Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
File: QRbw6a_zmosZbEg-CF3nnyRtn90.mft (raw, json)
Hash identifier: tY2OuaaYNtv+pzgDYOu1MHQxp7OdMIywRtPISWjR3Q4=
Subject key identifier: 06:D6:71:73:8A:F1:30:46:68:DA:1E:75:77:28:DF:BE:17:1F:CB:6B
Authority key identifier: 41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD
Certificate issuer: /CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
Certificate serial: 01A0E1E2022B0D28BF72925CAA78DC3F0E72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
Manifest number: 100D
Signing time: Sun 27 Sep 2026 08:01:20 +0000
Manifest this update: Sun 27 Sep 2026 08:01:20 +0000
Manifest next update: Mon 28 Sep 2026 08:01:20 +0000
Files and hashes: 1: QRbw6a_zmosZbEg-CF3nnyRtn90.crl (hash: zH3tOxTB+YizNnBgQoF+IxGe/PM5ufAXgHpS0AJDPPw=)
2: kToJrNs3-88YwxrMqnw31g7dxis.roa (hash: 5cHaxNbK49cdprO9q39A2QZDD+NyUY26jCUSJRkU0PQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 08:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:e2:02:2b:0d:28:bf:72:92:5c:aa:78:dc:3f:0e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
Validity
Not Before: Sep 27 08:01:20 2026 GMT
Not After : Sep 28 08:01:20 2026 GMT
Subject: CN=06d671738af1304668da1e757728dfbe171fcb6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:da:be:d5:c5:d8:04:bb:ca:61:97:24:a0:41:
8c:f4:0d:6d:37:d6:e5:39:1e:e9:6d:51:da:9d:12:
59:22:68:4d:27:7d:84:2e:dc:94:1c:35:c8:f9:ca:
eb:b8:65:91:bb:bb:bd:4b:e7:79:0f:ab:f3:fc:97:
a5:c3:88:c1:0a:db:8f:ce:02:64:eb:1b:97:1d:ed:
3c:7a:8e:f3:98:76:60:02:4e:69:9b:3c:0c:b4:99:
fb:3d:b7:83:2c:28:a2:1c:3b:74:d0:18:01:34:0d:
8e:e3:6a:5b:69:08:42:ba:0f:73:bc:7c:c9:96:f8:
28:5e:3a:86:cb:54:e7:9b:3a:fb:d1:47:89:fa:98:
65:b1:92:f2:0a:a9:da:d4:9d:7a:4f:66:c8:63:cf:
5e:cf:55:13:45:b4:da:07:27:09:02:b9:43:59:6e:
da:25:be:7d:a1:df:55:f9:1f:60:75:e9:aa:24:aa:
1a:08:70:50:bc:2d:b7:21:6d:11:80:24:2e:d0:e9:
af:79:a5:93:c8:da:50:93:71:71:5c:ac:d7:c6:6c:
40:a0:f5:ad:8c:b7:9b:ad:3c:be:9c:3c:47:4a:27:
49:d0:41:c5:ac:e9:7e:9d:42:98:ba:eb:08:0a:db:
50:15:61:94:fa:6e:2e:ac:1e:33:7a:9f:ea:6c:61:
70:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D6:71:73:8A:F1:30:46:68:DA:1E:75:77:28:DF:BE:17:1F:CB:6B
X509v3 Authority Key Identifier:
keyid:41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:52:e3:b5:64:f9:83:ec:5d:00:40:be:94:0c:ff:26:de:34:
00:89:39:c3:b9:5d:6f:a0:04:cd:9e:8c:79:19:25:b8:9e:90:
21:ba:e0:8c:60:32:44:a2:76:cb:b5:a1:17:ad:4e:cf:78:1a:
87:4e:a5:82:99:00:82:0f:85:3d:d1:f2:e4:cf:8c:8a:20:20:
45:7c:e6:f1:37:ce:99:5a:bb:6d:21:24:46:6e:0e:6c:0a:77:
59:21:2d:03:41:3c:81:67:73:6a:1b:6f:c7:7d:8a:d2:3b:11:
ad:10:4b:2a:e9:6e:e9:1d:53:b8:6a:ad:10:5b:17:c0:2a:e7:
1b:63:13:2e:ba:28:1a:a3:35:b9:fd:ab:d4:3b:16:04:2e:84:
b1:f0:49:9f:8c:ae:0f:ed:4e:55:5b:ec:4a:1f:17:da:03:5d:
d7:c1:e5:b9:bc:90:76:29:96:cf:79:77:f2:55:2a:5e:70:79:
13:86:82:d8:f4:86:a8:d2:0e:f2:a7:44:66:1f:28:59:d3:29:
8b:be:0b:68:a0:7c:51:39:e2:e6:ec:38:1f:cd:3d:06:35:51:
be:71:8e:01:06:62:d8:ab:31:e0:53:ce:cf:ee:a9:52:12:89:
33:b9:f4:bf:e9:19:d2:cc:18:9a:74:a0:8e:e1:cd:4b:7d:df:
90:0b:05:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:54:58 2026 by rpki-client