Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
File: QdELiOsk9iYtkxU2il0B4eCGDE4.mft (raw, json)
Hash identifier: J9ppkfgVznkoUiibjouVUUdpUUW4MBngPEyCLnw6Ols=
Subject key identifier: 64:50:FE:16:D6:AA:17:C7:29:6E:61:1D:DC:A2:9C:C3:E8:0E:A3:93
Authority key identifier: 41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
Certificate issuer: /CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Certificate serial: 019D28F21BEA504E316C7E5992B6DCBFC3E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
Manifest number: 0E5E
Signing time: Thu 26 Mar 2026 07:00:48 +0000
Manifest this update: Thu 26 Mar 2026 07:00:48 +0000
Manifest next update: Fri 27 Mar 2026 07:00:48 +0000
Files and hashes: 1: 21M7HF4__TSSYuc94uYUsxaViMI.roa (hash: bLnj/IRZ795Oev6VIkUJOays0OV+AGQSOAXtErO1j5g=)
2: QdELiOsk9iYtkxU2il0B4eCGDE4.crl (hash: wYZmTuIGctXFT4x9jpXJQ3XHOF3c8U9SpJIUkFSbbcU=)
3: eaXikRCsLtsFiUKz6WXrDOERlPQ.roa (hash: c7SW61m3J6x7Rtxxm9NLZWtrkTB2+cri1x/k0vlq8jk=)
4: gkbICmY92gO5yWh3UUqQ3JZEKOM.roa (hash: RZ4WGmwrPF1CwIYf7Eiia3Ji+NZJkZQF8Et1XMrVS7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:1b:ea:50:4e:31:6c:7e:59:92:b6:dc:bf:c3:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Validity
Not Before: Mar 26 07:00:48 2026 GMT
Not After : Mar 27 07:00:48 2026 GMT
Subject: CN=6450fe16d6aa17c7296e611ddca29cc3e80ea393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5a:0a:58:3c:b0:08:db:e6:b2:b0:6e:f3:44:
00:8b:2a:32:56:7b:f0:22:b1:48:ca:56:0a:92:de:
46:30:92:68:54:be:2e:5f:dd:ae:a8:43:15:90:74:
87:35:cd:ab:7b:69:72:12:6a:d8:d2:e9:73:c1:e1:
16:3a:ff:46:3e:3f:15:73:1e:96:8c:05:98:5f:6b:
af:13:ef:0b:d2:03:49:03:07:7d:d6:4a:1a:be:57:
2e:66:48:39:b3:c1:a2:59:b5:0b:20:05:26:4c:c8:
02:40:cd:f8:bb:4a:91:0d:42:73:9c:6b:ec:7e:d6:
c3:c5:c4:b4:97:c0:dd:f5:c5:3f:21:d2:66:f2:c0:
f1:83:04:73:00:9b:03:72:d5:6c:a8:8b:fa:8a:ca:
c1:53:8b:ed:4b:e4:ff:15:43:e3:0f:df:c7:fe:30:
e9:1b:00:16:57:49:d8:02:e6:d4:7f:d5:93:6b:15:
56:81:92:b0:89:c5:d9:99:36:5e:30:ac:f6:60:f7:
2f:8c:07:4f:61:6d:e2:46:20:d4:36:75:a3:e6:87:
38:44:7c:4b:db:3f:9d:96:f2:49:22:a8:17:b2:ce:
98:81:4b:35:98:64:60:c5:5c:44:e9:14:4a:94:74:
53:a8:98:9e:20:2b:4a:f6:50:5b:f4:37:10:f3:06:
71:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:50:FE:16:D6:AA:17:C7:29:6E:61:1D:DC:A2:9C:C3:E8:0E:A3:93
X509v3 Authority Key Identifier:
keyid:41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:e0:1b:db:a2:40:6b:42:cd:ee:b1:bb:bd:1c:7f:58:a5:4f:
94:88:d5:6b:6b:23:d0:b7:c8:fe:03:0b:0e:bd:ed:c4:70:ba:
71:f3:6e:4d:fb:0b:f1:22:7c:1e:b9:87:10:42:e6:62:eb:61:
a1:56:5e:78:55:3a:8c:cc:f3:e1:b3:b7:49:b1:c1:ed:a6:52:
e0:12:e1:00:1f:2d:cc:ec:9c:69:ee:77:a3:c0:f3:f8:1f:be:
6c:a9:31:1b:33:00:f9:99:11:06:46:a5:69:8e:b6:f3:49:80:
a0:f2:8c:42:42:2e:d9:b7:85:09:05:4e:47:0c:f5:e6:b4:d2:
78:78:27:fc:c8:31:c3:e8:d6:62:cf:91:33:97:6e:a0:11:67:
7d:3e:94:b2:d4:f0:21:64:00:ed:7d:41:86:d1:96:7f:2c:bc:
17:e7:a8:2a:79:c1:e4:2c:5f:27:bb:22:ec:0b:31:b5:cd:6d:
bc:ee:1e:17:1a:97:56:c2:0e:ae:49:ca:94:59:db:a3:d6:66:
a5:52:8f:1e:fd:88:88:d1:e7:e5:ef:db:e4:b6:fd:7b:4b:41:
d4:e8:a1:78:dd:dc:c9:f6:3a:94:8c:9f:75:cd:3a:11:dd:dd:
65:38:d1:c2:1f:dd:c9:ad:9e:a1:75:dd:b9:44:07:87:22:19:
04:8a:e9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:52:35 2026 by rpki-client