Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
File: QtT25CKV9UA7hFtSu6lnl2HYhNg.mft (raw, json)
Hash identifier: defQRlnkqOQfeTtPcP1Q5ccmNFMY7Ffq8RJZWXm/8LI=
Subject key identifier: DE:C4:95:BF:D2:0D:A7:E6:EC:E6:80:3D:B7:7E:2F:8C:C4:6B:03:A7
Authority key identifier: 42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
Certificate issuer: /CN=42d4f6e42295f5403b845b52bba9679761d884d8
Certificate serial: 01A119E2FBBDF9988BDD193884878267F2C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
Manifest number: 0E8D
Signing time: Thu 08 Oct 2026 05:01:08 +0000
Manifest this update: Thu 08 Oct 2026 05:01:08 +0000
Manifest next update: Fri 09 Oct 2026 05:01:08 +0000
Files and hashes: 1: CZes9ucne-93ugwSp9Uj8QRuyUI.roa (hash: SmIb+DlDVr+RAK+c6/UM+iCQn51gq6QKyPu2qNkBKg8=)
2: QtT25CKV9UA7hFtSu6lnl2HYhNg.crl (hash: qGlY6IsQNkYUMB1xuk9x6IhbEEMeovgOf7YPiVcCiaI=)
3: mdvmy6IQAdVPllVNujJTmgLBeMk.roa (hash: 8bJ+OELFjDn0Z1urqhVSsIZSC0xHEOIJenSspzmy9DY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:e2:fb:bd:f9:98:8b:dd:19:38:84:87:82:67:f2:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42d4f6e42295f5403b845b52bba9679761d884d8
Validity
Not Before: Oct 8 05:01:08 2026 GMT
Not After : Oct 9 05:01:08 2026 GMT
Subject: CN=dec495bfd20da7e6ece6803db77e2f8cc46b03a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:94:0c:10:4f:63:c8:92:64:2e:2c:22:cd:35:
f3:41:76:2b:75:57:8c:5d:49:9f:cd:07:3b:cf:58:
22:30:2a:35:1a:96:58:39:96:e9:ab:26:fb:89:6b:
e7:84:b9:73:33:f1:a6:a2:a7:f5:96:47:33:01:12:
3a:94:e8:8c:aa:c9:4e:fe:35:7f:8d:d7:52:d4:51:
a7:6b:12:96:10:e1:12:f6:4b:ee:64:7b:a1:0a:2b:
24:fd:06:74:6c:ed:10:75:f3:67:c5:db:ce:78:5a:
df:3c:98:aa:71:c7:07:ae:df:8e:0c:2b:3f:8d:13:
1c:79:0d:07:c0:84:9e:5f:58:db:39:69:70:28:ae:
30:29:29:60:2a:31:01:b9:bd:dd:b7:2d:05:89:b4:
92:8d:1c:99:0f:4f:f4:ee:b0:64:eb:e9:f1:bc:9c:
b5:3a:cf:28:06:7b:74:7f:65:20:d2:82:30:d5:4e:
ca:23:e2:9a:d9:e0:11:98:ff:92:e1:4c:0d:7d:6a:
bc:bf:4b:68:0a:50:10:28:d6:df:bc:de:9e:b9:b5:
f2:51:b7:36:5d:ad:a1:19:b3:de:6c:66:1f:6f:0a:
b8:8e:9f:bd:05:43:b1:96:79:d3:09:9d:86:b8:ca:
a4:0d:77:f5:d2:67:ee:16:35:cf:2b:c1:0d:fd:ec:
41:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C4:95:BF:D2:0D:A7:E6:EC:E6:80:3D:B7:7E:2F:8C:C4:6B:03:A7
X509v3 Authority Key Identifier:
keyid:42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:39:ae:7d:14:7f:4e:f5:f2:7e:bd:a1:cd:23:bd:64:f8:ad:
be:5b:1c:e3:d5:55:b5:a0:93:fc:81:83:5f:a8:bd:bd:ce:60:
99:6a:de:41:cc:a2:eb:bc:e2:71:f3:2f:4b:43:17:e3:a8:67:
9e:66:99:4f:9e:6d:44:5f:45:c2:b8:29:4d:a3:5b:61:31:9a:
48:5a:cc:74:de:20:9f:e4:a8:20:0f:25:ff:d9:b4:2d:f0:67:
72:bb:46:a0:f4:3e:f9:a1:bd:96:da:74:9c:bd:13:32:91:16:
40:ea:62:5c:00:6c:80:fe:81:5e:2e:86:1b:01:8c:8c:a3:fc:
12:12:13:09:e8:ad:ae:85:ed:cb:8e:be:23:9a:2b:a4:da:86:
0d:45:db:77:84:ce:59:6b:5e:c9:e4:0f:47:8f:b2:d9:65:a3:
b0:36:0e:be:ad:f5:bb:bb:11:c1:11:fc:a2:d7:b4:b7:14:f4:
4f:d5:91:dd:f9:43:88:3f:1b:ef:e7:f7:42:d3:22:e4:7f:30:
da:5b:71:0d:79:25:da:a2:6a:c5:2d:6c:20:fd:e5:fd:07:e1:
61:72:de:cf:64:2f:f3:46:d5:58:e0:51:ea:90:a9:ea:c0:ea:
7f:6d:df:07:30:af:35:14:10:7d:0e:ad:dc:86:67:51:22:e5:
8e:88:e9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:40:07 2026 by rpki-client