Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft
File: Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft (raw, json)
Hash identifier: /GUMdlB8x4PxAZx4Sxho5mbWTsETQDjrGLBiFgXW0Io=
Subject key identifier: 85:0B:1A:8A:B3:21:B5:A4:F5:70:C0:94:62:DD:E5:3E:1F:3A:25:EB
Authority key identifier: 41:F7:36:70:AC:16:1F:4B:56:67:9C:49:DA:8B:48:9B:60:BF:0B:16
Certificate issuer: /CN=41f73670ac161f4b56679c49da8b489b60bf0b16
Certificate serial: 01A0D3F09D17810E0C40D465703E77AF7D53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft
Manifest number: 18F6
Signing time: Thu 24 Sep 2026 15:02:36 +0000
Manifest this update: Thu 24 Sep 2026 15:02:36 +0000
Manifest next update: Fri 25 Sep 2026 15:02:36 +0000
Files and hashes: 1: 6E7-9daevK2MkkP9J_irNaIbJPM.roa (hash: nqBQWE4qRj5lWqiwp2QfZYIRYl9NsKmCq2MDZGildvE=)
2: Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.crl (hash: Bi5mx/E8E0Y55lThmIJg/mOKL7tIRjJB+mS4iFvnUPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:9d:17:81:0e:0c:40:d4:65:70:3e:77:af:7d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f73670ac161f4b56679c49da8b489b60bf0b16
Validity
Not Before: Sep 24 15:02:36 2026 GMT
Not After : Sep 25 15:02:36 2026 GMT
Subject: CN=850b1a8ab321b5a4f570c09462dde53e1f3a25eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:95:72:c5:e5:d2:bb:fd:12:a2:95:90:63:09:
0b:9a:e9:6f:d5:87:dc:64:b6:23:fb:f9:69:24:e8:
b2:62:b9:e8:43:b5:3d:96:1a:83:98:37:14:92:5b:
fe:6a:c1:73:38:58:da:c7:83:f3:91:13:d8:05:93:
c8:58:36:c1:22:18:aa:af:32:49:06:d5:7d:f7:09:
39:f1:bf:12:20:be:94:a6:1b:86:b1:aa:8a:02:d0:
55:b3:fe:d9:88:11:2f:80:f3:a3:7c:43:ef:e3:b4:
33:bd:79:16:7d:80:15:bf:78:29:73:95:dd:f6:9a:
4e:6c:98:4f:51:5f:e7:5e:87:4a:c1:c8:cb:9a:5a:
bc:89:6a:3c:f9:28:60:71:5e:ff:2a:3e:b6:27:a0:
16:1d:92:b8:80:8f:ec:63:09:2d:1c:c4:31:04:1a:
fc:35:ec:c3:c5:78:08:0e:2d:73:90:01:3a:96:76:
04:bb:d2:4a:65:56:6a:2f:4e:13:1a:2c:52:ad:ae:
46:d2:1f:35:e4:be:52:e7:80:10:0e:cd:1f:01:b2:
5b:5b:0f:72:b6:a1:d0:75:3d:f4:6e:af:68:03:cd:
13:b0:b7:5e:16:0b:59:e8:6a:c4:49:86:0d:96:6d:
05:07:b9:07:7d:de:5d:ce:29:30:b4:97:f0:29:19:
e7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0B:1A:8A:B3:21:B5:A4:F5:70:C0:94:62:DD:E5:3E:1F:3A:25:EB
X509v3 Authority Key Identifier:
keyid:41:F7:36:70:AC:16:1F:4B:56:67:9C:49:DA:8B:48:9B:60:BF:0B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:90:60:4d:9e:9c:77:c0:73:fe:9a:79:c9:04:c4:17:fc:a6:
08:65:21:89:de:e9:23:74:d9:28:b4:ed:78:e6:61:7d:79:09:
29:fc:1b:a5:08:b9:2f:48:54:f3:89:2b:a0:57:5e:b8:fe:a0:
9f:22:18:63:cf:48:6e:a2:0e:d8:eb:d3:b7:71:6c:a8:1e:03:
1a:21:89:46:3a:e4:2f:7a:1b:08:7b:6e:85:d8:5c:b8:2f:76:
5c:28:8a:2f:f2:ec:b2:3e:d9:bf:61:35:fa:30:d5:2f:eb:d8:
c1:dd:a1:76:98:9e:cc:3e:d9:f0:3d:b9:8a:5c:ed:82:0f:a1:
07:82:a6:c9:94:b0:94:f8:06:74:78:ab:45:2f:00:88:ca:a6:
ae:20:4f:77:f5:5b:ad:67:14:a2:49:c8:d7:c1:33:a4:1a:86:
4d:b2:6d:94:99:b5:fd:56:7c:ed:36:86:0d:30:86:1f:32:bc:
3b:aa:f0:ba:e9:01:4c:ed:b2:00:fb:d4:a3:f0:4b:da:3a:f7:
a9:31:5a:5e:0c:6f:11:6f:8b:31:57:0e:4d:fd:f7:b9:ac:db:
3b:26:ab:0f:67:73:1d:16:47:0f:6d:0d:2d:23:aa:27:59:db:
c9:55:96:ec:4b:85:71:a1:a9:e8:5d:3c:63:e3:94:2a:9a:1c:
da:19:b5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:11:16 2026 by rpki-client