Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
File: Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft (raw, json)
Hash identifier: KNttx/rc0CU/PW02Cc+JydhqY7HiQ5lzXHffEM9gbAE=
Subject key identifier: 98:D7:91:21:2B:EE:7A:38:58:B0:95:65:7D:DA:28:10:48:BC:5A:61
Authority key identifier: 41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31
Certificate issuer: /CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31
Certificate serial: 01A15EFB48840AF2571CA7B892A1F8FB7187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
Manifest number: 1449
Signing time: Wed 21 Oct 2026 15:01:28 +0000
Manifest this update: Wed 21 Oct 2026 15:01:28 +0000
Manifest next update: Thu 22 Oct 2026 15:01:28 +0000
Files and hashes: 1: NQ75nb1-xJ7HIs6FdHfLr_Qn5o8.roa (hash: 0/Ed5GPxhq59pa7mSV6ONsdGXpQguRmYVeDEeOnkcHU=)
2: PXrC0OWTvC3oDvSMYzCzL7Vl-uQ.roa (hash: 2Ri2mgKyHMUEf2CJlFmGd9Z/Z2goUwzz5lX8kmekZSA=)
3: Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl (hash: WMfi3q9ekcmtjz0AajzG4ORzGvoMEi1XSdB2tuP6gZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:fb:48:84:0a:f2:57:1c:a7:b8:92:a1:f8:fb:71:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31
Validity
Not Before: Oct 21 15:01:28 2026 GMT
Not After : Oct 22 15:01:28 2026 GMT
Subject: CN=98d791212bee7a3858b095657dda281048bc5a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a6:27:9e:e4:db:1a:b1:68:e7:a8:71:7b:9b:
2e:6d:58:6d:60:ca:4d:7c:78:4d:1a:09:00:74:ae:
08:91:c9:be:1a:8b:e5:8a:ab:40:ec:ad:53:73:34:
3f:ff:2d:1f:e2:cc:30:01:a8:96:7a:96:c4:cb:b2:
bd:58:9d:7a:99:d1:6f:c5:be:36:3b:1e:f1:20:9a:
f2:1a:da:6e:c1:2e:23:22:ce:d4:c6:04:a0:81:09:
4c:d7:2f:49:14:2c:13:69:80:0c:be:98:1f:cd:07:
bf:16:00:02:0e:b3:94:a2:3d:c6:3c:cd:50:ad:6b:
8c:e4:02:eb:04:8f:9d:f0:ac:a2:3d:96:1b:b7:9f:
d6:b2:59:57:80:eb:3f:cd:a1:95:1e:76:f2:a6:c6:
14:c2:ab:f8:42:3d:c1:a3:26:77:50:74:1e:ef:1b:
8d:ca:53:16:8e:96:83:34:3c:30:d6:f7:61:a8:27:
af:c1:f5:53:b7:77:6a:74:95:32:a9:71:ab:6a:9a:
84:3b:b2:f2:41:87:4d:6a:d4:29:eb:b1:6e:ec:7d:
c2:22:a2:9b:69:54:78:0d:97:fe:f6:91:d1:0b:6a:
4f:79:be:ad:02:71:3f:d5:a5:98:e0:8a:61:9a:0c:
a8:f7:ae:00:32:3e:d5:5f:0b:0a:85:cc:42:b7:c7:
04:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D7:91:21:2B:EE:7A:38:58:B0:95:65:7D:DA:28:10:48:BC:5A:61
X509v3 Authority Key Identifier:
keyid:41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:1a:2e:8b:5c:1f:d0:86:99:7f:2d:8a:2c:ed:22:61:5a:e2:
31:12:e2:bd:20:59:fa:5c:a7:17:ac:fe:00:d9:5e:ea:34:23:
b2:27:63:66:aa:59:81:a7:07:28:49:a2:28:13:f1:bb:4b:d2:
bc:40:85:53:fe:50:54:fb:70:30:88:c8:68:5a:9e:cc:f1:10:
26:be:53:57:7f:b9:04:ab:4a:67:77:cf:14:5d:97:6f:72:06:
7d:a6:44:bc:d7:7e:0e:8e:c4:0c:81:51:e3:c3:fe:84:49:82:
42:eb:0c:9f:04:88:d7:3a:6c:f5:be:b4:47:cb:1f:ac:55:55:
9a:1a:ad:dd:1e:cc:f7:61:35:04:95:3a:c6:be:46:39:e4:ff:
66:7e:64:c4:b2:5d:ba:52:58:3d:71:86:dc:04:03:72:89:fc:
64:2c:6d:03:1b:a5:82:68:1d:4b:94:9c:8b:93:68:c7:8f:a0:
9e:11:1d:4c:68:53:56:01:45:ca:41:52:71:d8:cc:a0:eb:59:
41:38:bb:ed:9c:9a:fa:52:e8:52:64:a3:4a:20:74:77:25:a1:
d2:7c:b8:76:52:99:97:6b:fe:13:30:ec:bc:5a:49:8f:7a:3d:
c7:78:05:3e:7d:a9:a0:b4:6f:ba:48:7f:56:ed:b4:7c:c0:dc:
94:ee:06:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 18:21:25 2026 by rpki-client