Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
File: QRoqlAW9oWccEHdvRCYnPJBOStA.mft (raw, json)
Hash identifier: aUwpZ1t7pMAF6QiY9XhOeozMF6HN3utm9Pnbojadwn0=
Subject key identifier: 70:13:C5:38:7D:B0:A6:87:03:A5:C1:0D:41:C9:02:4C:91:DF:60:ED
Authority key identifier: 41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
Certificate issuer: /CN=411a2a9405bda1671c10776f4426273c904e4ad0
Certificate serial: 01A0E7AE8CEF0440CFF7E290FF78D00E32E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
Manifest number: 1A7C
Signing time: Mon 28 Sep 2026 11:02:51 +0000
Manifest this update: Mon 28 Sep 2026 11:02:51 +0000
Manifest next update: Tue 29 Sep 2026 11:02:51 +0000
Files and hashes: 1: JhKTt4vHe2Da6Kx5S6KE0aGaD54.roa (hash: nw0ozHE1LZlyAK+hkXXsJOHymcfFOhmuSyMz6eBbqyE=)
2: O5zwSwZaq-PnYfyFgUGaYTtXVCc.roa (hash: EcphMyhwWu+HB1619MCd3HbMcseN3a1eZUs2rmX7LwY=)
3: QRoqlAW9oWccEHdvRCYnPJBOStA.crl (hash: hnt2E2MgKpNdIlxmGl5uFPmLa9YYftW7dzXxM4zMM6w=)
4: mV0XT4eYWUzPfujoqVHWBgPdVhw.asa (hash: SxQBgXkzl2s7ZSzL5zFHD8gDFNbcwGk2HGZOyqJzEQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 08:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:ae:8c:ef:04:40:cf:f7:e2:90:ff:78:d0:0e:32:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411a2a9405bda1671c10776f4426273c904e4ad0
Validity
Not Before: Sep 28 11:02:51 2026 GMT
Not After : Sep 29 11:02:51 2026 GMT
Subject: CN=7013c5387db0a68703a5c10d41c9024c91df60ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:22:f8:e3:49:21:c7:d4:97:25:4f:04:16:70:
09:da:43:43:fc:ac:21:ab:1e:cd:3c:53:2e:a6:49:
55:00:ea:f1:c9:48:a1:ec:bb:72:b3:25:d4:1f:f7:
a0:cf:57:43:a5:71:af:2e:96:07:a5:49:9d:c4:d2:
3a:48:81:32:08:5d:48:bc:ca:70:0e:ab:cf:fd:eb:
30:2c:de:05:4e:31:61:e8:73:90:39:e0:e9:ab:7b:
f4:a0:0f:31:60:d8:3c:1b:88:de:b6:51:61:c9:da:
d7:c2:71:2e:ba:1e:8d:63:bc:a2:ff:4c:a0:0e:71:
8e:b4:09:8f:70:90:61:f8:44:c5:91:4c:60:68:91:
da:48:bd:d7:a7:e9:c3:97:53:42:e8:fd:45:e6:ac:
f2:85:f2:47:38:fe:bf:76:97:6b:0c:86:a5:f2:3b:
15:8e:a6:c8:e9:56:51:01:43:88:b1:51:91:a4:60:
c8:1e:8d:54:f9:8c:85:58:46:1a:e9:79:94:5d:aa:
15:07:38:fa:d2:89:33:55:63:bf:fa:fa:4f:49:8c:
b9:35:9a:13:59:72:2d:51:e0:a0:c9:50:54:1e:b6:
df:89:92:e6:39:0d:e1:27:12:2f:50:f6:fe:cb:d6:
45:23:72:41:b3:4d:29:1c:45:68:64:d9:07:0d:77:
5e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:13:C5:38:7D:B0:A6:87:03:A5:C1:0D:41:C9:02:4C:91:DF:60:ED
X509v3 Authority Key Identifier:
keyid:41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:f2:e1:83:99:d5:bb:b3:ed:68:17:78:05:0b:90:3e:52:06:
ac:be:16:6a:20:c2:24:5c:dc:76:a7:68:de:a7:6a:e8:a2:86:
f6:5c:8e:36:96:85:9e:dd:b4:32:18:c5:61:08:53:90:d8:f5:
9e:9c:b3:b4:3e:68:7c:dd:9c:31:64:77:4c:73:58:d4:e1:ab:
81:54:8a:94:70:c2:ef:57:3d:a0:23:30:16:7f:60:21:d6:35:
46:97:ca:3f:44:6f:fb:00:91:fd:af:ea:c7:6b:51:83:06:8a:
89:c6:c1:37:0e:c0:33:2e:fc:b8:fc:c2:a1:24:72:6f:28:44:
c1:a3:c7:5f:a8:8b:1e:88:22:6b:73:2c:5c:9c:04:b5:2e:78:
0a:bd:7b:dc:d9:60:67:ce:74:25:76:17:cf:cb:71:86:70:8c:
99:71:fd:2f:40:b1:ac:1d:c7:51:6f:94:44:18:c4:0b:0d:7f:
6d:15:9e:1b:66:0c:c0:de:3b:09:d2:9c:a2:44:23:da:79:2a:
9e:16:02:13:8b:fb:8d:68:bc:da:01:b5:54:bd:df:f0:95:7c:
b9:19:a7:98:22:bb:30:fa:57:93:1e:8f:74:3d:6d:a7:c6:39:
cc:39:d5:7c:f1:24:43:74:0b:a2:37:24:a9:08:0b:5a:2d:e9:
d9:5f:57:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:06:55 2026 by rpki-client