Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
File: QdELiOsk9iYtkxU2il0B4eCGDE4.mft (raw, json)
Hash identifier: xZ9LmIMwnQUiEuCV+CMCGu2l65MOHQ3IUkeNKm2xBys=
Subject key identifier: 65:40:1A:3B:CE:48:23:2A:01:02:49:21:6F:E9:8F:E1:88:F9:D8:14
Authority key identifier: 41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
Certificate issuer: /CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Certificate serial: 01A0D56FFB6D3A570C5023507F115FC9AC5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
Manifest number: 1045
Signing time: Thu 24 Sep 2026 22:01:20 +0000
Manifest this update: Thu 24 Sep 2026 22:01:20 +0000
Manifest next update: Fri 25 Sep 2026 22:01:20 +0000
Files and hashes: 1: 21M7HF4__TSSYuc94uYUsxaViMI.roa (hash: bLnj/IRZ795Oev6VIkUJOays0OV+AGQSOAXtErO1j5g=)
2: QdELiOsk9iYtkxU2il0B4eCGDE4.crl (hash: bd/MGDcTK4O7rCT6MgxjgLj6oksf0x21JgIfMlZakDs=)
3: eaXikRCsLtsFiUKz6WXrDOERlPQ.roa (hash: c7SW61m3J6x7Rtxxm9NLZWtrkTB2+cri1x/k0vlq8jk=)
4: gkbICmY92gO5yWh3UUqQ3JZEKOM.roa (hash: RZ4WGmwrPF1CwIYf7Eiia3Ji+NZJkZQF8Et1XMrVS7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:6f:fb:6d:3a:57:0c:50:23:50:7f:11:5f:c9:ac:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Validity
Not Before: Sep 24 22:01:20 2026 GMT
Not After : Sep 25 22:01:20 2026 GMT
Subject: CN=65401a3bce48232a010249216fe98fe188f9d814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8e:8a:62:43:63:10:7c:35:1f:3a:b5:51:96:
5d:27:fe:be:f5:62:a8:ac:96:a7:75:75:59:40:f3:
19:9c:4b:b2:4e:da:39:33:c7:f7:84:2c:91:43:ec:
63:34:ec:45:5c:05:a6:49:52:a2:df:31:92:50:89:
ec:23:f5:95:d0:a7:6a:a3:6d:19:ac:8c:d0:f6:59:
d5:82:29:f1:53:41:b7:47:89:bb:3c:da:68:e3:d2:
2a:d0:2d:da:e8:7b:25:eb:a0:13:af:5e:b9:ce:3b:
46:c5:75:57:9a:ee:31:3f:0f:68:fb:c3:d5:d2:cb:
c2:80:f3:63:06:5c:8e:97:45:c3:bc:2b:5c:af:ac:
75:27:d9:c4:04:7c:92:b2:a0:4c:65:9b:72:18:b9:
4d:15:62:dd:90:c1:13:f0:68:21:3a:a3:cb:fc:5f:
e1:2a:f4:99:4b:8f:7f:4a:44:ed:6c:fe:f0:8b:19:
19:4e:70:92:04:fd:ec:80:25:ea:29:72:fe:9d:ca:
66:0c:12:fe:eb:12:91:69:17:88:f2:23:ec:51:36:
33:8b:c4:7a:46:e1:eb:9f:04:55:cf:a6:48:45:b2:
af:72:d7:e3:41:1c:ad:d8:75:fd:00:f8:a6:ea:8d:
36:21:c2:eb:c4:db:9b:55:cf:d5:06:8a:21:30:53:
7e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:40:1A:3B:CE:48:23:2A:01:02:49:21:6F:E9:8F:E1:88:F9:D8:14
X509v3 Authority Key Identifier:
keyid:41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:80:4d:af:bb:77:4d:f8:ff:24:f7:f3:a7:cc:51:0e:ce:eb:
1f:36:1f:63:ff:07:ee:55:fe:47:0b:47:f3:63:f4:79:a6:58:
3a:71:0c:46:d7:b4:8a:c7:fa:f9:46:b8:e2:79:55:72:7c:cb:
6c:4a:af:93:fb:ad:95:99:65:b2:06:44:e4:db:0c:77:9d:d8:
dd:cf:97:20:ba:da:10:36:9f:83:00:3e:aa:dc:d5:af:08:fb:
83:be:b8:e0:51:d7:39:ab:ec:f7:57:01:d7:b3:d6:38:f5:ab:
f2:e0:42:e0:af:15:2f:6b:bc:8c:ef:92:fc:f5:0a:60:66:15:
fc:bd:dc:f3:ea:c6:98:d4:b5:6b:00:26:6d:7d:86:4c:a4:48:
65:bb:f3:dd:a6:7a:d9:d0:41:14:5d:8e:1e:65:23:db:24:81:
9c:1f:c6:c7:7e:bd:4c:45:28:f5:5f:eb:ae:a7:89:b3:f0:df:
56:e8:83:bf:3b:9d:29:c2:47:f6:49:22:4c:a0:53:c5:b8:8b:
b7:82:40:47:29:74:e2:1c:89:51:64:cb:85:d0:fd:15:f8:18:
82:b6:bd:6b:ba:75:0d:60:80:98:14:c3:42:40:27:07:82:10:
37:9e:d3:da:cd:17:e4:6f:3d:bd:75:a4:b7:c9:b8:74:63:41:
f3:79:60:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:19:16 2026 by rpki-client