Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
File: QdFPKPmNO9zEXhkibx9WFw4xKr8.mft (raw, json)
Hash identifier: UUxyKD9NV/cCHaQXedeyFvMW1tqB7w0/JItLGkCXHT0=
Subject key identifier: ED:18:B8:1B:8D:AC:33:12:BF:D3:F6:38:6C:B7:CD:DA:E4:2B:01:1C
Authority key identifier: 41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF
Certificate issuer: /CN=41d14f28f98d3bdcc45e19226f1f56170e312abf
Certificate serial: 01A0DA5F20C19B7AADF9B32CF562032ECEDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
Manifest number: 1A72
Signing time: Fri 25 Sep 2026 21:01:02 +0000
Manifest this update: Fri 25 Sep 2026 21:01:02 +0000
Manifest next update: Sat 26 Sep 2026 21:01:02 +0000
Files and hashes: 1: NuvWFYQk-kiKl2MmMjAPNDb8So4.roa (hash: HNkfwrKS+V0tdXG/bTci5kuusdPPHQbnnFcQ26SERCU=)
2: QdFPKPmNO9zEXhkibx9WFw4xKr8.crl (hash: H577XZxnjbFkeh4NG96eGYoc81Gq9SEuoOkUqZGgpQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:20:c1:9b:7a:ad:f9:b3:2c:f5:62:03:2e:ce:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d14f28f98d3bdcc45e19226f1f56170e312abf
Validity
Not Before: Sep 25 21:01:02 2026 GMT
Not After : Sep 26 21:01:02 2026 GMT
Subject: CN=ed18b81b8dac3312bfd3f6386cb7cddae42b011c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:0f:91:6a:18:cd:56:7a:6d:2a:8b:12:e2:6f:
f0:e3:5c:92:e4:99:fc:b7:cd:2b:b3:d8:c4:3c:08:
37:25:11:1c:cb:e6:d9:f4:c5:73:32:a9:63:c0:54:
63:a6:32:18:43:79:e2:2e:15:52:d9:23:f3:60:d9:
8f:26:37:bb:bd:a6:65:fc:f3:ac:ca:33:02:ca:b4:
64:7b:e4:70:07:0a:5d:c3:cc:9a:e0:9e:92:4d:86:
84:38:d7:1a:9c:a3:89:00:de:e3:48:42:e7:75:1d:
9a:e8:f8:96:6b:1f:b3:e6:bd:89:9d:85:e8:1a:89:
5e:df:ba:97:eb:a3:36:84:d3:b6:de:6f:1f:1c:d6:
bf:c8:e9:43:a4:57:85:8c:d2:00:a5:4a:3b:1b:b0:
89:19:65:de:0b:e6:9e:84:8c:89:16:87:1c:d2:c8:
92:d0:af:3a:ce:d3:22:bf:38:39:ae:88:56:ec:7d:
62:90:e0:59:e3:46:19:2d:58:fa:db:e7:da:e8:da:
33:ae:e1:8c:d3:ff:96:84:6f:1d:e5:0d:ef:8a:40:
92:49:d8:eb:74:50:1e:4c:87:e7:0a:0e:ab:17:79:
90:26:92:95:29:74:9b:0f:de:8b:5c:97:b5:ef:af:
5b:db:8f:b1:d6:d5:53:77:e3:e1:05:4a:18:1a:9e:
b0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:18:B8:1B:8D:AC:33:12:BF:D3:F6:38:6C:B7:CD:DA:E4:2B:01:1C
X509v3 Authority Key Identifier:
keyid:41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:30:ae:61:fb:e8:2a:d4:9f:26:c2:4c:f1:03:50:a8:8d:c4:
ad:cf:40:ba:1a:d1:85:6f:4e:de:ae:19:28:4c:02:b0:4f:7d:
20:fa:cb:5f:81:b2:92:49:01:be:d1:cb:6e:ca:ed:11:a4:55:
88:7d:bb:48:4d:34:9b:d4:ea:fd:68:c4:98:d4:8b:bb:44:12:
db:ce:c5:f6:5a:c1:bd:7b:53:4a:df:a8:3f:91:6e:73:bf:8e:
89:6d:f3:75:be:b5:e3:b3:78:40:81:b5:f7:10:bd:f3:20:c7:
0b:2d:aa:93:ac:47:d1:12:30:47:9d:dc:62:02:cd:8a:14:db:
76:13:fa:a1:bf:57:ef:40:b1:cf:dd:34:69:18:da:18:fa:e4:
29:6f:dc:8c:23:48:bf:31:59:ca:89:fd:64:52:6d:f9:55:4c:
2d:a6:2c:53:63:fe:fe:48:78:d0:23:df:5f:9a:4a:fc:d9:e5:
a1:ee:6c:95:b0:1d:23:32:d7:2f:c3:8e:90:16:53:b4:70:33:
d0:97:ce:fa:66:d6:df:55:9f:f4:80:3c:d3:8f:ba:f7:ea:0e:
4e:87:92:e3:20:6b:36:dc:9a:b6:82:30:9f:94:e0:f7:68:c8:
53:21:12:b9:f5:1e:f1:57:ef:7e:18:d0:c1:08:10:2c:d5:c1:
e4:f9:ee:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:03:32 2026 by rpki-client