Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
File: QHznj0rDupAqDDjcAaDF8hJlGbA.mft (raw, json)
Hash identifier: 4bjg7d+6gsXBz8LrlU4D3ZbIceMqGxKXdSixu2U7HNE=
Subject key identifier: BC:59:C6:44:21:8B:E1:75:DE:6E:2A:DE:90:0B:9E:B4:6E:2A:E1:A2
Authority key identifier: 40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0
Certificate issuer: /CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0
Certificate serial: 01A0D91742A4E5B3E548254D933ECC7AE680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
Manifest number: 0EDE
Signing time: Fri 25 Sep 2026 15:02:55 +0000
Manifest this update: Fri 25 Sep 2026 15:02:55 +0000
Manifest next update: Sat 26 Sep 2026 15:02:55 +0000
Files and hashes: 1: QHznj0rDupAqDDjcAaDF8hJlGbA.crl (hash: bOzzt1AbYrGaQu4+irLmMYCwh5Krjap3Ps9bQCbK0zc=)
2: UKN4qXdB5emZZX9TzM0PF4jJuRs.roa (hash: Y842Sm+wv4FkMHDbdNeBmo19SEMhJtIByCHRBpFd6qo=)
3: qOyavHaQUzWIgFJKhwDzN8qp-NU.roa (hash: 6+GcU7ai/o4JeNdvfA796blKNzslNJ8s8dxyOTcoPxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:17:42:a4:e5:b3:e5:48:25:4d:93:3e:cc:7a:e6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0
Validity
Not Before: Sep 25 15:02:55 2026 GMT
Not After : Sep 26 15:02:55 2026 GMT
Subject: CN=bc59c644218be175de6e2ade900b9eb46e2ae1a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4c:3f:f5:4a:5d:5c:1d:6f:ad:b3:9e:e6:b2:
29:9e:96:d8:e7:93:0c:01:b6:bd:5f:6e:15:a4:05:
db:17:3a:4f:8b:0c:73:1a:ae:4c:de:b9:66:87:16:
ce:3b:af:cb:e9:2d:4a:f0:08:00:10:3d:ed:af:e8:
2a:ae:65:96:fe:74:80:85:99:95:c1:30:81:af:75:
57:e7:67:19:6c:6b:b8:fe:0b:b4:c1:5b:14:b6:bc:
93:4d:9c:78:51:74:91:90:10:8a:9a:9b:10:98:0e:
c5:73:8c:ef:5a:d2:f7:69:38:7d:dd:f0:29:22:23:
0f:6a:03:85:d5:9f:5c:8e:7a:ee:cc:76:45:3d:5c:
fc:66:34:09:e3:44:03:d2:22:3b:4d:2b:ce:96:5d:
3a:27:80:25:fa:44:d1:a8:51:aa:42:04:eb:02:d8:
56:04:93:8e:e6:12:19:0d:49:8b:88:79:f8:c9:eb:
f5:6a:d2:0c:30:67:ad:72:6b:7f:da:ca:17:a0:0f:
07:0a:45:f4:e1:fd:b8:de:ca:9f:b7:91:7b:61:fd:
57:31:3c:14:0a:e3:d1:b9:e0:cf:27:1a:22:19:02:
09:b6:6e:08:8e:b2:80:64:6e:b7:0c:4e:d7:f6:36:
3d:8b:29:39:0c:06:fa:88:87:c6:77:82:7b:94:29:
37:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:59:C6:44:21:8B:E1:75:DE:6E:2A:DE:90:0B:9E:B4:6E:2A:E1:A2
X509v3 Authority Key Identifier:
keyid:40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ea:ac:24:1f:b7:c7:df:0b:5f:2a:73:43:eb:d0:10:3a:0b:
38:5f:21:cd:f7:31:f3:88:36:13:2a:af:ff:61:e0:d4:d4:2f:
8e:e3:75:de:b1:1b:6b:03:a3:82:03:c8:e2:29:8a:97:b2:34:
ff:38:de:61:0b:c9:0a:69:96:6a:f6:8c:7c:4c:b7:60:c1:84:
0d:6c:a0:e6:13:2f:e2:6e:1a:7c:90:ff:6f:ed:73:bf:91:23:
26:f0:82:43:0f:db:c1:8f:0f:b6:59:3e:67:29:e6:50:6b:d0:
f3:67:ff:70:e1:ed:c4:6f:40:0e:b5:c0:58:00:18:a4:c9:a5:
fb:14:fc:99:98:c5:d1:93:6e:14:be:d1:bb:9f:f9:b6:7b:87:
ed:98:75:47:6c:52:fe:ec:ee:02:a5:74:ac:8a:84:54:a5:49:
e9:ad:59:57:24:1f:5b:ef:5d:cd:c5:61:ea:51:66:fa:e8:06:
28:79:c6:d7:96:c7:48:3e:b6:b1:9d:49:f7:4f:6d:3f:29:70:
20:73:e1:f0:aa:07:c7:32:5c:f2:ea:66:f2:f1:d7:f2:6e:4f:
4a:b0:de:2b:65:ae:c0:66:7b:73:75:74:10:25:30:10:4d:34:
ed:ec:18:16:b6:81:a1:3c:f5:25:df:54:85:06:7d:d9:ec:c9:
b3:6b:06:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:24:42 2026 by rpki-client