Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/a7d7b3-74da-4063-871c-5e5c668deec5/1/QkvsoBqR5ElnbCSXkTLqwzGDP1Q.mft
File: QkvsoBqR5ElnbCSXkTLqwzGDP1Q.mft (raw, json)
Hash identifier: e3QsMvmsEaH7qEFOO7sG6apE8iKDNLiumMWsJgqirE0=
Subject key identifier: 47:E0:95:81:FE:74:8C:1E:50:FF:DD:3D:7A:45:40:DE:BB:6A:2E:97
Authority key identifier: 42:4B:EC:A0:1A:91:E4:49:67:6C:24:97:91:32:EA:C3:31:83:3F:54
Certificate issuer: /CN=424beca01a91e449676c24979132eac331833f54
Certificate serial: 01A0D1C9172F2258AE44B1E144D08E64E1B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QkvsoBqR5ElnbCSXkTLqwzGDP1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a7d7b3-74da-4063-871c-5e5c668deec5/1/QkvsoBqR5ElnbCSXkTLqwzGDP1Q.mft
Manifest number: BF
Signing time: Thu 24 Sep 2026 05:00:11 +0000
Manifest this update: Thu 24 Sep 2026 05:00:11 +0000
Manifest next update: Fri 25 Sep 2026 05:00:11 +0000
Files and hashes: 1: QkvsoBqR5ElnbCSXkTLqwzGDP1Q.crl (hash: gmIufb+PKnOk08PlzBwy/0GcgF6bRCEfwf+SNG+/KiE=)
2: de2C8qkGD2C8WyY4VZXQCLj4xeA.roa (hash: Z2unCzdVebpB8G2PHQLt6XCekXAlV21Yon5IAjnmYi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a7d7b3-74da-4063-871c-5e5c668deec5/1/QkvsoBqR5ElnbCSXkTLqwzGDP1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a7d7b3-74da-4063-871c-5e5c668deec5/1/QkvsoBqR5ElnbCSXkTLqwzGDP1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QkvsoBqR5ElnbCSXkTLqwzGDP1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 05:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:17:2f:22:58:ae:44:b1:e1:44:d0:8e:64:e1:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424beca01a91e449676c24979132eac331833f54
Validity
Not Before: Sep 24 05:00:11 2026 GMT
Not After : Sep 25 05:00:11 2026 GMT
Subject: CN=47e09581fe748c1e50ffdd3d7a4540debb6a2e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bf:62:ac:9e:e7:18:29:29:e4:be:8a:9a:05:
a6:4a:fc:a9:fe:82:b8:88:96:e3:09:f8:99:37:42:
a3:fa:b1:3c:4f:cb:ce:05:3e:2c:d8:fc:bf:81:f4:
49:0e:89:6b:bd:ae:62:d7:3d:25:3a:16:f5:2a:06:
4a:9f:ff:58:08:3c:43:32:c5:95:9a:be:4b:d4:ce:
c7:51:ac:ae:29:7d:0f:c3:e5:59:d4:20:62:ae:06:
93:b3:c5:99:f2:a6:80:f8:3a:da:c7:d3:4b:68:b8:
d8:1b:77:fe:b7:54:5d:d6:8e:4d:89:1e:32:ff:d5:
78:40:ad:6b:ff:af:07:fe:93:7f:07:ae:bb:2f:ad:
96:33:8d:4d:91:ca:c0:83:4d:7c:f5:8b:3f:c6:52:
ff:b8:cb:58:bf:f3:f7:5d:06:40:32:9a:67:b4:48:
e5:8c:13:4b:60:55:cf:0a:4e:41:bc:f6:92:e5:f0:
75:f7:68:f6:5a:c9:c2:93:7a:cd:80:f5:79:a7:0a:
d2:41:04:1b:c0:3a:e6:0a:3f:70:67:49:d3:b1:e8:
e0:eb:f4:53:c3:d6:b3:98:6d:19:b3:23:39:8e:79:
42:19:91:17:e9:06:96:86:b8:58:77:b6:1b:1b:3b:
31:e3:7a:c2:81:0d:4d:dc:32:90:19:76:c0:9b:d9:
94:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E0:95:81:FE:74:8C:1E:50:FF:DD:3D:7A:45:40:DE:BB:6A:2E:97
X509v3 Authority Key Identifier:
keyid:42:4B:EC:A0:1A:91:E4:49:67:6C:24:97:91:32:EA:C3:31:83:3F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QkvsoBqR5ElnbCSXkTLqwzGDP1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a7d7b3-74da-4063-871c-5e5c668deec5/1/QkvsoBqR5ElnbCSXkTLqwzGDP1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a7d7b3-74da-4063-871c-5e5c668deec5/1/QkvsoBqR5ElnbCSXkTLqwzGDP1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:09:6a:a2:e8:f5:02:1a:4c:cb:c1:5f:00:90:db:9a:51:41:
a9:95:f7:bb:c4:df:e7:f8:6a:2c:b0:c8:5a:47:27:a3:fb:24:
82:13:d3:f8:f3:a5:58:78:fa:c8:59:76:de:79:2b:40:fd:ec:
6c:3a:d1:ee:ae:b3:a6:47:88:4c:c9:b8:da:7a:16:ca:42:b1:
d5:0a:9d:62:98:6c:fc:4b:83:e5:55:6b:fc:00:c4:a0:12:2f:
ef:3c:3e:20:6e:ca:70:5b:d3:b7:e9:d4:62:1d:2b:a6:f8:aa:
e3:57:53:f8:46:b1:8e:c0:b1:3a:c0:5e:ec:13:d6:b7:c3:85:
70:26:90:7b:ca:7f:f5:15:b9:9c:57:e4:57:95:e2:8c:50:1b:
7b:d8:e6:af:b4:a2:79:95:58:85:cc:95:0e:90:30:78:4a:15:
d9:a7:c2:da:2d:81:76:30:81:a8:1b:a0:b7:c5:3f:ac:64:6b:
50:48:ef:dd:48:61:3c:57:12:42:2f:17:ce:d0:3e:8b:73:05:
a0:55:3e:a4:69:1f:1d:fc:c4:f0:77:3d:ae:74:97:60:ff:19:
4b:3b:59:6c:54:f4:2d:b3:78:4f:90:59:2c:90:35:46:45:25:
67:bb:ac:8b:63:fe:33:70:10:86:c7:7f:34:d8:7b:e5:3b:3a:
04:96:e0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:09:56 2026 by rpki-client