Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
File: QdELiOsk9iYtkxU2il0B4eCGDE4.mft (raw, json)
Hash identifier: yvxKmGLWevHbmfCyuFdSq9V4yqe3wOi8/WHxTvWzPig=
Subject key identifier: 88:0D:8A:46:40:E7:8E:9F:70:8F:65:9E:2B:11:51:D2:30:A1:D1:7C
Authority key identifier: 41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
Certificate issuer: /CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Certificate serial: 019CE36BD5EEDC925CA4DA028097A52D2C94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
Manifest number: 0E3A
Signing time: Thu 12 Mar 2026 19:00:21 +0000
Manifest this update: Thu 12 Mar 2026 19:00:21 +0000
Manifest next update: Fri 13 Mar 2026 19:00:21 +0000
Files and hashes: 1: 21M7HF4__TSSYuc94uYUsxaViMI.roa (hash: bLnj/IRZ795Oev6VIkUJOays0OV+AGQSOAXtErO1j5g=)
2: QdELiOsk9iYtkxU2il0B4eCGDE4.crl (hash: FwRUIhuO89BDhdvNxgbK5SFjGeNzWv921HKRpcFZBFM=)
3: eaXikRCsLtsFiUKz6WXrDOERlPQ.roa (hash: c7SW61m3J6x7Rtxxm9NLZWtrkTB2+cri1x/k0vlq8jk=)
4: gkbICmY92gO5yWh3UUqQ3JZEKOM.roa (hash: RZ4WGmwrPF1CwIYf7Eiia3Ji+NZJkZQF8Et1XMrVS7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 19:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:6b:d5:ee:dc:92:5c:a4:da:02:80:97:a5:2d:2c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Validity
Not Before: Mar 12 19:00:21 2026 GMT
Not After : Mar 13 19:00:21 2026 GMT
Subject: CN=880d8a4640e78e9f708f659e2b1151d230a1d17c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:af:69:d1:0b:f1:97:a4:ba:92:68:2d:5b:c4:
1c:c3:9f:f8:b2:11:a4:88:bc:58:11:0c:3a:0d:77:
00:5d:b3:2f:4f:fc:a3:31:1c:40:d8:80:e0:3b:8d:
7d:f1:4b:e6:d3:9d:07:0d:c7:65:68:0f:f4:4c:c3:
e7:3f:0a:47:a7:bd:97:ce:36:2a:3e:f2:6f:ac:9a:
3b:41:92:1c:5f:71:67:47:fb:0a:e0:69:84:b0:ad:
93:b2:de:08:a5:d2:67:75:21:7a:29:de:68:6b:2d:
79:fe:df:b9:59:1a:5a:cc:c8:65:ad:0a:6e:a5:c6:
b0:a6:43:9c:db:5a:3a:da:ad:6d:80:8e:ff:30:bf:
7d:6c:63:c3:b0:1b:19:ae:06:4c:58:b1:72:b3:7e:
8a:53:da:d9:cd:77:3b:55:61:fa:9a:cd:ae:b0:36:
11:49:92:9b:51:f3:ce:71:b9:29:e8:c9:a9:94:d3:
ed:ea:2c:88:b5:e1:ba:3b:b9:3e:7b:6b:08:09:a9:
ff:af:77:66:e4:01:97:92:2c:f4:bb:28:fc:dc:a2:
7b:23:f7:27:8d:1b:2c:9c:31:88:cc:4e:d2:ef:cc:
de:15:2d:64:84:77:42:f1:72:24:49:97:20:8a:45:
4a:b6:12:92:fb:19:84:93:81:51:28:5c:a5:81:e3:
8e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:0D:8A:46:40:E7:8E:9F:70:8F:65:9E:2B:11:51:D2:30:A1:D1:7C
X509v3 Authority Key Identifier:
keyid:41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:1c:ce:8d:2b:d4:13:57:4d:7a:01:30:91:17:c6:97:ac:de:
19:07:c9:d2:e6:78:16:19:18:58:5c:ce:8a:1a:c8:9f:e2:a3:
76:47:29:9e:66:99:96:f3:c6:fd:ba:54:53:5f:ad:b4:0e:84:
ed:14:ff:bd:f6:ff:e3:e8:dd:94:a2:42:18:74:1a:eb:91:6d:
cc:31:fc:0e:29:36:62:3f:3c:c1:0e:a1:16:6b:b8:0f:53:43:
0b:92:fd:f8:63:82:93:f7:f0:c7:1d:4c:ac:59:cd:f0:f4:5f:
66:1b:e3:77:c8:77:ea:e4:12:55:ef:01:2b:3e:0b:e5:96:36:
4c:32:8a:d7:4d:c9:44:87:f2:92:22:d4:59:7a:b4:3d:8b:d0:
31:89:f7:c9:f5:11:dd:dc:ae:e1:03:ac:d5:f8:09:3d:79:bb:
16:47:51:42:ea:3d:c4:50:8b:a1:3e:56:81:04:85:7a:04:cb:
b9:5a:57:51:ef:94:b9:45:20:a9:cb:51:75:26:0d:6d:3a:df:
c8:0f:11:70:6a:c6:24:be:13:2a:bc:2e:d9:b5:c5:83:4e:bd:
ad:7f:56:66:0d:73:a4:72:61:4b:d4:3a:b8:95:f5:86:20:c3:
7b:cc:0a:b9:8f:75:c6:ef:1d:3f:23:ba:36:26:5f:8a:db:1d:
14:a4:24:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 04:31:58 2026 by rpki-client