Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
File: Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft (raw, json)
Hash identifier: LgkKs0jSC95oWmvbadFL8bDbMFhVrimR1Dr/aZpM+B8=
Subject key identifier: DB:6B:D0:69:E0:0B:AB:AA:1E:C4:7C:F8:4A:CA:24:56:CC:4D:41:45
Authority key identifier: 41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31
Certificate issuer: /CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31
Certificate serial: 01A0DD988D38031FA106A1F7AD096FD6BA55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
Manifest number: 1406
Signing time: Sat 26 Sep 2026 12:02:37 +0000
Manifest this update: Sat 26 Sep 2026 12:02:37 +0000
Manifest next update: Sun 27 Sep 2026 12:02:37 +0000
Files and hashes: 1: NQ75nb1-xJ7HIs6FdHfLr_Qn5o8.roa (hash: 0/Ed5GPxhq59pa7mSV6ONsdGXpQguRmYVeDEeOnkcHU=)
2: PXrC0OWTvC3oDvSMYzCzL7Vl-uQ.roa (hash: 2Ri2mgKyHMUEf2CJlFmGd9Z/Z2goUwzz5lX8kmekZSA=)
3: Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl (hash: 32TUYSsoLlC5VjlQv4O/qeUC7bgfDBJqrlXqMydBhHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:98:8d:38:03:1f:a1:06:a1:f7:ad:09:6f:d6:ba:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31
Validity
Not Before: Sep 26 12:02:37 2026 GMT
Not After : Sep 27 12:02:37 2026 GMT
Subject: CN=db6bd069e00babaa1ec47cf84aca2456cc4d4145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:78:5f:bc:ee:74:70:7a:03:e1:f1:1c:7e:15:
25:9f:5f:7c:2e:63:ad:46:03:56:a1:66:4c:8f:57:
3e:83:ef:9b:dc:0b:91:3c:61:c9:77:4b:79:1b:c5:
05:8d:81:c3:e3:f2:2a:3f:8e:4c:be:ce:21:43:9b:
c2:e3:37:60:d6:f8:e6:7c:6f:be:5d:ea:2c:4e:35:
94:ac:f6:5b:0d:43:67:eb:5c:1c:16:40:b8:df:81:
9a:f8:65:bf:0e:3d:37:35:9d:b3:3b:f4:76:ec:3f:
55:24:eb:ca:e9:e5:78:44:62:65:1e:d7:af:95:b1:
54:2f:d0:cc:57:51:05:9c:2f:61:e1:86:85:77:cd:
d0:91:0c:68:e8:bd:da:50:00:ff:cc:1a:c2:f7:4d:
4a:5c:67:a8:95:e2:e1:dd:df:a6:bd:12:a0:b9:35:
56:c7:b8:40:52:67:74:4d:50:09:75:dd:88:18:53:
1e:8b:34:6e:df:d2:a9:98:c4:bf:26:37:43:03:ab:
c1:90:5d:d1:66:e0:9c:43:03:4e:4b:7e:3d:00:fe:
e3:44:e5:ea:05:6c:1a:8a:a6:26:26:d8:1c:29:91:
f7:3f:ab:8b:97:01:04:59:43:a3:e3:a7:88:e7:81:
12:9f:a5:02:73:dc:77:71:6b:7e:2f:ab:50:c6:ef:
d4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6B:D0:69:E0:0B:AB:AA:1E:C4:7C:F8:4A:CA:24:56:CC:4D:41:45
X509v3 Authority Key Identifier:
keyid:41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a4:e5:45:c4:37:72:1b:d6:d0:33:3c:4b:b4:97:cb:e7:a5:
e2:cd:a2:d5:29:4a:f4:40:6f:aa:90:32:7f:f6:f2:14:16:ee:
f8:ee:94:cb:ae:b7:a2:64:c0:d7:7e:4e:2a:8a:79:03:3a:75:
65:d1:7a:ce:d3:b3:11:e3:88:2c:ef:9b:11:c7:c6:ba:49:25:
ad:5e:d7:3c:2e:ac:1f:fe:75:fe:f5:1f:65:df:45:88:45:98:
65:af:06:d8:31:6b:3f:39:b0:b8:2b:e0:4a:91:e1:9e:4e:7b:
4b:2c:d0:cb:d1:b7:d3:34:2e:83:1f:4a:a0:58:4f:e8:0a:00:
8f:88:ad:e4:65:7b:95:72:3e:17:28:9d:2e:2f:4f:05:a1:d2:
4d:24:7e:a8:c4:d5:03:7d:63:d8:29:2b:91:31:48:a0:9f:bb:
11:05:16:75:45:03:cf:83:b9:72:83:38:3b:16:62:c8:fe:be:
17:bc:98:54:70:c2:04:14:11:5b:2d:12:04:8e:f0:11:01:f9:
b7:c5:42:2e:a3:91:61:28:91:84:e4:24:74:da:cf:b5:17:fc:
83:46:80:f4:27:3d:16:46:be:a4:80:f5:e3:d5:34:c8:1e:f7:
42:d1:1f:68:5e:ca:10:80:34:3f:43:8d:50:46:e6:2d:f9:01:
2e:21:3c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:14:02 2026 by rpki-client