Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
File: QIAlx94EAODzyI1KEioxfjLF4hw.mft (raw, json)
Hash identifier: Hn7bKf6zZk32RlJ+iT/XYAuaoLEJLRqfFW3od8VoSdc=
Subject key identifier: D5:99:31:4D:D1:34:AF:41:F4:5D:B6:85:5A:AB:4E:76:30:81:D5:B2
Authority key identifier: 40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
Certificate issuer: /CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Certificate serial: 01A0DB71E4C2DE9583EC78AE18B97A393F8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
Manifest number: 1A7C
Signing time: Sat 26 Sep 2026 02:01:09 +0000
Manifest this update: Sat 26 Sep 2026 02:01:09 +0000
Manifest next update: Sun 27 Sep 2026 02:01:09 +0000
Files and hashes: 1: AwpzkVc0oTDl0sjoa6-QEqDiUec.roa (hash: x7d6UyA4Hucc8K4+EGGBB/UoxNRtjZ72KYH63IunwOE=)
2: QIAlx94EAODzyI1KEioxfjLF4hw.crl (hash: RRfGSXirK2ySpu8E7N1TZWYmv6VKwWpxknLYt5QTqaQ=)
3: VEGHoxhhHVB-D4aY0Y3_4jbUdyo.roa (hash: oOu25O1lLjcQ94aJO/rE50oCG5Vg7rSdNnxkHyjmobc=)
4: dAYviiIQ0ZH5t51e9Yw2PCGTVhA.roa (hash: YawdemXrdjGI6Mt73jp819mShD2ngjs7tuw/5rjzQBM=)
5: mX2v1E6XLguFnbjaAo9xkuZ_YbU.roa (hash: EsNOl7YE7/jiv9Lddbv0Cg6u3OhdzH3IL5pGXlsPUKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:71:e4:c2:de:95:83:ec:78:ae:18:b9:7a:39:3f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Validity
Not Before: Sep 26 02:01:09 2026 GMT
Not After : Sep 27 02:01:09 2026 GMT
Subject: CN=d599314dd134af41f45db6855aab4e763081d5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ca:8c:eb:71:33:5d:5d:d6:4e:06:57:2a:b7:
cb:ed:b3:ee:96:33:0d:c2:01:4d:56:84:f4:62:6c:
db:8e:42:7e:f3:33:78:7d:03:54:16:96:fa:8c:1a:
71:1c:97:27:42:e9:0b:d0:e5:b8:ae:2d:b5:6c:76:
4c:ed:05:88:57:58:04:d2:a9:c1:1f:a7:dd:d8:56:
be:b2:41:03:0f:36:7c:63:2d:47:f5:17:86:5b:1c:
c8:c8:4c:f9:2f:11:3a:9b:61:66:05:3a:b2:f8:55:
85:7e:21:39:39:ed:da:8b:9a:eb:f6:6a:ab:2e:0a:
1e:15:7f:9f:46:66:09:a3:1e:4f:4d:97:c7:33:bf:
f7:70:b6:b4:64:3c:e4:12:1d:77:b6:8b:25:5d:11:
f7:1c:b6:59:db:c4:a2:91:eb:f2:ad:07:34:55:41:
70:4d:9f:70:52:1f:35:09:51:b1:e5:ae:ec:f8:d8:
cd:06:5f:77:61:4e:de:fc:24:7a:b2:05:c6:f8:cd:
13:96:05:6a:db:25:34:4e:e3:9f:cc:3d:8f:7a:a1:
0e:da:0e:52:e1:2b:2f:69:ba:de:ef:37:7a:91:2e:
fa:36:4f:12:46:d9:2b:52:2f:58:e6:ba:2d:16:1e:
4d:ac:7e:d5:f0:ea:d2:10:c0:0d:92:97:14:29:a4:
c2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:99:31:4D:D1:34:AF:41:F4:5D:B6:85:5A:AB:4E:76:30:81:D5:B2
X509v3 Authority Key Identifier:
keyid:40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:3f:b6:b9:a6:e2:78:d8:3b:fa:5d:c8:85:c6:b7:66:d8:00:
8a:98:c5:2b:5f:21:8a:5a:82:21:4c:81:aa:01:84:54:ab:61:
04:47:71:24:8b:8b:7f:9a:79:06:e3:07:29:b9:5d:3a:0d:77:
3c:e5:08:cd:30:d4:19:7b:6c:28:d7:60:c2:48:c8:0a:18:e0:
ac:f4:a0:e2:3b:1e:52:88:df:d0:b8:dd:20:67:b4:f4:3d:25:
46:0c:2a:94:1a:7c:98:f2:bf:1b:26:4d:c2:16:d7:7f:dc:dd:
ff:60:c9:3a:04:c7:de:eb:12:30:79:d3:dd:7b:e8:16:ba:d0:
08:3e:73:ab:11:ce:e2:56:8b:be:4b:32:e9:bc:b2:23:d4:b6:
ab:71:18:17:66:e6:8c:46:90:b1:37:db:ec:24:ab:93:d5:db:
c8:58:b4:dd:3f:29:ef:3e:44:57:0c:f0:dd:6e:3e:72:c0:47:
8f:a0:ad:47:9f:77:4d:4c:23:d3:96:75:01:00:a9:d7:83:b3:
aa:2a:3c:f9:d3:3d:03:2d:e7:35:34:66:d4:29:fd:24:38:e2:
b9:2d:a2:07:cd:42:7b:f7:58:90:34:68:65:ae:a9:85:1e:98:
f0:39:59:0b:a9:3b:a9:5e:1a:d2:fb:75:5f:b1:03:cb:fd:55:
7c:54:7f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:12:54 2026 by rpki-client