Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
File: QcjQJBEIsB9etwj-i7uEfVOjDxY.mft (raw, json)
Hash identifier: IJhQHaPjqIIyj0tTmXJBGU7TdjF9wjhLMXdRz0kO8Fc=
Subject key identifier: 99:2F:0B:4F:DB:00:CD:40:9C:85:65:BC:93:48:C4:63:A5:0C:1B:0D
Authority key identifier: 41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
Certificate issuer: /CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Certificate serial: 01A0DD60DB89EDCF25A398006EF744140D8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
Manifest number: 1A71
Signing time: Sat 26 Sep 2026 11:01:47 +0000
Manifest this update: Sat 26 Sep 2026 11:01:47 +0000
Manifest next update: Sun 27 Sep 2026 11:01:47 +0000
Files and hashes: 1: ALRri6kgiQCaJnYBd8e-iNH8nUk.roa (hash: bRi9PCHK9wO56WGyzaQUXDtECAlJgx3ISDb8+1dq0Jk=)
2: QcjQJBEIsB9etwj-i7uEfVOjDxY.crl (hash: pJWiSXa+IeHO5cyRS0fx4UHP+B8x5U9XURVly0PvTfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:60:db:89:ed:cf:25:a3:98:00:6e:f7:44:14:0d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Validity
Not Before: Sep 26 11:01:47 2026 GMT
Not After : Sep 27 11:01:47 2026 GMT
Subject: CN=992f0b4fdb00cd409c8565bc9348c463a50c1b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4b:e5:1b:05:4a:cc:e4:94:ed:84:ef:76:fb:
34:34:3b:eb:71:4c:19:27:b2:b0:26:33:6b:47:f2:
b7:63:ed:27:cc:a9:72:7b:62:d3:4e:f9:4a:cd:71:
51:26:90:2e:2e:6c:a2:05:4a:3b:e8:8c:7b:e9:4e:
a4:f4:65:dd:42:c5:bf:1c:8c:6d:62:93:83:3f:f6:
2c:4d:61:53:f6:97:d0:80:6c:d7:8d:aa:32:fc:4c:
65:b5:82:44:65:05:21:02:7f:7e:0b:d6:6e:3c:31:
1f:8a:20:33:81:8b:53:76:a5:eb:7f:86:3a:98:c4:
e8:6c:0f:1d:4e:fd:55:45:67:d0:51:fe:00:de:6c:
c9:0b:7b:15:85:4a:46:19:ed:32:2a:36:f5:6c:0d:
0e:5f:39:6d:e8:89:18:bc:1d:21:a4:ff:35:4f:cf:
8d:19:20:ab:d6:9f:11:49:dd:01:93:a1:7a:14:4a:
50:5a:5b:76:ae:a8:ee:3b:82:00:fd:e9:6a:de:be:
27:b5:97:36:15:05:3c:3d:b7:17:3e:02:84:7e:20:
75:f7:c9:ff:7d:da:9f:d2:aa:00:a0:08:41:26:61:
94:10:65:1a:fa:17:e8:d8:ae:5e:e2:20:23:61:1e:
08:95:37:9e:4b:f5:10:f8:8a:25:03:20:48:ac:cc:
40:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2F:0B:4F:DB:00:CD:40:9C:85:65:BC:93:48:C4:63:A5:0C:1B:0D
X509v3 Authority Key Identifier:
keyid:41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:56:87:3f:a7:e2:d1:a0:55:95:fa:67:80:04:8c:b7:f7:82:
58:9b:14:95:b8:dd:5d:fe:4d:be:f9:89:77:f9:7d:7e:2e:80:
8b:95:62:30:85:82:1b:d4:05:d2:d8:5c:b7:25:97:5a:c3:86:
6c:15:50:12:57:cb:76:4c:f2:c9:36:cc:3c:d7:d1:d4:70:68:
5c:9e:51:77:6a:30:7a:c1:8e:ed:b6:f4:aa:a4:03:c3:8a:8f:
d1:cd:d0:c9:e5:45:de:8d:1c:97:19:a2:9e:eb:71:b4:60:5e:
fa:c0:af:8e:90:64:7e:f1:f1:54:31:ef:28:ed:cb:23:28:1c:
26:99:a8:e0:d0:11:5a:e2:70:14:9a:65:9e:30:ea:ca:1c:76:
74:26:33:ca:be:03:e2:91:ca:f6:9a:b8:06:dd:41:0c:e7:bf:
26:8c:4a:6e:a5:37:a0:04:cb:ec:54:b6:ff:b9:bc:a6:51:df:
d6:df:de:ed:04:89:8f:67:b8:9d:70:58:f7:55:a7:eb:91:a6:
95:bc:de:80:20:00:81:01:48:7b:b7:bb:ac:ab:68:b7:06:e7:
9d:15:aa:c6:4b:bb:63:51:59:d3:08:4d:9e:a1:70:7a:ad:c4:
5c:8f:0d:50:93:74:44:be:12:ee:3e:41:bc:53:a2:39:6b:64:
60:92:98:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:22:21 2026 by rpki-client