Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
File: qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft (raw, json)
Hash identifier: JhnAH7IBjj6LQK08JA0fU7AKUff0p/AL39fxjgiSFTI=
Subject key identifier: CA:DD:97:23:E2:D4:F9:C4:BD:DC:65:90:6A:93:FA:98:2A:01:C2:BF
Authority key identifier: A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3
Certificate issuer: /CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3
Certificate serial: 01A1DEA7472276653B7A61F626E2328B77B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
Manifest number: 0C02
Signing time: Sun 15 Nov 2026 10:01:06 +0000
Manifest this update: Sun 15 Nov 2026 10:01:06 +0000
Manifest next update: Mon 16 Nov 2026 10:01:06 +0000
Files and hashes: 1: J_Or8KZX1wZ3vXfvww5iG8YKGng.roa (hash: d0jCHNsxIqtKvODKfik7z9iL8EdgI8lCwjcpoaXOc1E=)
2: qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl (hash: 9vU6amwi8LoB/e4Ist59m2MkdX4YYOI3o70fMsi4E58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:47:22:76:65:3b:7a:61:f6:26:e2:32:8b:77:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3
Validity
Not Before: Nov 15 10:01:06 2026 GMT
Not After : Nov 16 10:01:06 2026 GMT
Subject: CN=cadd9723e2d4f9c4bddc65906a93fa982a01c2bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:48:6d:26:74:59:37:8f:1d:d5:be:7e:51:54:
d7:c8:e7:4a:42:1f:8a:59:b0:e8:ca:93:e9:82:67:
dd:db:46:29:97:a8:42:7a:5c:98:23:8c:82:16:6a:
8d:3c:02:9a:42:b8:f0:df:35:09:ee:7d:e7:79:35:
8f:d2:73:13:06:18:36:b8:54:40:76:8f:1d:e7:1d:
3f:d4:70:7d:61:d2:df:76:21:f9:aa:cf:98:44:93:
e9:29:cf:80:a7:38:4b:0f:ed:98:50:e5:73:ed:21:
86:73:8b:e6:ec:d1:88:f5:0a:ad:8a:e6:e5:0d:db:
70:32:f0:b3:13:23:f2:60:18:05:01:2d:70:91:eb:
29:ab:2e:e7:91:53:ef:46:03:f9:1a:2c:95:5e:34:
40:29:c6:bc:8e:2c:19:dd:12:65:70:c5:ba:fa:cb:
16:70:27:fa:0d:7e:ea:a7:a1:3c:e2:22:68:ff:fe:
af:52:0b:be:db:7c:e9:dd:b0:9f:b5:27:fa:89:f9:
9d:16:f5:3e:31:9a:fe:c2:9a:4e:a0:95:e6:4c:b1:
f1:be:1d:aa:ca:b3:a6:05:83:dc:7c:e6:34:ca:c3:
7d:f3:d6:e4:da:49:87:85:17:9f:0e:bd:34:b9:b6:
3f:4a:8a:b7:9d:5b:85:2a:7b:f9:e2:10:71:af:ee:
bd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DD:97:23:E2:D4:F9:C4:BD:DC:65:90:6A:93:FA:98:2A:01:C2:BF
X509v3 Authority Key Identifier:
keyid:A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:3e:a4:27:4a:42:76:2f:4a:27:c3:da:83:a2:07:c7:c8:b4:
be:af:de:b4:2a:7f:0a:80:ca:77:02:1b:e3:96:82:df:fa:c8:
20:33:0f:82:09:a0:92:9d:54:93:24:71:94:ca:e5:1c:a1:7d:
fa:88:11:65:01:f8:df:dd:2c:b6:d5:ae:9c:99:a3:ed:9d:f3:
27:d3:07:40:42:8c:c0:c6:24:f1:03:39:cc:77:58:42:b3:84:
46:47:21:0e:27:62:4f:c0:05:f6:2d:82:43:d2:4a:bd:ea:72:
6b:95:20:d9:c3:69:6b:21:a5:34:16:6e:df:6b:e8:97:dd:e0:
a5:8a:c5:40:b5:46:1f:b9:45:f7:65:01:f5:86:2e:74:37:7a:
16:a6:dc:7b:e4:fb:19:a8:d5:71:50:5a:00:32:76:65:49:67:
38:56:9e:8b:03:38:eb:6d:45:ca:ea:00:f5:2f:6d:64:cf:8a:
46:dd:31:57:43:94:a7:11:48:d8:e3:75:f7:e9:50:e0:45:2f:
a3:dc:1c:05:5b:99:60:01:92:60:35:c4:44:8d:4c:66:38:ca:
fd:cb:8d:a9:f5:78:7c:ca:f0:0a:ff:91:98:a9:4f:82:1e:0c:
dd:a5:fa:dc:b9:50:be:01:e5:ee:0a:aa:2b:17:9e:a9:91:b0:
e2:d0:21:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:41:03 2026 by rpki-client