Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
File: QcjQJBEIsB9etwj-i7uEfVOjDxY.mft (raw, json)
Hash identifier: m3Wn5LLRC/PrJK6euNyom4cyL+9XDCDGUmxi6l3kSTQ=
Subject key identifier: 8F:4F:79:7F:50:53:7E:E6:C4:66:03:D3:9B:1C:DE:6B:62:C2:22:AF
Authority key identifier: 41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
Certificate issuer: /CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Certificate serial: 01A105EE4036746783DD338B8B06AF1F5D52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
Manifest number: 1A86
Signing time: Sun 04 Oct 2026 08:01:02 +0000
Manifest this update: Sun 04 Oct 2026 08:01:02 +0000
Manifest next update: Mon 05 Oct 2026 08:01:02 +0000
Files and hashes: 1: ALRri6kgiQCaJnYBd8e-iNH8nUk.roa (hash: bRi9PCHK9wO56WGyzaQUXDtECAlJgx3ISDb8+1dq0Jk=)
2: QcjQJBEIsB9etwj-i7uEfVOjDxY.crl (hash: WvgXq6QLC8iiHVJh8i5H+vH+km917UB/qpaGzB+h0xA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:ee:40:36:74:67:83:dd:33:8b:8b:06:af:1f:5d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Validity
Not Before: Oct 4 08:01:02 2026 GMT
Not After : Oct 5 08:01:02 2026 GMT
Subject: CN=8f4f797f50537ee6c46603d39b1cde6b62c222af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6b:17:1e:ee:b8:6c:1f:6a:31:a9:9d:a7:93:
42:bd:09:90:dd:24:4c:5c:b7:db:54:3d:d6:8d:10:
ed:d4:8c:8a:a4:82:ff:06:e1:bf:4b:74:3d:e8:a8:
26:68:43:42:3a:d1:22:73:42:04:14:9a:22:12:eb:
c8:7f:fc:cf:78:3f:05:9b:96:7e:93:c8:9d:03:b9:
ab:80:56:34:cd:c9:cd:bf:82:b2:39:e3:d9:2b:dd:
0d:11:b0:a5:50:d4:e9:4c:ef:c9:d9:30:63:9d:46:
12:75:ef:af:b3:d3:dd:6d:85:82:eb:59:25:4b:0e:
96:c9:5a:e4:a3:bb:c4:7e:33:d5:e7:02:73:ff:66:
e3:78:8b:54:e9:28:d6:d7:61:fd:0c:62:dc:4d:b1:
20:39:e3:6e:15:6b:1f:c8:c2:48:8e:b6:60:60:b0:
30:70:2a:90:e2:ba:70:8a:6e:ec:8a:cc:1c:e1:bd:
4e:67:d5:cb:d6:e5:5d:ab:10:2c:98:ec:2e:f8:82:
d9:d7:00:52:13:d3:d5:90:fa:81:de:84:42:a7:25:
f3:bc:b7:1e:82:d4:4a:c9:3b:d9:98:85:06:70:0d:
12:59:4a:61:a8:f8:36:40:5a:0a:4a:51:1a:79:d1:
75:d0:12:30:7b:0b:6c:c3:a0:9a:0b:03:bf:3b:af:
f5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4F:79:7F:50:53:7E:E6:C4:66:03:D3:9B:1C:DE:6B:62:C2:22:AF
X509v3 Authority Key Identifier:
keyid:41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:62:1d:61:1d:e7:53:a8:1d:76:4a:66:12:68:d8:cf:45:e8:
8b:0c:54:b2:19:89:9e:b1:13:82:fd:91:23:f8:49:bf:f0:6f:
4a:09:f3:0f:e1:a6:48:c7:a8:62:2d:7b:88:8e:a2:12:d9:33:
24:d3:26:71:ba:b0:a1:89:02:21:11:eb:21:05:ed:c1:fe:1e:
42:15:8a:3d:09:16:e5:f8:b2:80:4e:d2:b1:1e:83:58:f8:b0:
46:4a:4a:bf:5a:f1:b4:db:3c:d4:45:6f:d1:66:ce:21:8e:02:
34:96:5b:04:e8:8c:cc:b8:4e:6e:ed:0b:95:7d:58:3d:37:6c:
a9:eb:72:ff:64:47:1c:a0:02:d4:bb:63:32:55:9f:a6:b7:e7:
06:0b:94:41:db:7e:6f:cd:c4:cc:80:07:db:b0:d7:b2:77:19:
5c:d3:1c:36:66:ac:73:fe:ca:1c:52:df:40:02:ce:c2:30:c1:
a8:84:20:6c:ca:6a:91:c4:95:a6:6c:92:aa:1d:17:4d:cd:1d:
59:d5:03:78:3f:a7:31:50:bc:ce:9f:f9:2e:6e:b5:9b:d2:f6:
68:e3:26:a9:3f:a9:c3:36:a2:56:30:85:9c:be:c6:2c:37:99:
ba:93:fb:5b:06:f0:f7:85:34:ee:28:66:5c:c0:7a:88:55:10:
6d:5d:65:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:04:08 2026 by rpki-client