Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
File: QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft (raw, json)
Hash identifier: R3mklGaGBWTzKviM+DaJawSG392mp0Hs5bvpaznlaJM=
Subject key identifier: CC:A8:E9:3E:AC:22:5A:47:0C:7D:29:53:43:DD:D9:71:46:92:F4:38
Authority key identifier: 40:8F:A0:17:53:2F:F6:D9:FB:38:B4:00:37:89:6A:FA:F0:AA:CF:8B
Certificate issuer: /CN=408fa017532ff6d9fb38b40037896afaf0aacf8b
Certificate serial: 019FF948D12783774203B12E6017EFCD5403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
Manifest number: 0BC9
Signing time: Thu 13 Aug 2026 04:02:06 +0000
Manifest this update: Thu 13 Aug 2026 04:02:06 +0000
Manifest next update: Fri 14 Aug 2026 04:02:06 +0000
Files and hashes: 1: QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl (hash: /UIRRL85DhKS7fNAT1EOBtl3HM7W/IbeJ5dDPlKUgVY=)
2: RhhybVhgxehJpyQFfu1dQiF3RZc.roa (hash: vTXKPtYUm1UxDqfrm9GUHJ6eZM3EZfiTITZU7YFaPA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:48:d1:27:83:77:42:03:b1:2e:60:17:ef:cd:54:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408fa017532ff6d9fb38b40037896afaf0aacf8b
Validity
Not Before: Aug 13 04:02:06 2026 GMT
Not After : Aug 14 04:02:06 2026 GMT
Subject: CN=cca8e93eac225a470c7d295343ddd9714692f438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4c:f2:ad:90:e7:18:b5:95:62:46:6a:46:10:
cc:9a:ce:bd:15:d4:7e:35:3d:fa:8d:d6:70:70:e9:
78:e0:42:a9:05:5b:cf:8c:1b:ea:bc:77:a3:80:4a:
51:ca:15:b4:99:23:49:c6:22:23:aa:97:17:dd:11:
f5:63:e8:c5:c4:72:d9:33:98:89:2e:55:35:cd:74:
1e:db:bb:9e:4d:13:d0:ec:e9:51:c0:7d:13:19:58:
cc:94:4c:75:54:7d:52:b8:e6:06:73:76:92:dd:8c:
0e:f1:f3:d9:56:53:e7:96:be:f7:59:2f:c2:4f:8b:
78:a0:2b:c3:2b:71:06:81:e0:e6:02:4f:4b:ff:32:
8a:ed:1f:46:fc:ab:b0:32:56:e0:bc:b7:c8:51:cf:
b1:06:ed:b9:d7:d3:06:9a:55:f9:e9:55:fa:7e:8b:
11:07:1d:49:1c:4b:a0:24:d9:ea:80:34:46:d7:ac:
5c:ec:d9:6d:d1:35:03:e2:29:dd:d0:60:49:f2:89:
c5:08:36:00:82:8a:c1:5f:6f:63:3c:a6:25:03:18:
47:83:27:cf:c4:a7:10:92:f6:10:75:5b:1d:2b:ad:
04:09:b1:92:d3:8d:c5:02:9b:3e:62:5f:bf:a5:56:
56:ea:f0:47:e0:e6:78:4c:33:4b:62:2d:e3:84:58:
5c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A8:E9:3E:AC:22:5A:47:0C:7D:29:53:43:DD:D9:71:46:92:F4:38
X509v3 Authority Key Identifier:
keyid:40:8F:A0:17:53:2F:F6:D9:FB:38:B4:00:37:89:6A:FA:F0:AA:CF:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:5a:8a:ba:04:66:4a:40:d2:b4:6b:6d:0b:86:2d:00:7b:83:
77:fe:4a:fa:9f:64:05:37:ec:7c:ad:e2:1c:6b:4d:5f:6e:ce:
8c:74:8b:9d:3e:32:fe:6b:dc:1d:4a:e2:e3:4b:91:65:3a:54:
6e:98:dd:58:12:2c:ac:cf:70:49:67:6f:fd:c0:60:3b:8e:c2:
55:75:7f:cc:ee:20:fa:1e:a8:66:7f:a3:be:7f:c7:9a:d7:ea:
fd:a2:72:47:e2:e7:88:33:46:bb:94:5f:28:26:2a:53:6c:8c:
34:41:b6:2c:cc:d7:d4:6a:44:7f:c6:e8:f2:d9:51:16:b9:b0:
22:2e:aa:4f:65:4b:bd:79:09:db:e2:b6:5e:4c:8f:b6:e7:af:
20:75:7f:a7:5a:2c:7e:b3:03:e0:1e:b8:95:3e:a9:9e:34:2c:
76:94:9c:a1:c9:23:6a:c5:47:db:bb:d6:d9:21:72:9f:5b:2e:
c0:e8:e8:41:3d:67:44:8e:b9:cb:57:32:f1:98:ae:a6:37:05:
10:e7:dc:05:ce:5a:de:7b:8d:93:f6:c9:a9:58:6f:81:32:96:
44:bc:9b:d8:f1:88:b0:1b:bc:f1:1e:8a:33:8d:db:fa:b7:75:
54:54:d4:f2:8c:59:6a:0a:39:a3:12:22:81:74:66:0e:36:aa:
c5:fa:1a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:02:48 2026 by rpki-client