Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.mft
File: QfpvoAiYrTXuZ_taWhkQXbbB0es.mft (raw, json)
Hash identifier: Lk9tmBaDtRxEeD9EPLjtaTlJxZbLxAHQmeJiEFnv4TY=
Subject key identifier: 50:0C:FE:1D:6F:6A:54:24:72:B3:EB:32:B3:09:D0:98:39:CF:FD:8D
Authority key identifier: 41:FA:6F:A0:08:98:AD:35:EE:67:FB:5A:5A:19:10:5D:B6:C1:D1:EB
Certificate issuer: /CN=41fa6fa00898ad35ee67fb5a5a19105db6c1d1eb
Certificate serial: 01A0DD29CB4BEAB080BF0057D80D9D9DB70A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfpvoAiYrTXuZ_taWhkQXbbB0es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.mft
Manifest number: 025F
Signing time: Sat 26 Sep 2026 10:01:38 +0000
Manifest this update: Sat 26 Sep 2026 10:01:38 +0000
Manifest next update: Sun 27 Sep 2026 10:01:38 +0000
Files and hashes: 1: QfpvoAiYrTXuZ_taWhkQXbbB0es.crl (hash: VMlA+ze+70GASzzPQVp/7I4wnFPWUaOeCM2++TltnNE=)
2: tUgLrvuas3A8ffagzPey3XzQQXM.roa (hash: nldIcz0O0+/Bm3m2OMxGodFkGt2Ggg8SRrnW6hRBtug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfpvoAiYrTXuZ_taWhkQXbbB0es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 10:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:29:cb:4b:ea:b0:80:bf:00:57:d8:0d:9d:9d:b7:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fa6fa00898ad35ee67fb5a5a19105db6c1d1eb
Validity
Not Before: Sep 26 10:01:38 2026 GMT
Not After : Sep 27 10:01:38 2026 GMT
Subject: CN=500cfe1d6f6a542472b3eb32b309d09839cffd8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1b:ee:14:36:85:27:0b:a4:bb:54:da:c6:c9:
a5:bd:b8:86:75:21:99:b0:f2:3a:c2:48:16:a9:6c:
44:a2:44:4a:3e:7c:c8:19:c2:68:05:5e:35:0a:37:
bf:95:9a:e8:11:1b:69:ef:53:d9:65:31:83:a8:83:
79:b5:d2:73:db:41:b4:fd:ff:f3:b6:43:34:8f:11:
90:5c:be:5d:fb:3b:51:ef:32:0b:e0:1e:f8:8d:ce:
11:bf:70:24:9c:ca:70:85:14:2f:22:f8:ed:2a:ff:
bb:fa:b7:4d:be:1c:e9:c5:b0:37:5a:74:d8:bd:ae:
47:d0:5d:c4:7a:67:43:5d:d3:5b:e3:8c:62:9b:14:
48:6c:12:4e:22:4f:36:e3:78:b2:d5:48:d4:bc:5e:
ba:17:f7:5e:4f:b1:eb:2f:49:1f:14:bc:f2:8e:d8:
44:97:d4:4a:58:ba:58:51:5a:bd:18:ae:af:7c:bb:
29:12:16:a4:3c:68:89:6d:b6:02:3a:57:3e:a9:9d:
95:bf:23:36:bb:e7:d3:78:96:60:f1:71:6f:78:d1:
ec:1a:50:7b:b3:f9:76:7d:fc:2f:b8:f7:5c:61:6c:
3c:eb:9d:6d:22:98:16:c8:cc:14:19:26:7c:94:28:
cc:db:91:d0:1d:52:9e:74:a5:90:06:dd:ec:aa:5a:
a6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:0C:FE:1D:6F:6A:54:24:72:B3:EB:32:B3:09:D0:98:39:CF:FD:8D
X509v3 Authority Key Identifier:
keyid:41:FA:6F:A0:08:98:AD:35:EE:67:FB:5A:5A:19:10:5D:B6:C1:D1:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfpvoAiYrTXuZ_taWhkQXbbB0es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:02:61:29:24:c0:0b:17:5b:9e:43:31:8c:5b:c9:f8:9b:42:
3e:07:c4:2f:91:b3:52:70:b9:d9:cf:eb:05:9a:7f:3b:86:f1:
cf:99:85:57:13:3d:9b:ad:3c:4a:59:1b:ee:74:40:3e:d4:4c:
2d:55:40:58:82:f2:79:34:4d:9d:1e:a4:c3:79:4a:0d:5a:21:
bc:71:a0:cc:a4:3c:f3:08:60:39:41:63:44:ae:09:7d:a2:59:
f0:0d:79:81:8b:08:dc:19:1c:a0:2d:fc:b0:72:7e:3a:09:eb:
e3:07:a0:b8:da:48:4e:5a:65:d2:d7:53:c1:6d:1f:2b:37:d4:
12:74:26:8a:8b:7f:9d:ff:5e:84:d3:e6:10:84:92:03:f7:dc:
92:f4:e0:c2:21:a1:46:3e:bb:7b:40:f8:e9:d4:9e:5d:6d:c3:
db:b7:48:66:b8:f3:d3:45:f6:1d:01:43:57:ae:92:db:9a:f7:
91:47:83:69:13:d7:34:c4:f2:89:74:66:24:2d:d0:29:dd:95:
9c:d0:16:4d:82:3c:ed:e9:2e:7c:ae:68:e9:d9:4a:3c:68:3a:
db:ee:56:31:f5:27:04:7c:4b:6f:21:1e:f8:e1:c0:d0:ae:d4:
67:8c:cb:a8:72:7f:7a:d1:2c:af:1f:2c:4f:c9:a2:70:8f:86:
96:8e:79:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:33:58 2026 by rpki-client