Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
File: QdFPKPmNO9zEXhkibx9WFw4xKr8.mft (raw, json)
Hash identifier: hrK6PDVFMlGDkFgxLx7qqpw0UJvGIZjAi0NFcqUhFu8=
Subject key identifier: 6E:97:32:4B:91:D3:9B:78:3F:03:A7:E4:12:08:99:EE:59:B0:0A:6B
Authority key identifier: 41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF
Certificate issuer: /CN=41d14f28f98d3bdcc45e19226f1f56170e312abf
Certificate serial: 01A1502C6E21E1EC0A7202E3AAF1D640B438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
Manifest number: 1AAF
Signing time: Sun 18 Oct 2026 18:00:51 +0000
Manifest this update: Sun 18 Oct 2026 18:00:51 +0000
Manifest next update: Mon 19 Oct 2026 18:00:51 +0000
Files and hashes: 1: NuvWFYQk-kiKl2MmMjAPNDb8So4.roa (hash: HNkfwrKS+V0tdXG/bTci5kuusdPPHQbnnFcQ26SERCU=)
2: QdFPKPmNO9zEXhkibx9WFw4xKr8.crl (hash: HtLO9WvSlt+ZZJqXVlGbG+I6w++YL44Pmwy0k3FT/8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:50:2c:6e:21:e1:ec:0a:72:02:e3:aa:f1:d6:40:b4:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d14f28f98d3bdcc45e19226f1f56170e312abf
Validity
Not Before: Oct 18 18:00:51 2026 GMT
Not After : Oct 19 18:00:51 2026 GMT
Subject: CN=6e97324b91d39b783f03a7e4120899ee59b00a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:3b:7f:a8:c1:1f:67:30:fb:e3:0c:8b:a9:
6b:69:50:04:15:67:97:64:f7:1d:b8:c4:29:33:d2:
6c:59:af:93:9d:0a:c1:3d:b7:ee:d3:a3:ce:13:8e:
cb:cc:3c:3b:19:d9:f0:2d:7d:4c:5f:08:f7:e9:5c:
49:b2:cf:b0:1f:d0:60:79:a5:31:2b:ba:e6:0d:7d:
d6:02:0e:c0:6b:19:39:03:ac:87:ce:d5:8f:66:50:
7a:d8:6a:b6:e1:8d:09:3e:8e:69:81:c7:29:12:7a:
00:9a:13:d4:3c:0e:4c:e4:26:aa:5d:ca:d0:69:f3:
b5:f3:7d:ec:d1:7c:82:30:bc:f8:bf:0b:29:5f:6d:
66:b0:b7:5f:32:6e:eb:7a:4a:99:66:77:79:35:c4:
89:88:82:a0:d4:0a:ea:95:4f:57:55:11:54:8b:2d:
e0:0d:48:90:70:fd:61:7b:0a:98:77:c1:73:af:64:
ad:5d:cb:a7:f1:c6:39:70:1a:fa:be:86:f0:7e:e8:
48:4b:bb:e2:89:51:4f:ff:e2:83:75:23:f9:20:fa:
93:a9:fb:af:be:0c:2d:d9:e6:b8:ea:12:eb:ec:d5:
93:95:a8:f7:85:c5:e2:16:6f:5c:3a:f6:1d:33:e1:
a7:62:ff:97:52:2a:10:6e:4c:ac:ed:cf:4f:f3:78:
41:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:97:32:4B:91:D3:9B:78:3F:03:A7:E4:12:08:99:EE:59:B0:0A:6B
X509v3 Authority Key Identifier:
keyid:41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:3c:61:cb:53:b8:d1:0b:57:7a:d5:f4:c5:44:96:70:db:92:
46:ae:29:c7:d5:0c:23:ac:d4:02:a7:72:df:dc:7e:fe:96:2b:
51:d9:59:23:46:e5:3b:ac:25:b6:97:ef:f8:4d:78:50:b6:e4:
3f:6f:2c:e7:6a:f9:b7:f8:82:67:be:55:98:ae:8a:38:6b:d7:
61:56:4a:75:81:78:dd:f0:d8:b1:00:8e:bf:cd:48:74:68:60:
56:a6:61:6b:82:36:2b:a9:02:6e:df:d0:aa:84:74:e9:4a:ca:
bd:b4:7a:4b:b9:c9:06:3a:49:fa:11:d5:dc:c4:3d:e2:61:d8:
96:9d:18:b4:98:5c:b3:f0:8d:18:2b:03:82:02:47:41:81:b5:
c7:22:4a:30:da:9d:8c:fb:6a:66:d1:66:23:97:d5:2d:53:64:
de:c6:4b:4a:e9:d7:14:94:32:1c:fa:f9:5f:6f:3e:7c:c6:23:
4e:c2:6c:44:72:a4:4d:4a:e2:fb:32:6b:c7:97:d5:3c:bd:d5:
ce:0a:3f:f5:8e:57:ba:87:a2:fb:47:8c:53:c3:b3:d2:ba:c0:
97:a1:c2:c6:b9:d4:45:2e:c8:02:34:68:cd:c9:08:a3:bb:74:
e2:23:bf:04:97:ed:ff:83:f3:ed:78:f9:9a:cb:5a:5c:64:4c:
15:bb:c3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 02:36:44 2026 by rpki-client