Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
File: QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft (raw, json)
Hash identifier: +z4EYwz0mNszgVO5xnrbCHoP/jCHVV8jEJdGjpbqOCw=
Subject key identifier: 0B:ED:85:2D:23:56:2A:A6:2F:39:29:86:3C:7D:B7:8B:A5:81:12:6C
Authority key identifier: 40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A
Certificate issuer: /CN=40339d304499d069aecd8bd0e8fba02e522f576a
Certificate serial: 01A1062553646361FB956D1AF7963EFD3A97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
Manifest number: 1A1B
Signing time: Sun 04 Oct 2026 09:01:11 +0000
Manifest this update: Sun 04 Oct 2026 09:01:11 +0000
Manifest next update: Mon 05 Oct 2026 09:01:11 +0000
Files and hashes: 1: GzdfLu-BksDJwE9pfcgaIEcBTJs.roa (hash: 0uOTjDCwE9CC6NlLuvwra/kx1v02mWMFwmjFQbmGkMM=)
2: QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl (hash: XwsHC3mg6QhZKn/Fd8x+ztvkGBjnU7jX22Jthz65X+g=)
3: ZRhUKW2L993xH1vo8_JfQDNvL-4.roa (hash: dqDDWP+wPoSkNiw6G5+CgUtA2olvFu/u/K+P7q4Sxgc=)
4: u1MF5XqndvG5UGN3sAIiEMCwAmM.roa (hash: 09WdJsC0RyyomkwiBQQyeEsIZCuoxjnDogc7nlWYUzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 09:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:25:53:64:63:61:fb:95:6d:1a:f7:96:3e:fd:3a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40339d304499d069aecd8bd0e8fba02e522f576a
Validity
Not Before: Oct 4 09:01:11 2026 GMT
Not After : Oct 5 09:01:11 2026 GMT
Subject: CN=0bed852d23562aa62f3929863c7db78ba581126c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:83:1b:d9:a4:e1:65:0f:5b:06:94:a1:2a:a4:
23:29:06:fb:5b:84:68:7c:c4:cd:6b:21:dc:3f:08:
26:18:e0:c1:79:15:3e:64:bb:52:04:2c:34:a2:d1:
3c:97:50:48:1c:49:97:a2:7d:9f:7f:2a:cd:75:0b:
f3:e8:6f:93:53:6a:9c:59:ad:49:a9:08:e1:2e:b4:
1e:91:10:19:23:6a:af:20:ad:6f:5f:a0:36:94:9d:
8a:3b:bc:da:41:c1:8e:84:e2:97:36:5e:2b:53:c2:
a1:ca:01:a0:ce:07:56:c7:ce:34:16:fa:89:28:39:
fa:cc:de:71:a6:e2:f2:bc:ab:1a:58:0a:68:dd:bb:
ab:75:7b:71:b1:4a:fc:67:ad:66:5d:9d:23:25:e1:
64:1d:e3:9a:ee:8a:ae:9b:9e:42:8c:6b:f0:f7:78:
64:2c:77:dd:30:68:30:61:d9:7b:31:e4:d1:d5:05:
c6:f7:38:61:8a:5a:d0:65:47:10:75:fe:53:d6:eb:
95:22:ee:9d:99:c3:f1:30:1d:59:d4:81:87:7e:f3:
a4:5a:60:02:2a:66:81:f3:98:75:b5:6b:8f:ec:5b:
4f:b3:8b:7e:a2:ab:88:15:d0:22:1a:89:b7:83:3c:
89:55:10:df:c0:4c:b9:10:b2:cd:03:fb:63:cd:4f:
65:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:ED:85:2D:23:56:2A:A6:2F:39:29:86:3C:7D:B7:8B:A5:81:12:6C
X509v3 Authority Key Identifier:
keyid:40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:6a:ac:80:ce:b1:ed:48:8c:21:e4:82:d3:c9:cc:0a:bf:e4:
73:04:6c:f9:08:5e:f9:f2:e0:56:60:9c:33:12:59:89:aa:20:
dd:18:27:c5:3a:16:6f:0a:75:6d:44:ca:0c:b2:d1:e7:9b:1c:
63:4c:98:2b:8a:75:cb:d2:fc:9d:b7:42:97:e6:bf:f3:bb:34:
ea:c5:79:35:6b:54:7d:58:49:bb:75:90:b1:18:0c:b1:fc:e0:
ef:2c:15:de:ea:4a:4c:27:48:60:78:fc:d2:65:e5:d1:22:8d:
24:e1:2f:54:97:56:ec:3e:27:fd:eb:1f:4c:0e:13:4f:9b:12:
84:29:64:15:b7:ac:ec:28:50:e7:55:22:5c:83:7c:32:1c:e3:
1e:db:76:4b:ed:c2:72:2d:e8:73:67:72:5b:b6:f9:0e:40:71:
42:9a:67:ee:bd:06:76:bf:04:8f:24:c7:af:df:03:bd:13:a4:
bd:a1:14:c2:50:3a:9e:c1:17:eb:8d:3b:07:97:49:a2:0b:75:
3b:6a:84:b6:50:a1:3f:49:f1:fe:a0:30:2d:1c:0a:93:c3:2e:
f7:b0:19:d3:f5:61:35:04:11:dc:c8:df:04:8b:2f:64:f6:82:
91:2e:1c:ea:31:54:ec:ad:df:1e:63:2c:37:40:89:3f:c4:56:
76:ca:50:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:30:37 2026 by rpki-client