Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
File: QCHf817fDObkKNav_CEsRxdnnuE.mft (raw, json)
Hash identifier: NGCG1xBzensgEG+9UP+NquiaPFm5+NcpdZfUeUPbEkI=
Subject key identifier: 1A:7A:43:EA:4E:E9:FD:3E:35:09:62:E6:86:5D:D7:A7:93:2E:D8:0E
Authority key identifier: 40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
Certificate issuer: /CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Certificate serial: 01A03C3A53D877E197E23B3770DA08187737
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
Manifest number: 1A20
Signing time: Wed 26 Aug 2026 04:00:50 +0000
Manifest this update: Wed 26 Aug 2026 04:00:50 +0000
Manifest next update: Thu 27 Aug 2026 04:00:50 +0000
Files and hashes: 1: 5aiPK-AjdStx2wVba_jLR8yEmJE.asa (hash: 0IErVbdaESGxXE+QIywfXtfH1IshFTMGY+X2vmTVMAE=)
2: QCHf817fDObkKNav_CEsRxdnnuE.crl (hash: AfKdN9AtAwoZjx41w04BIv9Qbsn/mLxZOWqXJC/KpH4=)
3: oH1r4igjZpHu8rKsfXxiqzBUl84.roa (hash: X0wT9e0aq2sCh5h0E8HXfviT92xXoJ7QSCDrREimpr8=)
4: r8t0mnOfuf-XZlUByZSmwxL5C8U.roa (hash: NIHY9VYRcz1i7SUH3PrDl1wZP8mWVi3+Xuf3Zc+uw+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3c:3a:53:d8:77:e1:97:e2:3b:37:70:da:08:18:77:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Validity
Not Before: Aug 26 04:00:50 2026 GMT
Not After : Aug 27 04:00:50 2026 GMT
Subject: CN=1a7a43ea4ee9fd3e350962e6865dd7a7932ed80e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ee:53:a6:a7:26:65:08:47:08:25:e6:ab:cc:
a4:c4:d7:95:fc:b8:e5:37:b9:65:8d:bf:4f:c3:e2:
32:28:3f:e8:51:c3:ab:66:90:39:37:94:ec:69:ab:
e3:05:81:45:66:d9:c7:59:64:5d:18:46:c5:da:39:
b3:ad:82:ac:83:45:98:cd:da:da:16:2b:8f:88:4b:
9f:6c:a5:86:68:fb:87:57:34:55:3b:91:e9:53:60:
91:6e:aa:c8:a8:dc:0d:43:2e:06:2e:36:64:ed:1f:
9c:9b:91:ab:ce:32:32:56:7b:9a:0a:d0:d9:43:89:
32:75:8d:ef:16:75:91:e5:1a:db:83:f7:7a:da:34:
c6:df:50:cb:65:e1:60:3d:e8:ab:d4:3c:13:22:27:
6d:99:d3:57:21:07:ad:f6:06:f0:55:cf:d2:4c:18:
7d:b6:54:cd:25:64:0e:6a:5b:1e:5c:2a:6c:07:9a:
40:29:89:0b:e2:eb:a1:79:d8:00:16:63:24:4d:26:
7e:41:32:e7:0b:c0:5d:1a:38:c5:c0:a2:99:c3:aa:
16:5e:6e:ac:c4:c9:f8:1b:f1:c2:ff:2d:d5:da:cc:
e7:59:26:c2:13:67:93:08:c2:b8:a7:9c:76:e7:e7:
d6:66:26:e0:69:5f:4f:c5:3e:68:ee:79:62:0a:49:
5e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7A:43:EA:4E:E9:FD:3E:35:09:62:E6:86:5D:D7:A7:93:2E:D8:0E
X509v3 Authority Key Identifier:
keyid:40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f9:c5:b1:ee:ec:50:7f:2e:0f:42:c9:27:e9:79:2e:78:74:
9a:e7:2d:66:2c:38:32:fa:ac:68:f6:0b:7f:90:e6:14:eb:f0:
07:56:3a:6b:db:f0:80:48:4c:9a:4a:a2:0e:db:b2:4c:60:6e:
7b:c3:59:66:39:8f:e5:21:f8:8c:6b:39:3e:c1:c9:c3:a8:00:
d8:91:18:ae:86:fc:8a:66:dc:5e:d1:a3:1e:5e:26:62:c2:d5:
82:56:37:03:93:2c:82:1a:7d:ec:22:cc:cf:1b:03:c4:2e:33:
a3:9a:51:cf:a1:a8:38:80:30:cf:5c:dd:c0:06:4a:4e:d0:49:
e7:12:97:22:03:56:71:6d:8b:ac:0c:56:01:46:09:33:4e:f6:
90:74:d6:b2:d6:2c:22:d5:3e:2d:d4:02:3a:b8:84:4b:cb:98:
7c:b2:7f:8f:84:98:aa:ae:72:b2:ce:56:6c:a6:eb:72:ef:7e:
f8:0b:75:31:44:1f:7e:6c:d3:55:8c:ca:a8:69:98:6b:01:ab:
1e:5e:00:a3:0a:a4:d4:84:9f:b4:72:49:0f:ae:de:5d:1d:cc:
9e:49:81:4a:58:c6:9e:5f:32:be:ab:f1:b5:a6:86:e7:f8:0b:
7e:1f:7c:69:c3:9b:67:fa:e1:d6:f8:ac:7e:c2:bf:eb:e8:f1:
a2:c1:97:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 12:22:13 2026 by rpki-client