Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
File: QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft (raw, json)
Hash identifier: Tk5mMrh6FZtH1v1FkCZg+hR1ddA9UfH0p9Wy4iRZ+QY=
Subject key identifier: C8:03:FA:4D:6F:02:3E:78:78:55:C3:22:8F:CA:AE:82:D5:1E:DB:EF
Authority key identifier: 40:8F:A0:17:53:2F:F6:D9:FB:38:B4:00:37:89:6A:FA:F0:AA:CF:8B
Certificate issuer: /CN=408fa017532ff6d9fb38b40037896afaf0aacf8b
Certificate serial: 019E20242DEEE8E27CA81DD05858134F3154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
Manifest number: 0AD4
Signing time: Wed 13 May 2026 07:01:42 +0000
Manifest this update: Wed 13 May 2026 07:01:42 +0000
Manifest next update: Thu 14 May 2026 07:01:42 +0000
Files and hashes: 1: QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl (hash: fBrZhIkv7IKJ7hQ9YhbDnzqw2/vvYtp9/6Ak9mWsnfE=)
2: RhhybVhgxehJpyQFfu1dQiF3RZc.roa (hash: vTXKPtYUm1UxDqfrm9GUHJ6eZM3EZfiTITZU7YFaPA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:24:2d:ee:e8:e2:7c:a8:1d:d0:58:58:13:4f:31:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408fa017532ff6d9fb38b40037896afaf0aacf8b
Validity
Not Before: May 13 07:01:42 2026 GMT
Not After : May 14 07:01:42 2026 GMT
Subject: CN=c803fa4d6f023e787855c3228fcaae82d51edbef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:23:0a:54:d5:fb:bd:08:24:7f:b7:1e:c9:b2:
a3:bd:12:aa:bd:87:ac:45:59:08:08:4f:09:74:e0:
28:d8:54:d4:d7:52:3b:00:5a:31:d6:96:e3:51:a9:
31:6d:97:70:34:cb:72:30:64:2b:93:55:b7:f5:fc:
6e:40:1a:c5:4f:2d:cf:07:4f:23:cf:94:af:09:f7:
1a:47:9e:09:8a:08:fa:90:a0:51:c8:20:d5:4e:99:
56:41:54:5c:d9:77:15:00:89:04:68:1b:e0:03:f3:
48:18:42:bb:13:d1:9f:0f:b9:b4:09:eb:eb:db:28:
8f:ea:36:f4:7e:bb:3a:9a:a4:a8:49:59:3e:fa:fd:
b3:6a:3e:74:72:24:30:09:ef:62:80:2d:84:35:a0:
c6:a8:7e:ef:51:74:88:3b:71:17:d3:83:3b:55:9b:
ea:25:0f:6e:41:8a:f6:2b:71:7d:b7:1b:0b:c4:d4:
ba:8d:07:ab:77:bf:28:93:18:94:94:88:84:18:18:
6d:0a:7b:5d:4e:79:db:7e:fc:90:55:39:b2:b0:64:
a4:4e:e7:43:70:b5:10:0f:a6:b7:e1:18:35:78:df:
8e:25:61:04:9a:18:a7:33:75:1b:b6:51:82:ee:41:
12:5f:c9:9d:77:18:f0:9e:91:85:1e:12:be:40:bb:
a0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:03:FA:4D:6F:02:3E:78:78:55:C3:22:8F:CA:AE:82:D5:1E:DB:EF
X509v3 Authority Key Identifier:
keyid:40:8F:A0:17:53:2F:F6:D9:FB:38:B4:00:37:89:6A:FA:F0:AA:CF:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:47:17:1b:e9:42:26:ce:c4:37:2a:7f:48:f0:68:d4:7f:89:
7f:e1:86:b3:4d:1c:a5:79:08:3f:dd:5f:fd:e7:dc:55:e7:91:
45:43:8b:86:db:00:03:37:74:0a:5d:6b:3d:79:94:f9:75:41:
71:19:93:43:c9:4a:84:b4:70:38:ef:65:6d:8a:21:95:8f:98:
0f:66:31:3c:cb:1e:c9:24:9f:3c:96:03:0c:88:e7:8e:fd:04:
81:3d:90:f5:3c:84:fc:6b:cd:29:5e:63:4b:27:e2:3a:d4:1a:
87:95:c3:d9:ec:16:50:2a:37:d5:bf:31:67:77:ea:9b:a1:bd:
e5:e6:31:95:05:29:bf:4f:50:67:a2:75:93:1f:35:c1:b6:02:
e2:56:82:ce:be:86:75:10:ae:e6:b6:5b:b3:07:18:56:db:08:
50:f7:ac:dd:a5:17:0b:cc:24:a6:6f:f6:c1:07:5c:d8:5d:b1:
4d:c9:6e:50:27:5c:e1:be:3c:f5:6b:3e:08:3f:98:7f:94:bd:
c4:e4:4e:98:22:ba:45:0c:8c:02:5b:76:06:ca:a5:a2:60:ca:
54:5a:1e:66:6d:82:fe:8f:32:f3:b0:9c:3d:1d:23:78:a7:d0:
a2:da:c7:d1:39:55:16:1c:c1:4a:3a:3e:65:ee:16:ee:e1:48:
aa:6f:1e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:10:42 2026 by rpki-client