Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/QDkoSd3TCx3szH9o1Ipo0IJlqwo.mft
File: QDkoSd3TCx3szH9o1Ipo0IJlqwo.mft (raw, json)
Hash identifier: +MNK0cqom2cOOc1j5U3IcbYNdZeetjWuxKk3eB6PMEM=
Subject key identifier: 93:AD:1B:CE:09:2D:06:D8:6A:7C:19:9C:A0:87:24:A3:83:B0:FE:2E
Authority key identifier: 40:39:28:49:DD:D3:0B:1D:EC:CC:7F:68:D4:8A:68:D0:82:65:AB:0A
Certificate issuer: /CN=40392849ddd30b1deccc7f68d48a68d08265ab0a
Certificate serial: 01A0C47C749ECE9AB546FCD02ED38EDE78A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDkoSd3TCx3szH9o1Ipo0IJlqwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/QDkoSd3TCx3szH9o1Ipo0IJlqwo.mft
Manifest number: DF
Signing time: Mon 21 Sep 2026 15:01:25 +0000
Manifest this update: Mon 21 Sep 2026 15:01:25 +0000
Manifest next update: Tue 22 Sep 2026 15:01:25 +0000
Files and hashes: 1: JhIdpwixHhL4kNaauNM8xdlIml4.roa (hash: iCB8dbhDO0FjWlHMp0rp4KAWeNAdcDsy/o0K/cauhfI=)
2: QDkoSd3TCx3szH9o1Ipo0IJlqwo.crl (hash: CpO32qRzs2kBjahLjdkYln7/MOQBMS4N2bd0q/Np+4Y=)
3: y6s9GE4v73HgJjdNT9WT8fmSBKQ.roa (hash: IQLDH3j421sCsgVzuO3PB/u22oWNjY8m7UXITCQLVuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/QDkoSd3TCx3szH9o1Ipo0IJlqwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/QDkoSd3TCx3szH9o1Ipo0IJlqwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QDkoSd3TCx3szH9o1Ipo0IJlqwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7c:74:9e:ce:9a:b5:46:fc:d0:2e:d3:8e:de:78:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40392849ddd30b1deccc7f68d48a68d08265ab0a
Validity
Not Before: Sep 21 15:01:25 2026 GMT
Not After : Sep 22 15:01:25 2026 GMT
Subject: CN=93ad1bce092d06d86a7c199ca08724a383b0fe2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ff:23:cf:74:ab:13:b8:6b:76:de:10:8f:a7:
94:5e:6d:57:8e:77:73:24:b8:ba:8b:dd:75:ac:cb:
d8:9b:45:a3:6d:3d:f1:7d:9f:02:90:63:00:d4:1b:
8d:8e:7d:ff:d5:61:2a:00:2f:19:79:7f:be:b1:c1:
db:35:65:cd:30:a5:c8:d2:15:34:ab:b9:c2:4d:1c:
cb:d4:69:4e:ba:e3:9b:de:b7:97:57:3c:f4:d8:fd:
5d:4f:6a:cd:bd:86:2c:0a:ad:93:d4:c1:63:04:d5:
ce:f6:e5:7a:25:1e:10:24:76:dd:f3:df:50:64:d0:
5e:c4:30:f8:f5:6a:61:21:ea:29:65:87:92:d7:2a:
db:81:a4:49:63:fa:ec:75:24:24:fb:e0:39:e1:f4:
26:19:af:2f:e3:17:5a:b7:f6:35:e4:4e:70:61:2a:
f7:82:82:d7:76:00:39:54:b1:b8:0e:67:71:1e:f4:
b4:57:2a:4e:bf:52:e1:14:a0:62:43:51:25:4b:e0:
82:60:bf:a9:3e:5b:04:1c:bd:75:4d:89:4d:29:60:
ac:d6:f5:7a:39:b0:e2:1d:02:51:03:8f:2d:d2:b9:
2a:7d:cb:88:e0:fa:62:07:d9:8c:0b:bb:61:28:f5:
25:94:67:d1:a7:2d:b6:62:5d:37:75:94:b8:7f:c2:
34:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AD:1B:CE:09:2D:06:D8:6A:7C:19:9C:A0:87:24:A3:83:B0:FE:2E
X509v3 Authority Key Identifier:
keyid:40:39:28:49:DD:D3:0B:1D:EC:CC:7F:68:D4:8A:68:D0:82:65:AB:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDkoSd3TCx3szH9o1Ipo0IJlqwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/QDkoSd3TCx3szH9o1Ipo0IJlqwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/QDkoSd3TCx3szH9o1Ipo0IJlqwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:18:58:e6:b9:92:d1:4e:60:19:5b:00:4a:79:bf:a5:ce:a7:
99:88:ee:b3:66:5b:ed:7c:79:6e:68:f1:46:f5:b5:b0:b5:4e:
8e:5b:a0:4c:2c:c4:ff:f8:e8:4c:57:3d:ba:8c:94:60:62:46:
64:70:11:bd:b5:fc:0f:29:bb:26:e4:02:d7:22:22:2e:a7:15:
9e:b0:b7:8c:29:46:81:9d:2c:d8:b6:5f:cc:80:da:11:bc:0c:
c5:6e:ca:d9:ed:4c:d8:19:7b:56:b8:dd:36:1a:93:0f:6b:aa:
e3:10:0a:a1:9f:c0:8a:77:f9:d9:19:36:28:25:7b:95:02:91:
6c:5d:06:99:5f:a0:7d:68:2b:33:80:07:a0:b0:19:8e:86:56:
12:41:9b:39:11:b1:63:22:bc:3c:0f:07:65:c0:47:a0:26:7b:
2e:aa:ae:f7:61:ef:fd:d3:30:86:8c:1c:26:73:dd:ff:6c:3e:
11:02:b0:f3:1e:60:34:d4:b9:bd:0e:a9:e4:05:1d:c3:21:ee:
cc:72:5c:ac:e0:7e:6e:0a:36:71:7d:6f:d4:45:75:d4:11:ae:
46:ae:c4:b4:c5:2f:d7:7e:1e:7b:43:46:fa:87:a7:c1:f4:f8:
94:2d:20:62:bf:8a:b9:c4:4f:26:e3:2c:62:96:e8:e6:b2:5c:
c3:dd:e8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:23:08 2026 by rpki-client