Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/QDkoSd3TCx3szH9o1Ipo0IJlqwo.mft
File: QDkoSd3TCx3szH9o1Ipo0IJlqwo.mft (raw, json)
Hash identifier: kj4F4438O14UuFj/fBucJ1Av2Riu/DKg/JPcQZiQ9uU=
Subject key identifier: 23:B9:5C:CF:1C:E1:65:DF:FA:F0:41:9B:7F:76:E0:5D:7A:90:F4:A1
Authority key identifier: 40:39:28:49:DD:D3:0B:1D:EC:CC:7F:68:D4:8A:68:D0:82:65:AB:0A
Certificate issuer: /CN=40392849ddd30b1deccc7f68d48a68d08265ab0a
Certificate serial: 01A0D2014088C4C60D92B133878F1336FEE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDkoSd3TCx3szH9o1Ipo0IJlqwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/QDkoSd3TCx3szH9o1Ipo0IJlqwo.mft
Manifest number: E6
Signing time: Thu 24 Sep 2026 06:01:32 +0000
Manifest this update: Thu 24 Sep 2026 06:01:32 +0000
Manifest next update: Fri 25 Sep 2026 06:01:32 +0000
Files and hashes: 1: JhIdpwixHhL4kNaauNM8xdlIml4.roa (hash: iCB8dbhDO0FjWlHMp0rp4KAWeNAdcDsy/o0K/cauhfI=)
2: QDkoSd3TCx3szH9o1Ipo0IJlqwo.crl (hash: bEOLKP4rULpKLXNM2zZI6xCNKcfDpDZXC6P37/HNME0=)
3: y6s9GE4v73HgJjdNT9WT8fmSBKQ.roa (hash: IQLDH3j421sCsgVzuO3PB/u22oWNjY8m7UXITCQLVuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/QDkoSd3TCx3szH9o1Ipo0IJlqwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/QDkoSd3TCx3szH9o1Ipo0IJlqwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QDkoSd3TCx3szH9o1Ipo0IJlqwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:01:40:88:c4:c6:0d:92:b1:33:87:8f:13:36:fe:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40392849ddd30b1deccc7f68d48a68d08265ab0a
Validity
Not Before: Sep 24 06:01:32 2026 GMT
Not After : Sep 25 06:01:32 2026 GMT
Subject: CN=23b95ccf1ce165dffaf0419b7f76e05d7a90f4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:63:68:5d:fd:65:2d:6c:b8:a6:59:46:6e:2d:
30:21:ba:bb:76:e9:89:3d:b9:ff:71:66:db:7a:75:
22:82:13:9a:9c:c6:db:d4:ec:ae:14:cf:4b:fc:6e:
84:9f:1a:b9:97:01:41:85:ab:f7:79:58:23:b4:89:
c4:89:d6:f0:3f:45:d2:fc:38:0f:a4:c5:d1:df:62:
8d:ba:74:e9:c2:ad:9e:41:f5:ca:a6:58:f1:9f:2c:
1b:1c:17:7a:e4:b4:3c:c5:ba:25:cb:83:7f:e2:d9:
fb:f1:51:8c:68:bd:37:66:72:7d:e9:4c:4a:06:c3:
3e:c0:69:46:b4:b0:a9:02:a0:09:88:23:b0:24:b9:
17:c9:a5:fc:d5:47:6c:b1:dd:54:b3:52:03:5b:bf:
4e:2a:63:75:b7:58:1d:8d:d4:06:34:33:2d:28:ed:
a8:e4:40:60:7d:eb:f6:29:f5:91:e1:f5:9c:f6:45:
fc:a0:be:e2:06:a7:de:81:87:16:c6:58:fc:c3:bb:
6f:7d:e2:64:b4:c1:b1:79:40:a1:50:59:cf:55:ec:
fe:5a:97:60:6a:a5:0b:72:d4:14:84:03:6c:c9:dd:
7f:69:eb:10:d5:f0:db:23:29:90:4c:bc:f2:22:39:
93:32:64:21:1f:da:95:ac:90:e7:e4:1d:0c:d4:3b:
78:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B9:5C:CF:1C:E1:65:DF:FA:F0:41:9B:7F:76:E0:5D:7A:90:F4:A1
X509v3 Authority Key Identifier:
keyid:40:39:28:49:DD:D3:0B:1D:EC:CC:7F:68:D4:8A:68:D0:82:65:AB:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDkoSd3TCx3szH9o1Ipo0IJlqwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/QDkoSd3TCx3szH9o1Ipo0IJlqwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/QDkoSd3TCx3szH9o1Ipo0IJlqwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:9a:f3:c8:b5:62:87:59:55:c4:e1:35:ea:23:d6:c6:39:a1:
f9:00:b5:e2:69:3b:30:84:0c:d2:86:0d:6f:ba:72:27:99:ba:
aa:dd:a0:ac:f6:dc:04:71:c4:ad:f0:a6:09:16:fc:2f:db:e7:
63:9b:df:42:ac:9d:23:54:f3:04:f7:5f:f3:9b:ec:9a:07:b3:
e5:dc:25:44:7a:5d:2a:0a:3d:08:a0:52:7d:54:73:4d:01:76:
f3:da:0f:b4:b4:ff:e9:2d:13:0b:59:71:a7:30:d8:a9:2f:b6:
08:5d:f1:19:96:6e:93:2f:45:af:22:99:45:72:ba:4a:d7:e4:
77:15:a1:d0:0e:bf:3d:c9:7e:b8:47:aa:f1:9b:d7:bf:e3:ba:
11:5c:61:d5:fd:59:18:01:67:d1:d7:67:cf:e4:b9:fa:96:db:
b2:a5:db:57:c2:b7:52:45:71:bf:8b:b7:64:e8:44:2b:0f:8b:
23:47:22:a8:e3:42:66:0a:f2:0e:c3:08:d3:75:cb:5e:f0:f2:
ec:ce:82:6d:bf:66:b1:e4:f3:92:90:5e:2b:b6:aa:f6:df:9e:
09:ce:8a:ae:fa:db:c9:df:71:64:57:be:d8:d0:2e:7f:23:04:
1a:42:12:6c:15:1e:ae:c3:29:bc:76:83:e1:9f:a7:d2:52:7e:
cf:e0:06:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:02:11 2026 by rpki-client