Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
File: QdELiOsk9iYtkxU2il0B4eCGDE4.mft (raw, json)
Hash identifier: JQZ95OBoBubQg1T1mJH1anStq/ZiG1Hkl2dboICEU2A=
Subject key identifier: E8:66:A1:F2:8E:36:8F:11:81:F0:C6:85:F5:49:EA:CF:05:67:05:45
Authority key identifier: 41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
Certificate issuer: /CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Certificate serial: 019F92ED2EBAEDAA41104A5168401F0B4E2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
Manifest number: 0F9E
Signing time: Fri 24 Jul 2026 07:00:45 +0000
Manifest this update: Fri 24 Jul 2026 07:00:45 +0000
Manifest next update: Sat 25 Jul 2026 07:00:45 +0000
Files and hashes: 1: 21M7HF4__TSSYuc94uYUsxaViMI.roa (hash: bLnj/IRZ795Oev6VIkUJOays0OV+AGQSOAXtErO1j5g=)
2: QdELiOsk9iYtkxU2il0B4eCGDE4.crl (hash: eXfXg4/2RD6hM/kUps1daDjokgtAWs7EUjhIAaJshzg=)
3: eaXikRCsLtsFiUKz6WXrDOERlPQ.roa (hash: c7SW61m3J6x7Rtxxm9NLZWtrkTB2+cri1x/k0vlq8jk=)
4: gkbICmY92gO5yWh3UUqQ3JZEKOM.roa (hash: RZ4WGmwrPF1CwIYf7Eiia3Ji+NZJkZQF8Et1XMrVS7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:2e:ba:ed:aa:41:10:4a:51:68:40:1f:0b:4e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Validity
Not Before: Jul 24 07:00:45 2026 GMT
Not After : Jul 25 07:00:45 2026 GMT
Subject: CN=e866a1f28e368f1181f0c685f549eacf05670545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:82:8a:46:01:75:df:ff:e5:23:fc:80:01:33:
ee:80:28:2f:94:3d:10:ce:49:ce:e8:16:f7:e6:26:
de:05:18:03:91:bf:2f:45:75:be:ae:19:2b:80:ca:
ad:15:46:2c:a2:14:9e:7e:00:32:a7:b1:a8:df:b9:
c7:27:80:87:ab:01:29:1b:82:d7:a0:3e:1b:a6:ee:
d2:ef:ec:72:36:df:53:99:5f:37:ba:94:26:3e:a3:
b1:d4:7b:d9:a2:b9:1a:be:f1:2a:21:85:b8:5b:77:
9b:86:0f:a9:57:23:11:00:46:6a:7a:b8:1f:f5:b1:
70:26:31:e6:da:dc:a1:4b:20:da:9b:49:88:92:03:
d1:29:67:10:0b:af:a4:b4:c1:7e:93:b4:94:fd:e1:
f9:fd:76:34:35:5d:f2:aa:e6:f5:27:5b:ce:06:c6:
d4:69:d0:cb:62:75:5e:1f:a2:6a:15:c4:eb:6a:d8:
e8:49:be:e9:d6:85:a0:e4:a0:09:e2:a9:61:f1:73:
97:b8:d8:02:e8:4c:2b:02:8b:56:6b:f5:54:5f:bd:
12:6c:d0:27:8d:43:bb:6d:d0:ce:f4:29:ed:31:2a:
d9:c7:f7:4a:f7:19:f0:15:7e:f8:72:b7:e3:fe:69:
03:48:b1:db:06:e6:1f:1c:41:b4:15:64:9d:20:78:
58:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:66:A1:F2:8E:36:8F:11:81:F0:C6:85:F5:49:EA:CF:05:67:05:45
X509v3 Authority Key Identifier:
keyid:41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:fc:99:d0:33:76:c4:f6:f8:af:4c:9f:55:b7:27:a5:9d:48:
e7:bb:03:f5:bb:7b:62:78:e8:84:a0:28:26:f8:c6:a7:2f:68:
75:32:0c:10:20:5c:d6:ca:54:34:1a:3a:0b:84:02:7f:5f:8a:
00:73:4f:61:d9:5f:c8:eb:39:40:b0:13:12:c0:80:43:47:a1:
ec:3d:1a:db:f6:38:e1:71:b6:2a:4f:6b:9a:2f:9e:e7:79:a9:
35:4d:b4:e5:c8:9e:93:5d:d0:50:8f:a6:17:fc:e9:2b:28:59:
ec:48:a9:0a:8e:d1:25:40:b8:cb:b5:f1:a3:b4:02:38:39:0f:
aa:5c:83:27:d5:9e:6a:57:40:c2:58:7f:ab:e7:7f:ca:1b:c9:
8c:e0:45:b6:86:bf:62:32:39:af:e2:b1:ba:99:72:8d:f7:3a:
bd:ea:8c:c1:7b:24:1d:d4:3c:78:c6:b6:73:89:3e:ee:16:f0:
d0:0b:71:d1:f9:88:1e:f6:f7:eb:57:e2:86:93:5d:38:b8:ce:
32:6c:90:46:35:98:56:e0:43:6f:33:e8:0d:d2:92:46:9f:83:
c8:d1:75:00:b3:99:66:08:f0:7d:b8:5d:23:02:af:a4:0a:fd:
a7:27:26:fe:d8:32:33:78:18:0c:a8:a4:84:47:e3:c8:15:78:
9c:16:81:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:18:36 2026 by rpki-client