Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
File: QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft (raw, json)
Hash identifier: XV2Djv2IPwoG8BRqyaKzEV7VCnpktVnzeaSktvb+y2w=
Subject key identifier: C6:B3:38:38:29:B6:50:FD:F4:2F:4D:E7:27:EC:78:61:CA:1C:95:93
Authority key identifier: 42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
Certificate issuer: /CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Certificate serial: 01A11861A886A2D79D339AF8E4E1DAFBB64D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
Manifest number: 17CE
Signing time: Wed 07 Oct 2026 22:00:15 +0000
Manifest this update: Wed 07 Oct 2026 22:00:15 +0000
Manifest next update: Thu 08 Oct 2026 22:00:15 +0000
Files and hashes: 1: QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl (hash: 028W3AIwgQWLxaQfv/NhPHC8ZhKGFfoaYywR/wVbtWI=)
2: SsfnBHuvPDESg4pTMTaqtv9nT-Q.roa (hash: ZrITCydyp3ig8q1pUL+0pHbv4soXKIcGIYDQm4wHpvo=)
3: c-KZaw3UumwWkGCg1_3weGS8B-U.roa (hash: 2AcxA0Jqp/dgXDEXPcxhpKLcjp+xB4KSRrsphLc65kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:61:a8:86:a2:d7:9d:33:9a:f8:e4:e1:da:fb:b6:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Validity
Not Before: Oct 7 22:00:15 2026 GMT
Not After : Oct 8 22:00:15 2026 GMT
Subject: CN=c6b3383829b650fdf42f4de727ec7861ca1c9593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:54:1f:3b:a0:d8:ff:f4:5e:c7:16:e7:7f:bf:
76:16:f4:3f:0e:bc:43:9e:19:4b:cd:59:57:16:9f:
53:c6:21:50:7e:60:c7:b4:67:05:b6:c2:6d:00:5a:
ce:02:c1:88:c5:f0:37:01:1c:f4:9c:9c:58:f6:63:
4d:49:34:cc:ad:3b:86:10:6b:01:da:b3:80:fb:d6:
c5:97:83:18:cd:df:67:17:d9:85:52:dd:72:39:4a:
ed:01:54:1b:ec:7a:98:b5:e4:41:ba:b1:02:69:0c:
ac:f9:7a:c4:e5:16:ff:32:31:54:00:76:63:c4:1b:
1f:6b:0f:47:8e:a9:82:7e:ff:3b:ea:67:e8:40:8d:
1d:74:35:1c:f9:ea:dc:e5:3f:45:b6:ef:7f:9c:b4:
8a:fb:f8:56:7c:94:37:ca:df:5f:f9:5a:ef:0d:36:
74:ad:64:d2:79:22:55:e7:0b:d2:88:f8:56:e4:5f:
35:e2:14:66:3b:87:9f:14:35:58:bd:4c:ec:d1:57:
fb:4b:1d:6f:6f:63:4f:ec:2c:46:67:a6:23:f3:21:
3c:a3:0d:93:e6:bc:55:1b:02:01:04:95:aa:33:e2:
be:ff:8f:f3:b2:f8:ba:a3:2a:75:e6:cf:ff:1b:07:
df:0b:32:d9:e5:28:c1:06:4f:78:6f:74:31:54:de:
d7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B3:38:38:29:B6:50:FD:F4:2F:4D:E7:27:EC:78:61:CA:1C:95:93
X509v3 Authority Key Identifier:
keyid:42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:02:3c:a7:2e:5e:2f:d2:6d:1b:2d:39:56:7a:8e:f4:25:6e:
a2:87:11:49:45:2a:39:7d:45:a3:39:e3:95:84:ec:08:49:e7:
9a:9c:e9:5a:2b:94:14:e6:04:1d:a7:16:2a:02:a7:09:93:a2:
7c:60:6a:fc:6f:aa:5d:a1:82:05:af:75:a1:7d:77:9b:57:20:
a9:4f:4c:d8:3a:0e:9a:40:62:4e:66:ad:9d:a7:65:5d:c5:22:
37:7c:b9:25:8c:18:c1:52:ce:13:95:89:71:e4:f5:7f:3d:eb:
ad:f8:04:7f:f2:20:1e:04:90:1c:42:48:9f:cc:d4:f4:b7:02:
94:ff:04:40:8f:19:a2:8b:4e:45:39:df:b0:0a:44:fb:72:1c:
64:42:6b:8c:0d:bf:94:a3:51:5e:0b:5e:77:20:24:40:fb:5e:
b1:05:a9:b5:6a:79:7d:27:c1:9f:1d:c8:25:74:05:51:7a:88:
6d:ea:b8:f0:ed:d5:1a:ac:17:39:6e:00:64:8e:61:7d:06:11:
c9:b8:0d:de:0f:cf:42:bf:a9:1a:4f:da:c0:d0:22:0d:44:2d:
28:26:ca:a1:cc:69:31:d4:9e:5e:23:56:6d:ad:b4:db:84:3c:
b1:e2:f6:14:60:6e:b5:d0:c3:e7:9f:7c:c1:cd:04:26:31:1f:
b4:a2:a7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 08:09:44 2026 by rpki-client