Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
File: QdFPKPmNO9zEXhkibx9WFw4xKr8.mft (raw, json)
Hash identifier: UfeS4Wq7Jyjnh7SjrQAdtuL/Cu39Zt3E0L7D3pM6H3k=
Subject key identifier: 32:2E:44:DF:6C:5B:00:59:FA:5D:53:D8:D9:16:71:2F:CF:E7:C4:99
Authority key identifier: 41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF
Certificate issuer: /CN=41d14f28f98d3bdcc45e19226f1f56170e312abf
Certificate serial: 01A0021431BC519D392BE2F387288AD2332B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 21:01:12 +0000
Manifest this update: Fri 14 Aug 2026 21:01:12 +0000
Manifest next update: Sat 15 Aug 2026 21:01:12 +0000
Files and hashes: 1: NuvWFYQk-kiKl2MmMjAPNDb8So4.roa (hash: HNkfwrKS+V0tdXG/bTci5kuusdPPHQbnnFcQ26SERCU=)
2: QdFPKPmNO9zEXhkibx9WFw4xKr8.crl (hash: fuMJzfdpWONsyhCLkEqJNaGKTSkeIxw3+er4nWj9OcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:14:31:bc:51:9d:39:2b:e2:f3:87:28:8a:d2:33:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d14f28f98d3bdcc45e19226f1f56170e312abf
Validity
Not Before: Aug 14 21:01:12 2026 GMT
Not After : Aug 15 21:01:12 2026 GMT
Subject: CN=322e44df6c5b0059fa5d53d8d916712fcfe7c499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3e:ee:19:50:6f:02:ee:9e:09:2e:c6:d3:f1:
ff:67:6b:4c:4a:68:0e:92:7d:10:c3:d5:e1:88:ac:
cd:5c:a0:19:8a:8f:c2:cd:21:67:6b:8c:b1:fb:45:
56:f7:2b:96:e3:0d:49:49:c7:60:9d:fb:cf:f5:8e:
69:7d:1f:66:1c:dd:80:eb:67:46:cc:e1:e4:4c:fe:
dd:84:2d:7e:6c:3f:0b:24:61:d0:64:9d:fd:a6:53:
e0:40:bc:5c:6a:a5:1e:4d:67:b3:d7:ea:83:8a:22:
86:35:0d:32:43:22:71:aa:c2:a5:34:2f:6f:1e:e2:
ec:6f:9c:67:8c:f5:d6:ec:7e:cc:a4:1f:f4:8a:c3:
97:60:4d:39:64:29:c8:95:6f:ef:21:7a:80:e2:c6:
d6:f4:94:9c:08:1d:25:3a:b3:8b:7e:d8:54:73:1c:
e3:46:b2:b8:de:84:a7:71:a5:67:05:fa:9d:8c:8d:
99:ba:5c:36:8c:3b:af:5c:b5:7f:c3:de:8e:b1:a2:
25:d6:35:d2:17:d8:2b:1b:6b:a3:ec:94:df:b6:db:
12:f7:ee:79:a3:95:7b:15:8e:c7:13:ec:34:82:66:
44:eb:ca:d7:29:e9:e4:b8:38:ef:5c:aa:43:89:25:
c3:d8:5b:ef:b7:40:f5:38:74:6c:cf:9b:f4:be:00:
4c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2E:44:DF:6C:5B:00:59:FA:5D:53:D8:D9:16:71:2F:CF:E7:C4:99
X509v3 Authority Key Identifier:
keyid:41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:83:ae:cf:36:7a:b6:be:4e:10:87:1f:c2:86:36:cd:2a:d4:
38:2d:e3:35:bb:ce:2a:95:08:db:4e:0f:a0:21:66:69:d4:70:
de:4a:43:53:a1:73:f3:57:56:ed:ed:27:09:65:9a:bd:b2:bd:
ef:c0:aa:a0:53:57:fc:82:97:b3:0b:1d:2f:12:49:d3:56:f4:
94:d6:32:36:37:32:a5:f4:19:46:f4:cb:fb:83:95:fd:d0:cd:
29:60:06:49:64:7a:7e:33:e2:05:59:9e:72:c5:ba:8a:11:09:
e5:cf:6d:6d:bd:c2:56:67:f4:15:15:b3:a7:1a:5d:dc:32:17:
3f:19:8a:23:1b:c2:0d:f1:2e:9f:c6:9a:cf:d1:85:6d:75:1b:
8a:c7:cd:96:ac:cb:5f:17:4b:82:79:c3:ef:b3:ec:cf:82:26:
ce:7a:40:0b:23:86:aa:af:7b:98:5b:84:24:7d:43:c8:03:25:
3a:3f:4c:13:17:22:5f:4e:dd:a2:e4:53:5e:f6:99:fc:ba:99:
6d:28:08:f1:50:0b:95:63:de:27:12:9f:f4:5e:5f:92:3a:76:
40:8b:7e:e7:88:98:20:6e:86:27:5c:c9:52:2d:3f:b9:c6:ef:
7b:a8:3e:20:8c:b5:c3:9f:09:e2:56:2b:66:f8:68:14:f6:3c:
5c:ae:a4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:21:42 2026 by rpki-client