Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
File: QCHf817fDObkKNav_CEsRxdnnuE.mft (raw, json)
Hash identifier: F5DRmiHxRw75NKq9RuzVgH9h7fmSrbS+O5mXsn0Xr/c=
Subject key identifier: 54:C4:F1:A1:BC:2D:80:C8:16:C1:53:3A:8D:7F:AE:8A:47:78:E8:B1
Authority key identifier: 40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
Certificate issuer: /CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Certificate serial: 01A0EA09596600C0AE2AAADC60F309A65D1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
Manifest number: 1A7A
Signing time: Mon 28 Sep 2026 22:01:16 +0000
Manifest this update: Mon 28 Sep 2026 22:01:16 +0000
Manifest next update: Tue 29 Sep 2026 22:01:16 +0000
Files and hashes: 1: 5aiPK-AjdStx2wVba_jLR8yEmJE.asa (hash: 0IErVbdaESGxXE+QIywfXtfH1IshFTMGY+X2vmTVMAE=)
2: QCHf817fDObkKNav_CEsRxdnnuE.crl (hash: kEPCt4U6kk2QQBZOvg5FLp7+poFJ52ES6fwm4samv5s=)
3: oH1r4igjZpHu8rKsfXxiqzBUl84.roa (hash: X0wT9e0aq2sCh5h0E8HXfviT92xXoJ7QSCDrREimpr8=)
4: r8t0mnOfuf-XZlUByZSmwxL5C8U.roa (hash: NIHY9VYRcz1i7SUH3PrDl1wZP8mWVi3+Xuf3Zc+uw+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:09:59:66:00:c0:ae:2a:aa:dc:60:f3:09:a6:5d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Validity
Not Before: Sep 28 22:01:16 2026 GMT
Not After : Sep 29 22:01:16 2026 GMT
Subject: CN=54c4f1a1bc2d80c816c1533a8d7fae8a4778e8b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:17:95:82:7c:97:6c:24:93:52:f9:fc:1d:67:
4d:1c:c3:28:c2:21:82:8a:c7:11:89:5b:42:2f:f2:
f0:93:18:db:d5:97:19:b0:97:7a:40:43:ba:64:0a:
69:23:15:62:10:92:09:7f:f1:74:e9:b3:c2:4f:f5:
fc:fa:57:a8:7f:bc:f9:3e:2f:ab:7d:a4:79:88:7f:
08:f5:1a:1a:2f:a6:3c:52:40:5d:47:02:1a:f0:09:
61:ed:bd:96:3a:76:55:5a:e0:da:7f:12:74:c8:09:
fd:e4:b4:d1:aa:7a:8b:a5:76:d5:3a:12:a3:4e:34:
6a:74:b1:73:0c:89:05:98:11:ae:9c:c4:2c:4b:89:
fc:60:42:6c:a7:05:99:2e:78:d2:13:a7:9a:33:cd:
16:80:42:69:b4:73:54:dd:d1:67:86:02:f1:ba:d0:
ca:80:a1:bc:f4:7b:1a:95:71:ec:b9:76:75:70:b2:
5c:aa:30:1e:ec:ab:f3:a9:a4:c8:af:a8:a9:0c:b7:
aa:0b:44:77:89:6f:4e:ad:85:4c:6e:74:20:fb:2b:
da:c3:01:55:60:d8:f3:69:22:d7:b7:e4:7a:ec:45:
b9:08:ea:21:6a:8b:11:3c:30:66:14:40:17:ab:47:
66:7f:dc:40:63:75:ec:d4:ec:0c:0b:e8:15:87:0a:
9d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C4:F1:A1:BC:2D:80:C8:16:C1:53:3A:8D:7F:AE:8A:47:78:E8:B1
X509v3 Authority Key Identifier:
keyid:40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:2b:66:80:e1:a0:53:30:84:f4:61:5d:f2:92:79:6d:82:7b:
52:1a:c7:f7:df:91:c7:a8:77:bc:a0:f5:07:b5:47:98:86:f4:
fe:d8:c6:66:23:17:d1:62:7f:53:70:6a:99:dc:40:7e:61:0b:
c8:f6:ff:b8:93:55:96:46:7b:1a:11:c7:e8:52:bf:b2:e1:53:
51:47:f2:69:77:b4:f8:f1:08:d6:54:21:43:b8:7c:2f:24:32:
44:55:3b:9a:86:82:77:3c:b7:6f:ff:02:03:1b:de:db:58:25:
8a:1a:82:07:bc:b4:dd:ea:50:31:1e:8a:60:47:ed:65:10:85:
c1:9a:43:10:c4:47:14:bd:a3:d1:64:f2:e3:b0:b7:57:ff:85:
31:4e:1e:7a:31:48:c0:23:fa:3e:33:ef:d8:94:86:22:82:fe:
80:1d:bb:97:7c:2b:d8:1d:03:c7:b3:7d:64:ab:55:ef:06:52:
35:83:b5:2e:dd:55:e3:c9:39:2e:af:32:27:a1:6f:88:af:95:
f0:8a:28:fc:7d:59:92:22:28:73:e8:b8:6f:d9:87:18:c4:96:
35:32:48:42:35:6a:29:da:ac:16:67:6b:05:cb:72:db:ae:d2:
d1:0e:33:b6:07:81:59:77:d1:ca:28:f6:3f:4b:c7:47:fb:7e:
93:34:cd:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:09:55 2026 by rpki-client