Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
File: QSUTQuBdWLO3_JOhXLoetx5UI4U.mft (raw, json)
Hash identifier: eKcTv6kJDC9lHbdN34RpKEil2iHBurS7ci4eeyoPLIc=
Subject key identifier: 60:5A:22:6B:29:E4:EB:D8:19:89:C4:BF:FA:54:99:01:E4:00:05:8A
Authority key identifier: 41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85
Certificate issuer: /CN=41251342e05d58b3b7fc93a15cba1eb71e542385
Certificate serial: 01A0D4263675FA08AD60B0D55D5C29150BF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
Manifest number: 0FCB
Signing time: Thu 24 Sep 2026 16:01:08 +0000
Manifest this update: Thu 24 Sep 2026 16:01:08 +0000
Manifest next update: Fri 25 Sep 2026 16:01:08 +0000
Files and hashes: 1: 2yFgKgHBNfXP9Fpv_nDaH9AIU2w.roa (hash: KUjVLxypLNAnKDptEU6H83pz7JxHiqMQheBYv9uMBXw=)
2: QSUTQuBdWLO3_JOhXLoetx5UI4U.crl (hash: ISV41I/9N1y/dR2UFtzbujG0pm11MVtPCj2OWFBYfds=)
3: SRqia6YfXXJ2UoukZVUrTxtqyEQ.roa (hash: nPbXswUrrFqKL4mXICqBgwismUWqPb6a8TY0i6MyF08=)
4: d5PdMaYecTYrcLACxbZLnFI-Ttw.roa (hash: bkizhGU11VVsZnHMsz3a7eUmEGtVhKdjK9sYEg1z89Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 16:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:36:75:fa:08:ad:60:b0:d5:5d:5c:29:15:0b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41251342e05d58b3b7fc93a15cba1eb71e542385
Validity
Not Before: Sep 24 16:01:08 2026 GMT
Not After : Sep 25 16:01:08 2026 GMT
Subject: CN=605a226b29e4ebd81989c4bffa549901e400058a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d7:21:dd:37:0a:08:f9:17:bd:3f:3e:dd:06:
dd:4c:0e:85:e1:df:5d:3c:73:5f:dd:08:fb:31:7f:
9b:a1:e6:ea:dc:e2:a9:79:7f:90:bf:d4:d6:40:c3:
08:8f:8a:72:a6:5b:e4:5f:bc:d7:9e:0a:fe:53:2c:
bc:54:bc:49:3b:f3:17:c5:01:21:0e:8f:f1:5d:76:
38:2b:a9:db:9f:65:94:3e:19:30:8e:29:df:96:d2:
a2:58:f1:24:34:9e:44:38:22:75:6b:b2:01:aa:01:
2d:21:ae:d4:c3:76:25:eb:56:94:50:d1:93:35:3e:
0a:41:e0:da:af:88:af:98:27:59:76:9e:b5:2d:36:
6b:5b:32:af:29:63:1f:4c:75:00:33:3e:e6:8b:bc:
31:6f:e5:41:67:bc:8e:5f:22:00:a9:70:6f:07:1a:
bc:b1:c3:27:b0:67:8a:ac:dd:d8:bd:03:d8:ee:4c:
d9:ac:20:20:99:94:67:cc:b2:f6:ee:4f:b3:01:40:
07:bf:9a:ce:90:28:03:a9:b7:c1:6d:97:3a:48:64:
30:cd:ca:d4:2c:4f:ab:4f:79:6d:30:1a:3e:2f:b9:
a8:f4:ab:e0:ad:ba:df:c9:86:72:aa:0c:89:87:f6:
68:94:a8:fe:7f:e1:17:03:06:bf:eb:cf:cb:43:83:
39:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5A:22:6B:29:E4:EB:D8:19:89:C4:BF:FA:54:99:01:E4:00:05:8A
X509v3 Authority Key Identifier:
keyid:41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:bf:27:9c:65:d1:14:0d:56:30:bf:b3:49:28:94:a8:05:da:
97:aa:a8:f8:0b:91:cc:39:c4:e9:37:b7:2f:58:7f:42:26:5a:
cb:7e:73:58:59:00:41:8e:02:ed:dd:9e:d8:83:63:cb:bf:79:
e5:5c:4c:64:80:eb:89:d7:ac:ac:fc:3d:7c:2d:6d:51:bb:64:
a0:f8:a9:0b:10:97:43:13:f1:0b:7e:29:ac:1b:1b:d7:33:c3:
fc:1c:69:6a:3b:50:30:b5:bc:88:09:20:c5:bd:49:88:65:93:
0c:64:41:35:03:0c:1e:8d:4f:ba:24:05:c7:a8:0a:65:c5:39:
85:d4:75:fb:4a:4e:fa:28:5b:cd:f8:91:29:c2:19:71:39:97:
94:a7:22:be:8c:4e:72:37:7d:ed:6e:e5:22:bb:bd:cc:08:a2:
30:47:5e:1f:c3:e7:f2:f2:4f:2e:a2:8e:2f:72:f2:dd:55:f1:
4e:fb:63:b0:f2:c3:e7:88:b6:b7:93:fb:3e:d1:35:15:8c:3c:
fd:a8:f8:98:21:ff:7b:b3:34:f5:3f:4d:8e:af:73:cd:f6:a5:
7e:82:0b:06:77:23:6e:17:f9:ff:13:4c:c9:d7:e9:ed:10:dd:
3f:00:4d:49:d6:72:c3:b2:e1:94:ab:f0:2c:67:08:35:88:75:
1d:d2:d4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:51:39 2026 by rpki-client