Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/d6e721-c47e-4869-adc1-13cb308f66a3/1/QdOwOPqgIOZecYN6sLNPJO4MGts.mft
File: QdOwOPqgIOZecYN6sLNPJO4MGts.mft (raw, json)
Hash identifier: Qce8cho9MuVoEuhtz3+EKwPfDOOX4kZFHt31iN7zPYk=
Subject key identifier: BF:71:5C:B3:3D:B5:B5:ED:42:26:A9:C6:D8:CD:B8:6B:09:40:B2:21
Authority key identifier: 41:D3:B0:38:FA:A0:20:E6:5E:71:83:7A:B0:B3:4F:24:EE:0C:1A:DB
Certificate issuer: /CN=41d3b038faa020e65e71837ab0b34f24ee0c1adb
Certificate serial: 01A0D2A61F4280EE7FD4BC73F53873A35C3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdOwOPqgIOZecYN6sLNPJO4MGts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/d6e721-c47e-4869-adc1-13cb308f66a3/1/QdOwOPqgIOZecYN6sLNPJO4MGts.mft
Manifest number: 75
Signing time: Thu 24 Sep 2026 09:01:37 +0000
Manifest this update: Thu 24 Sep 2026 09:01:37 +0000
Manifest next update: Fri 25 Sep 2026 09:01:37 +0000
Files and hashes: 1: 0PYj6M6nRs80PGa_n3IppzJD-2Q.asa (hash: qQd/vrO+5CDXir2IL3bvHvBXxqq6ploQiA7O3KLv7+I=)
2: QdOwOPqgIOZecYN6sLNPJO4MGts.crl (hash: iOZpAp3eGk8KUsjAaXGtZHrvSHrIhCoIe3gGy+YXwFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/d6e721-c47e-4869-adc1-13cb308f66a3/1/QdOwOPqgIOZecYN6sLNPJO4MGts.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/d6e721-c47e-4869-adc1-13cb308f66a3/1/QdOwOPqgIOZecYN6sLNPJO4MGts.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdOwOPqgIOZecYN6sLNPJO4MGts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a6:1f:42:80:ee:7f:d4:bc:73:f5:38:73:a3:5c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d3b038faa020e65e71837ab0b34f24ee0c1adb
Validity
Not Before: Sep 24 09:01:37 2026 GMT
Not After : Sep 25 09:01:37 2026 GMT
Subject: CN=bf715cb33db5b5ed4226a9c6d8cdb86b0940b221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b5:27:4f:5b:9b:fa:13:11:44:55:4e:ea:8d:
d1:f1:a6:28:92:c7:85:28:13:97:b5:71:f2:3e:a0:
cc:e9:cf:71:ed:51:c4:1e:4f:25:e1:a9:be:3e:4c:
f7:a7:18:93:85:6f:e5:27:ac:fe:d0:3c:79:1f:2c:
c9:90:13:93:cf:e9:32:59:24:52:a5:ac:ef:db:8a:
ff:7d:3a:74:24:1c:37:62:ab:24:7f:0f:6d:55:01:
38:fc:1c:c6:57:22:32:0d:b1:a9:2e:b4:67:88:08:
70:44:63:c0:be:6d:9e:08:12:b6:3f:5d:66:b9:00:
83:0f:da:e6:89:a6:a5:35:b4:51:e8:2b:e3:d0:23:
aa:1f:74:c3:64:4d:5f:fc:df:4b:2b:fe:3e:f7:ba:
e4:82:d8:84:a3:5d:85:d3:f2:e1:9a:20:42:7e:04:
d0:03:00:7b:98:5a:51:99:38:97:63:42:d5:57:fc:
f1:b2:86:11:4b:6f:d9:7f:5b:a9:9c:ed:4d:8e:b6:
97:23:95:1e:6f:57:2c:ea:65:ab:f0:ed:6f:f9:84:
84:78:ea:c9:6b:13:2b:cb:c5:5a:8f:62:92:12:17:
50:d2:98:f2:e8:5b:95:48:95:73:e0:03:94:c3:46:
e7:15:1f:37:92:01:62:a7:ac:24:ec:04:ac:e2:d4:
4d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:71:5C:B3:3D:B5:B5:ED:42:26:A9:C6:D8:CD:B8:6B:09:40:B2:21
X509v3 Authority Key Identifier:
keyid:41:D3:B0:38:FA:A0:20:E6:5E:71:83:7A:B0:B3:4F:24:EE:0C:1A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdOwOPqgIOZecYN6sLNPJO4MGts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d6e721-c47e-4869-adc1-13cb308f66a3/1/QdOwOPqgIOZecYN6sLNPJO4MGts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d6e721-c47e-4869-adc1-13cb308f66a3/1/QdOwOPqgIOZecYN6sLNPJO4MGts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ec:ef:7d:ee:3b:16:d9:09:ec:69:48:76:19:08:d1:8e:4b:2d:
25:cf:b1:77:8d:e9:b7:72:1d:87:f6:4a:78:57:6c:48:57:20:
60:5d:f4:5c:c5:aa:d0:f8:1b:66:2a:6f:6d:f8:fc:15:e1:ac:
f1:5a:6b:68:ea:5c:e3:9b:bf:d0:77:4d:bd:89:44:df:a2:47:
d7:bb:95:b2:c8:97:47:cb:c7:3f:e6:44:93:88:9e:21:f3:13:
47:ea:3c:40:40:18:23:6e:67:de:02:01:1d:e7:db:82:e9:69:
05:58:5d:cd:2a:76:f4:af:18:d4:7c:22:40:00:0b:68:ba:45:
79:d3:b1:51:54:e2:85:91:4a:d9:a3:5f:b5:44:82:03:56:f3:
e5:13:ec:75:86:6c:82:9f:87:fc:28:7c:64:5c:df:22:39:4d:
bf:69:01:ec:43:79:ba:e8:b0:2a:93:f8:3f:18:d4:76:a3:b2:
01:99:98:dc:8c:76:a4:01:b2:03:75:48:61:87:d6:6d:e2:ec:
2f:9c:5a:d7:a2:9a:64:9d:40:4f:9d:e5:4c:a4:ed:5a:90:3e:
d0:b6:77:0f:7e:53:1d:71:9d:1c:07:63:3e:ad:9c:11:d4:78:
ab:5b:df:f0:16:c1:c1:20:a2:00:a9:29:6d:60:32:52:31:cf:
0f:5f:b1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:53:47 2026 by rpki-client