Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
File: QdELiOsk9iYtkxU2il0B4eCGDE4.mft (raw, json)
Hash identifier: YeuVQnzO2nWRRZWsI1ivAfdTNVptY+Pv/7wzTT7+sog=
Subject key identifier: 6A:BE:A1:AC:82:53:CD:A5:9D:7A:21:C1:3E:99:5C:C3:7A:10:76:D4
Authority key identifier: 41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
Certificate issuer: /CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Certificate serial: 019FA071D22A83D6005F37E7F65EE865725F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
Manifest number: 0FA5
Signing time: Sun 26 Jul 2026 22:00:41 +0000
Manifest this update: Sun 26 Jul 2026 22:00:41 +0000
Manifest next update: Mon 27 Jul 2026 22:00:41 +0000
Files and hashes: 1: 21M7HF4__TSSYuc94uYUsxaViMI.roa (hash: bLnj/IRZ795Oev6VIkUJOays0OV+AGQSOAXtErO1j5g=)
2: QdELiOsk9iYtkxU2il0B4eCGDE4.crl (hash: Sy+n4GZ7ylBARaGCURwfKOgvWAeDfGhDjF25LVmhwGM=)
3: eaXikRCsLtsFiUKz6WXrDOERlPQ.roa (hash: c7SW61m3J6x7Rtxxm9NLZWtrkTB2+cri1x/k0vlq8jk=)
4: gkbICmY92gO5yWh3UUqQ3JZEKOM.roa (hash: RZ4WGmwrPF1CwIYf7Eiia3Ji+NZJkZQF8Et1XMrVS7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:71:d2:2a:83:d6:00:5f:37:e7:f6:5e:e8:65:72:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Validity
Not Before: Jul 26 22:00:41 2026 GMT
Not After : Jul 27 22:00:41 2026 GMT
Subject: CN=6abea1ac8253cda59d7a21c13e995cc37a1076d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:99:6a:19:93:ce:d9:2b:3d:92:7e:5d:68:db:
5c:8e:73:9d:d5:1b:e1:a0:9c:5d:56:d4:66:46:8a:
cd:26:c7:36:2c:43:c5:86:9d:20:f5:f5:7a:45:fc:
61:19:b6:81:9a:3d:93:8e:66:e7:ed:b2:93:1c:44:
9c:ef:a0:a5:ec:84:74:64:16:85:ce:e9:75:37:93:
f3:a9:66:1b:72:9d:11:0d:cd:66:29:9a:f3:83:56:
27:b9:b3:7d:c6:21:0a:97:7b:7c:a3:c6:65:bf:60:
0c:a4:4e:b5:3d:43:e2:d6:2a:31:bc:0b:54:35:56:
e3:e9:fe:06:e3:3e:c1:17:7c:71:b0:10:38:15:9c:
0d:37:98:66:dc:36:92:27:15:d8:c1:58:3d:e6:d7:
6c:c3:a1:cf:15:16:18:1b:08:64:01:98:05:ff:b0:
4a:69:75:39:3c:8b:fc:66:14:f0:a9:23:e1:a7:99:
fd:fe:45:fa:de:a8:f5:ed:db:3b:ea:f9:64:a3:be:
b2:3d:12:c9:51:d4:d6:7a:c5:8c:fa:98:70:15:71:
73:c9:a6:7c:58:13:6f:fc:e7:c3:d5:30:82:e9:37:
3f:cd:d6:75:9b:59:6d:0e:ff:83:1d:42:a1:15:5c:
9c:98:d8:6d:62:df:93:2c:11:21:59:67:c9:20:5e:
e5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BE:A1:AC:82:53:CD:A5:9D:7A:21:C1:3E:99:5C:C3:7A:10:76:D4
X509v3 Authority Key Identifier:
keyid:41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:7d:8e:95:1b:42:1d:c0:4d:22:99:4c:d6:69:53:be:a1:1c:
5f:94:42:3c:68:bb:56:a2:6d:74:7a:9e:0a:e1:95:12:d4:2e:
fc:e0:6d:f4:af:c8:ac:72:53:2c:53:a4:d3:1f:d3:5b:40:f2:
47:19:6a:37:4e:4d:e9:7e:21:88:d3:72:18:46:c9:f5:a8:83:
3f:ab:4b:4b:aa:2c:49:bd:d0:f0:d8:6f:f7:83:b5:41:75:26:
b7:ab:8f:47:da:cf:84:22:1c:dc:f9:46:3b:f4:05:00:39:eb:
5d:cc:d8:82:e5:c9:3b:95:8f:05:54:90:01:2f:f4:d7:54:3d:
6e:41:da:56:3a:bf:d4:6d:93:3f:f7:f6:5c:e5:a2:36:c6:24:
99:c1:0e:e3:df:23:41:77:fe:5b:77:5c:68:38:2e:d8:74:3c:
44:c2:12:61:4e:eb:c4:64:1e:de:e7:0b:9f:6b:83:0f:8c:42:
03:4c:56:36:be:4a:c8:4c:c5:db:fb:00:3a:da:e8:a3:43:b8:
60:82:f4:2a:a0:cb:23:e1:ee:f6:ac:24:d1:b4:4f:ac:54:85:
e0:e4:51:b8:b2:80:0f:eb:86:85:62:72:f0:c4:05:12:4a:04:
fb:34:97:b5:b1:7e:be:7f:c8:67:0c:8b:44:f2:61:12:68:65:
44:17:05:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:05:47 2026 by rpki-client