Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
File: Qd0c5O65L_U7YziS_UV7AR4RcfE.mft (raw, json)
Hash identifier: Ybo2MpJp0yYIaliETCbOlwbH7VKKYddpfzb7k2P0WCw=
Subject key identifier: 6D:BC:13:39:05:50:9D:9B:4D:B8:C2:5D:A3:A5:F7:CC:A1:C2:A5:66
Authority key identifier: 41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1
Certificate issuer: /CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
Certificate serial: 01A1DF8372AA5B4AB9FAAB27DFF331D25B45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
Manifest number: 09FE
Signing time: Sun 15 Nov 2026 14:01:36 +0000
Manifest this update: Sun 15 Nov 2026 14:01:36 +0000
Manifest next update: Mon 16 Nov 2026 14:01:36 +0000
Files and hashes: 1: 3OkMfbNK7oywxyEduLLpDjtw4pE.roa (hash: L7QwofR/zK4j6up4RavhL5dZloz6sdS+umIJ+YznSC4=)
2: BfXkb3Ul_TeZj4Afd4e_3oJ5s1c.roa (hash: 7KGanpBCj79/3lwELkYNBDfBwHWTdM1LjWtMw6Jbt2E=)
3: Qd0c5O65L_U7YziS_UV7AR4RcfE.crl (hash: vZxNq1tWMQ6lVwjN3YCudNsCm482YM+6spYT/bKvw0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:72:aa:5b:4a:b9:fa:ab:27:df:f3:31:d2:5b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
Validity
Not Before: Nov 15 14:01:36 2026 GMT
Not After : Nov 16 14:01:36 2026 GMT
Subject: CN=6dbc133905509d9b4db8c25da3a5f7cca1c2a566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:16:13:bb:77:14:be:c7:03:ed:32:59:6a:b2:
ec:47:87:69:e7:2c:c6:c8:e4:32:22:4b:2f:a0:d0:
76:7e:54:4e:65:94:ae:66:67:20:f1:92:72:a2:49:
36:fa:08:66:d4:e1:87:9c:77:b0:18:1c:d4:36:0e:
8f:04:0b:e0:6b:4b:b7:ac:f3:68:00:39:4f:4b:3c:
ff:1a:52:e5:58:40:ca:db:de:72:7d:a2:b7:2c:7c:
17:c0:84:f3:51:8b:98:00:a6:06:c0:7f:61:2f:96:
bd:a6:27:80:67:56:25:a4:89:7d:e9:32:82:4e:34:
3f:9e:88:05:6b:16:43:9e:51:81:96:0f:28:d0:a4:
b6:6e:53:e1:69:45:ff:47:a3:7d:0e:e8:5f:8c:14:
dc:cd:22:d5:12:3f:8b:1b:48:dc:41:12:71:db:2f:
bd:49:14:79:23:a5:6d:26:8e:2e:e7:d5:da:00:be:
99:35:74:ff:35:5a:fb:e0:30:c4:f4:a6:8c:27:ad:
6b:c0:18:c9:da:c8:42:e1:b0:06:0d:60:b5:c1:98:
c4:12:91:24:9f:89:da:ec:d1:31:98:8d:77:bf:a2:
c5:6e:ad:ff:23:92:60:3b:e6:50:e4:55:e8:2e:e0:
3a:80:02:aa:0e:23:b6:e5:27:6e:88:c0:e5:a1:a9:
fa:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:BC:13:39:05:50:9D:9B:4D:B8:C2:5D:A3:A5:F7:CC:A1:C2:A5:66
X509v3 Authority Key Identifier:
keyid:41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:22:a8:1a:97:33:7d:e7:d6:b0:81:ab:79:fc:47:36:ce:45:
bc:ca:36:0b:9c:bc:7c:9b:23:2f:04:f5:87:ee:64:df:6e:29:
f9:71:37:c0:a9:14:75:39:c2:66:a8:f5:e9:4c:a3:03:cf:b6:
c5:7b:f7:e6:13:9b:ff:a7:19:6c:26:0c:19:00:9f:33:e3:c0:
6d:fc:9c:23:50:d6:b9:9b:db:22:3f:db:77:7b:ed:bb:37:83:
72:2b:df:37:7f:10:48:9b:19:7d:8a:08:52:f8:bf:81:ed:e2:
5f:a3:6b:dd:0b:ee:41:8c:d5:ff:72:77:18:99:ed:57:4e:cc:
d4:72:55:64:2f:09:51:4d:47:43:e7:84:0b:5b:46:63:11:f0:
c8:5d:6a:9f:61:24:9d:03:c3:75:dc:d0:f3:3a:86:5c:bb:a9:
ae:f8:eb:28:18:ce:b7:66:45:01:f9:24:20:95:b9:ad:62:2e:
35:fb:be:a7:35:14:95:e8:56:98:f2:4e:1b:80:c3:5a:4f:67:
63:d6:d2:07:5a:59:e8:11:19:b5:ca:8a:99:a2:c2:d0:54:24:
00:6d:25:03:4a:71:f5:dd:ab:23:71:68:14:f9:36:6d:f8:0b:
29:21:f3:7e:04:71:e3:4f:2f:fc:12:66:9a:2d:ef:a9:30:ea:
b3:12:7b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:50:31 2026 by rpki-client