Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/d6e721-c47e-4869-adc1-13cb308f66a3/1/QdOwOPqgIOZecYN6sLNPJO4MGts.mft
File: QdOwOPqgIOZecYN6sLNPJO4MGts.mft (raw, json)
Hash identifier: g1HyDMQiCNEWsoNYZ+I3oM5PBtbH6KBinGBmIkIwzfw=
Subject key identifier: B7:F9:F0:B8:8C:C6:6D:67:C1:AF:8D:88:3B:2D:8A:67:52:46:0F:AC
Authority key identifier: 41:D3:B0:38:FA:A0:20:E6:5E:71:83:7A:B0:B3:4F:24:EE:0C:1A:DB
Certificate issuer: /CN=41d3b038faa020e65e71837ab0b34f24ee0c1adb
Certificate serial: 01A1DD5DC8D0CC5614A048F2694EFAE7215D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdOwOPqgIOZecYN6sLNPJO4MGts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/d6e721-c47e-4869-adc1-13cb308f66a3/1/QdOwOPqgIOZecYN6sLNPJO4MGts.mft
Manifest number: 0100
Signing time: Sun 15 Nov 2026 04:01:13 +0000
Manifest this update: Sun 15 Nov 2026 04:01:13 +0000
Manifest next update: Mon 16 Nov 2026 04:01:13 +0000
Files and hashes: 1: QdOwOPqgIOZecYN6sLNPJO4MGts.crl (hash: E0WY5rEFyLvoxePilUgDpp8wCa7WPrR5Yh3n4mc+SBg=)
2: mp-kMehzKbZ_4_cJaT3jQ7ea48w.asa (hash: PGFPXnulymF6YHYnVqa96gKPKQEJNoqnCsiT+4eIKNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/d6e721-c47e-4869-adc1-13cb308f66a3/1/QdOwOPqgIOZecYN6sLNPJO4MGts.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/d6e721-c47e-4869-adc1-13cb308f66a3/1/QdOwOPqgIOZecYN6sLNPJO4MGts.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdOwOPqgIOZecYN6sLNPJO4MGts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:5d:c8:d0:cc:56:14:a0:48:f2:69:4e:fa:e7:21:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d3b038faa020e65e71837ab0b34f24ee0c1adb
Validity
Not Before: Nov 15 04:01:13 2026 GMT
Not After : Nov 16 04:01:13 2026 GMT
Subject: CN=b7f9f0b88cc66d67c1af8d883b2d8a6752460fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:30:e4:67:6c:06:a5:91:84:f4:10:3e:bd:71:
12:51:d1:aa:2b:44:c2:a1:74:6c:54:53:de:35:5a:
43:2e:f6:90:cc:8b:9b:3f:9a:b9:ca:e6:f2:52:0a:
f7:9b:9f:68:0b:bc:ea:a7:c9:dd:46:96:f7:e3:a2:
7c:84:6e:ad:37:0a:46:83:66:ac:7c:89:12:9b:74:
dc:48:1d:8b:fb:94:62:e6:38:1f:66:50:97:2e:d6:
d7:9a:8c:c3:10:f9:43:55:3a:c3:df:cf:7e:d5:52:
db:cb:c2:38:82:2a:8e:7e:09:2f:e5:59:bb:6b:40:
5f:d5:eb:72:0b:58:65:85:2c:9e:88:5e:65:5e:0d:
2b:5f:52:cb:9b:13:d8:29:52:49:1c:8d:54:01:9a:
d6:10:d9:3a:34:06:1b:56:ae:1b:f2:bc:dd:2f:0a:
c7:7d:5a:67:d3:ea:da:82:e1:47:a5:8e:da:a4:b8:
5a:e2:f8:94:bf:11:8e:2b:df:bb:4f:c5:1a:b4:c8:
ff:3b:7d:6a:13:93:b0:70:cc:53:c1:e0:44:dd:3e:
b8:12:85:a6:c6:03:b1:d3:27:2d:c0:3f:80:e0:da:
54:60:4f:dc:f3:55:b2:83:f1:d0:29:f6:9c:d0:2c:
20:a1:40:ec:b7:87:bd:64:21:15:48:f8:bd:14:a5:
f9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F9:F0:B8:8C:C6:6D:67:C1:AF:8D:88:3B:2D:8A:67:52:46:0F:AC
X509v3 Authority Key Identifier:
keyid:41:D3:B0:38:FA:A0:20:E6:5E:71:83:7A:B0:B3:4F:24:EE:0C:1A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdOwOPqgIOZecYN6sLNPJO4MGts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d6e721-c47e-4869-adc1-13cb308f66a3/1/QdOwOPqgIOZecYN6sLNPJO4MGts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d6e721-c47e-4869-adc1-13cb308f66a3/1/QdOwOPqgIOZecYN6sLNPJO4MGts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:21:85:99:a3:12:6f:7b:89:df:cb:e2:00:ae:4c:0b:81:53:
17:3b:5c:65:8a:40:7c:0b:80:69:e5:7d:42:7f:e7:73:79:17:
01:a1:81:48:3f:1f:87:f6:f9:ef:e6:f0:36:4d:4b:62:1b:d2:
50:26:3d:c5:4e:ef:f0:97:f0:c1:e5:4c:fb:2c:d9:6f:7a:ff:
c7:a7:6e:6e:1a:18:0b:a0:75:b0:30:a8:e8:bd:0a:6e:7c:22:
4c:28:95:4c:4a:41:1f:4f:69:1a:76:b2:cd:49:6c:c3:aa:ca:
8c:c2:ad:d4:c1:7f:56:45:fa:1c:44:be:91:2c:04:32:37:1c:
ca:fa:3e:2d:da:8f:11:72:51:cf:4d:40:fa:fa:86:4f:a8:84:
a5:cb:35:82:28:3d:bc:b5:83:f8:31:e0:a7:95:fb:98:8f:06:
6a:d6:36:71:37:95:b6:48:53:d0:66:3d:1d:3c:30:0c:16:38:
6f:d4:7b:59:c9:52:fb:22:4d:c6:a8:64:99:5f:d0:10:5a:31:
a1:2c:a3:6a:c9:f1:b4:20:0a:68:ec:ed:e7:71:12:a1:71:f2:
a0:b5:b3:28:8b:b1:64:ce:1e:37:26:0e:93:61:e9:75:2a:b7:
b8:b5:3a:39:ae:ac:e9:63:be:23:ce:69:10:86:5c:4d:5e:52:
f4:53:49:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:31:41 2026 by rpki-client