:e5:8f:72:25:87:7a:e2:02:58:f2:
b1:61:cf:f3:cc:8e:4f:2b:09:89:10:eb:2e:a8:78:04:b7:09:
30:29:99:23:bd:82:9a:d9:21:23:2a:7b:dd:d4:b4:1a:27:df:
ba:68:36:00:51:72:82:af:a4:75:33:36:4f:e5:16:ce:21:aa:
16:3e:65:ad:4f:32:8d:c8:4e:85:ff:79:b0:f6:b2:00:a9:d8:
cd:9c:89:eb:2e:7b:5f:e9:bb:6f:fc:c2:dd:40:b9:af:d2:1d:
11:88:5b:42:dc:84:41:20:54:27:12:35:c2:b9:86:39:ca:d5:
7f:b9:d6:05:21:57:a4:ba:78:6f:7f:2b:ca:61:95:56:fe:64:
e6:82:de:49:3d:8e:11:11:a7:0e:57:c2:2f:88:5b:48:68:39:
c6:00:fb:73:8b:a6:e9:a3:c1:fb:ce:9f:fc:99:d7:6b:9c:02:
8e:df:f8:03:be:2b:1e:67:b8:ac:a9:6f:31:f1:c4:8a:6b:3f:
29:52:4e:3c:14:bb:ff:84:6f:e8:76:d5:90:e3:e1:77:1a:c0:
7a:26:0d:ca:66:94:79:10:83:9f:ca:87:c9:1f:bb:09:76:63:
ba:04:0f:97:8f:31:a3:9e:3a:f8:c8:cb:d6:87:23:09:59:41:
5f:08:0c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:17:44 2026 by rpki-client