Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
File: Qd0c5O65L_U7YziS_UV7AR4RcfE.mft (raw, json)
Hash identifier: HTOEg6KPi0mWhmaan2gEa0XWSVc/ViUZ+L/rUsCMwBM=
Subject key identifier: 48:BD:71:39:E0:95:57:C3:DF:3A:A3:79:79:EC:99:86:99:1E:3B:DC
Authority key identifier: 41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1
Certificate issuer: /CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
Certificate serial: 01A0D3155E65C8233AEA028A8A0FDF9DF634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
Manifest number: 0973
Signing time: Thu 24 Sep 2026 11:03:07 +0000
Manifest this update: Thu 24 Sep 2026 11:03:07 +0000
Manifest next update: Fri 25 Sep 2026 11:03:07 +0000
Files and hashes: 1: 3OkMfbNK7oywxyEduLLpDjtw4pE.roa (hash: L7QwofR/zK4j6up4RavhL5dZloz6sdS+umIJ+YznSC4=)
2: BfXkb3Ul_TeZj4Afd4e_3oJ5s1c.roa (hash: 7KGanpBCj79/3lwELkYNBDfBwHWTdM1LjWtMw6Jbt2E=)
3: Qd0c5O65L_U7YziS_UV7AR4RcfE.crl (hash: Z6GINItQB8J7Vat1MH85zGPT+GkhOV7BYn459Pixfhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:5e:65:c8:23:3a:ea:02:8a:8a:0f:df:9d:f6:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
Validity
Not Before: Sep 24 11:03:07 2026 GMT
Not After : Sep 25 11:03:07 2026 GMT
Subject: CN=48bd7139e09557c3df3aa37979ec9986991e3bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:66:ce:b2:2b:19:fb:91:3c:45:a7:82:a2:c3:
26:36:5c:a9:05:f0:a0:64:9d:01:0a:9f:ab:d4:3a:
f8:0b:e4:15:1d:2c:73:d0:a3:52:4c:8f:15:41:e7:
02:3b:03:45:76:9c:7e:0a:29:2b:f2:f1:84:80:1a:
ff:13:03:01:fd:9c:6a:18:22:da:90:22:4b:a6:9f:
1f:d1:87:0f:70:ff:a1:3e:fe:c0:71:83:b7:58:fc:
1b:5a:4d:60:ae:2c:77:a4:af:a9:c6:d9:51:48:3c:
21:9b:d5:ba:15:f1:3b:15:ae:22:5c:5e:b7:10:32:
1f:26:d0:e3:72:9a:70:d4:f5:e6:12:6d:b1:f8:cd:
06:ee:cf:20:0d:53:21:9c:f1:16:b0:7f:76:3d:e3:
e2:4f:83:4d:70:c0:68:7e:76:db:39:85:69:4a:bc:
85:e0:8c:04:41:6b:fc:31:fa:26:c7:c9:52:90:be:
fa:d5:2c:66:89:25:38:59:81:93:28:c4:b5:4c:5d:
26:2a:39:7c:21:8a:2d:9b:4e:34:4f:52:f6:ca:3a:
81:61:fe:c4:9f:7e:eb:72:d0:1f:1c:5b:90:65:a1:
09:0a:71:03:59:ba:f2:e2:2a:fc:74:a1:9d:be:3f:
03:16:aa:4b:11:b0:eb:ce:20:29:fc:69:d0:01:48:
fc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BD:71:39:E0:95:57:C3:DF:3A:A3:79:79:EC:99:86:99:1E:3B:DC
X509v3 Authority Key Identifier:
keyid:41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:76:c8:f4:89:85:cb:e0:d2:c7:15:1a:9f:55:59:bb:4b:6a:
49:1c:54:cf:58:82:0e:5b:82:c7:00:3f:9f:e1:b7:ee:3d:f4:
18:36:3c:27:b1:d5:de:52:52:3f:de:1a:7f:ec:79:17:81:07:
e3:64:fe:66:76:54:a7:b7:94:28:10:c1:a4:3e:5b:fb:f7:48:
59:64:80:f4:a1:12:a3:26:85:b2:b5:17:f9:ca:69:22:03:94:
eb:54:68:ac:a9:7e:cb:d6:16:ed:5a:79:15:76:62:65:64:3d:
69:52:b5:f8:62:c9:bd:49:87:1b:01:cb:e9:32:98:d2:26:2b:
db:fa:08:76:6c:d2:84:4c:4b:e1:a5:4b:d4:0d:4d:68:aa:01:
2f:1e:94:d2:13:33:5b:e4:44:d1:0c:94:ba:c7:2d:22:5f:b6:
a7:14:4d:05:56:3a:48:6f:f0:eb:99:72:9e:ad:15:0f:e3:60:
24:71:58:10:ba:93:3a:77:96:38:78:5a:5c:94:99:6d:4a:40:
e1:40:9a:0c:09:d6:c6:d6:1b:1e:83:24:1e:b1:ea:e5:f4:90:
8e:06:f3:54:31:ad:8b:d1:12:e0:f0:13:ee:62:3c:95:39:64:
3d:41:8a:7b:d2:de:1e:4a:be:9e:6a:0f:f2:48:20:88:22:d9:
72:cc:6a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:06:46 2026 by rpki-client