Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
File: QnPDfxOasLj9mBdxtNiMPGF1-aU.mft (raw, json)
Hash identifier: +YR03dD7+AQnCzdJxFh5N2HXZ5YP6ZhkiJEaHFLtHcs=
Subject key identifier: 28:E1:84:C1:E6:4E:C4:C3:1D:51:8E:81:37:9C:A8:53:E1:95:9C:21
Authority key identifier: 42:73:C3:7F:13:9A:B0:B8:FD:98:17:71:B4:D8:8C:3C:61:75:F9:A5
Certificate issuer: /CN=4273c37f139ab0b8fd981771b4d88c3c6175f9a5
Certificate serial: 01A11DF5CB51E0791354530C23A5E86CF3E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnPDfxOasLj9mBdxtNiMPGF1-aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
Manifest number: 0281
Signing time: Fri 09 Oct 2026 00:00:09 +0000
Manifest this update: Fri 09 Oct 2026 00:00:09 +0000
Manifest next update: Sat 10 Oct 2026 00:00:09 +0000
Files and hashes: 1: Lqur6ZAGNL1ulbCAad6HGsiWQyE.roa (hash: bghFI/F9IV8PP3AOsFzer9ecqyhiQ6uXbQxrY4jrXXw=)
2: QnPDfxOasLj9mBdxtNiMPGF1-aU.crl (hash: 4fezWpaJt8XgVGrCpC2a4kD0hasmGO9gziFAQOO0iA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnPDfxOasLj9mBdxtNiMPGF1-aU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 22:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1d:f5:cb:51:e0:79:13:54:53:0c:23:a5:e8:6c:f3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4273c37f139ab0b8fd981771b4d88c3c6175f9a5
Validity
Not Before: Oct 9 00:00:09 2026 GMT
Not After : Oct 10 00:00:09 2026 GMT
Subject: CN=28e184c1e64ec4c31d518e81379ca853e1959c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1c:2f:66:f4:f0:34:1a:81:de:90:18:26:d9:
27:60:e4:aa:ed:fe:a1:1f:c7:31:ce:e5:96:2f:d9:
00:29:b2:a4:52:bc:f2:40:14:69:f4:0a:d3:b5:7a:
f6:62:0a:03:75:5f:eb:d2:3e:76:3e:53:6f:e9:90:
1c:3b:30:ff:4b:1b:9f:92:80:95:88:e3:62:ba:cf:
8f:f2:a2:7c:a0:ab:85:05:7f:2a:f0:02:53:53:7e:
fa:9d:9d:40:ca:91:bf:64:1d:73:d5:96:d3:e4:43:
54:40:77:54:9e:1e:45:59:69:14:d2:f8:50:6b:fc:
96:c2:20:92:8c:3e:0a:c6:20:44:ca:f7:b4:8b:f6:
fe:8d:56:7c:9a:e9:45:54:1f:49:fa:5e:c3:4c:d1:
03:64:a3:30:25:b9:f1:fa:b6:4d:c0:1d:09:dc:0a:
1a:22:62:29:79:30:f0:cb:6b:f3:54:07:09:1c:58:
40:a4:db:3f:d9:a5:ee:3d:02:40:d6:93:78:36:ee:
f0:2b:5e:76:dc:68:b1:cd:01:ac:95:9d:ee:8d:28:
c7:a5:bb:66:de:12:0a:8f:ff:19:07:29:6b:4d:ec:
0b:ed:48:cb:2f:0c:ad:41:a8:a4:bc:a2:c7:9b:9e:
ea:e7:f1:12:da:c8:59:a5:20:17:ee:d7:e7:fb:96:
d5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E1:84:C1:E6:4E:C4:C3:1D:51:8E:81:37:9C:A8:53:E1:95:9C:21
X509v3 Authority Key Identifier:
keyid:42:73:C3:7F:13:9A:B0:B8:FD:98:17:71:B4:D8:8C:3C:61:75:F9:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnPDfxOasLj9mBdxtNiMPGF1-aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:c0:42:27:ae:01:3e:e5:25:b0:82:e1:b1:63:ef:e2:15:9e:
a6:bc:8a:d0:fa:1a:6b:f2:71:fa:bb:59:5f:ed:58:72:9d:68:
52:19:84:11:e1:d8:d3:df:2e:43:38:4f:b7:76:aa:f0:bf:92:
53:d4:e4:1b:b2:f7:e6:47:2c:be:ed:34:d0:66:ea:91:ea:83:
90:14:4d:ed:5e:ba:f1:46:51:3f:4a:a1:66:04:8d:c1:59:3e:
ee:e9:08:4c:79:8d:2f:73:fb:c8:1e:55:d2:b8:cf:1d:d0:20:
a9:d3:10:7d:48:55:27:3c:c4:c7:3e:dd:b2:88:30:63:d9:63:
70:43:68:aa:53:35:e8:25:f1:81:b4:86:53:44:c4:65:0a:e2:
d8:2e:f7:1d:54:2a:4f:7b:50:2e:2a:9a:15:01:f0:55:32:25:
c8:10:54:59:b0:d8:10:6e:d8:1b:16:d8:64:73:d5:f0:ea:35:
86:ca:9c:b7:8a:6b:47:42:4c:46:55:af:c5:93:b4:d5:94:05:
aa:fd:9b:b0:f3:00:3c:4b:52:e2:f6:f4:e8:30:e5:09:76:27:
40:b2:da:fa:e0:47:11:08:44:18:0e:bb:42:40:f5:56:5e:72:
40:bc:8d:9f:af:1d:4a:2f:66:c0:b4:1e:91:10:b4:e0:29:06:
d5:1f:90:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 04:55:32 2026 by rpki-client