Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
File: Q0llhOXPObVodN6Nx3qjpv-eih4.mft (raw, json)
Hash identifier: 0vzLA0OpxvOD3kxoaeVIsnRu4pqX94EqPZwEl3H6cuA=
Subject key identifier: 31:EA:CD:BD:44:08:96:A0:8F:97:55:03:5B:B9:0D:17:29:28:83:A3
Authority key identifier: 43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
Certificate issuer: /CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Certificate serial: 01A0C10C95C7C94150605682DC57E1CDCF2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
Manifest number: 1703
Signing time: Sun 20 Sep 2026 23:00:22 +0000
Manifest this update: Sun 20 Sep 2026 23:00:22 +0000
Manifest next update: Mon 21 Sep 2026 23:00:22 +0000
Files and hashes: 1: Q0llhOXPObVodN6Nx3qjpv-eih4.crl (hash: lmxVztwPr8geZQ3TJMzU+NBRu2b+1wAGfysgHLhqR+o=)
2: eTNkVC7XWRHBzuyFVu3pxnwq3z4.roa (hash: b8ZbPv94PI8PSCuaUsrniKkw7cN6jjfuOqQWfIOj1qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:0c:95:c7:c9:41:50:60:56:82:dc:57:e1:cd:cf:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Validity
Not Before: Sep 20 23:00:22 2026 GMT
Not After : Sep 21 23:00:22 2026 GMT
Subject: CN=31eacdbd440896a08f9755035bb90d17292883a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7d:3b:ee:18:46:6c:b3:82:73:55:68:1b:f9:
e3:bc:53:d2:b5:1e:19:d0:9e:50:45:de:d4:85:88:
d7:9b:d4:e7:e3:3b:72:fe:75:fe:5f:a3:04:36:24:
d4:4c:4d:b9:2d:89:f7:dd:46:66:bd:c7:17:7b:2c:
9a:e7:1e:eb:82:63:7d:24:30:65:ef:4a:6f:a3:09:
df:74:c4:01:f4:5d:b3:44:98:ce:f9:79:05:70:99:
cb:9b:f0:b5:bc:da:d8:cc:48:9b:0c:97:19:e4:9d:
f0:81:7d:c1:3a:7b:7b:4d:c3:b5:6d:04:de:38:43:
bd:b9:a6:c0:e3:e2:b9:68:3f:9f:2e:5d:40:fb:c2:
37:3f:1d:f1:d1:b9:b9:87:26:a6:e4:e6:ef:78:f9:
16:56:66:99:db:48:95:40:59:f2:e4:24:53:9f:9b:
2d:08:89:dc:68:13:19:8d:7c:da:61:0c:83:d9:00:
f1:33:7d:9d:c1:8f:3d:0c:65:83:a7:2a:1a:9f:3c:
ba:63:80:83:7b:9b:1b:fa:99:77:27:6f:29:16:75:
7b:0c:f1:a1:5f:ac:a1:f4:0d:c6:16:15:12:24:d0:
75:8e:27:b2:6d:0e:32:d3:83:13:e0:27:92:85:48:
a7:6e:d8:2b:1a:21:1b:51:8b:a4:60:2b:7f:41:ae:
ba:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:EA:CD:BD:44:08:96:A0:8F:97:55:03:5B:B9:0D:17:29:28:83:A3
X509v3 Authority Key Identifier:
keyid:43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:6c:3c:14:4c:dc:df:7b:35:9b:29:12:ee:87:b8:f2:25:82:
bb:d2:30:b2:25:12:f9:27:ee:37:f7:df:9b:cd:28:7e:2f:ba:
c6:33:b2:e2:3b:4b:48:3a:aa:fc:c3:87:d0:08:aa:c4:3e:12:
49:f4:55:95:8c:c9:48:22:dd:6b:ad:0b:7a:20:cb:5b:46:94:
73:86:de:7e:8e:24:b9:a0:e3:9e:c4:8e:c8:de:9e:97:c1:e3:
9d:2f:31:7a:23:59:96:11:ec:ab:8d:47:aa:cd:6c:d1:dc:31:
f0:44:fc:27:d4:5d:7a:6f:52:10:e2:32:c4:47:d6:b1:53:12:
ab:cf:86:3f:b9:d5:1f:21:68:72:2e:4b:a9:91:69:d6:11:3a:
93:16:5e:ba:ba:dd:e7:36:6f:00:17:4a:2a:6a:74:9d:46:df:
2c:0f:38:1d:37:f8:b4:6d:13:6d:20:c3:a8:ad:e0:89:64:60:
76:13:4c:0f:6d:18:32:ff:1f:04:7a:5c:36:33:a6:23:e2:4e:
d9:5e:d8:3f:81:15:43:86:db:2f:c2:43:1f:71:f9:db:fc:ce:
e1:e9:eb:85:97:54:6c:e8:b9:ec:75:7d:93:9d:dc:ff:01:91:
f7:eb:12:83:ec:63:5e:9c:39:2c:d6:f4:72:35:f2:46:9e:84:
0d:eb:96:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:07:50 2026 by rpki-client