Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
File: QdELiOsk9iYtkxU2il0B4eCGDE4.mft (raw, json)
Hash identifier: qHv+ALOhbAQkfvH9/g9snsQ5SGdKBA0G9AiaiAXbSj0=
Subject key identifier: 22:3B:50:2B:CE:5B:31:78:D6:A6:BA:66:99:93:80:EE:78:E1:6A:E2
Authority key identifier: 41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
Certificate issuer: /CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Certificate serial: 019EB6C585499D59EF2F8AC522C802741C46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
Manifest number: 0F2C
Signing time: Thu 11 Jun 2026 13:00:58 +0000
Manifest this update: Thu 11 Jun 2026 13:00:58 +0000
Manifest next update: Fri 12 Jun 2026 13:00:58 +0000
Files and hashes: 1: 21M7HF4__TSSYuc94uYUsxaViMI.roa (hash: bLnj/IRZ795Oev6VIkUJOays0OV+AGQSOAXtErO1j5g=)
2: QdELiOsk9iYtkxU2il0B4eCGDE4.crl (hash: FDutGyTYFVOlr3zEnJiCGRjYZx8CUpSsbXf130XHpks=)
3: eaXikRCsLtsFiUKz6WXrDOERlPQ.roa (hash: c7SW61m3J6x7Rtxxm9NLZWtrkTB2+cri1x/k0vlq8jk=)
4: gkbICmY92gO5yWh3UUqQ3JZEKOM.roa (hash: RZ4WGmwrPF1CwIYf7Eiia3Ji+NZJkZQF8Et1XMrVS7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:c5:85:49:9d:59:ef:2f:8a:c5:22:c8:02:74:1c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Validity
Not Before: Jun 11 13:00:58 2026 GMT
Not After : Jun 12 13:00:58 2026 GMT
Subject: CN=223b502bce5b3178d6a6ba66999380ee78e16ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2d:97:75:06:69:38:4b:a5:ee:a5:07:ef:e3:
ee:bb:fb:98:48:62:62:4e:e5:7f:dd:46:57:e7:1b:
25:29:0d:2f:0e:a4:12:26:64:1c:fe:1f:d5:3d:98:
23:3d:ae:96:dd:6c:f1:d5:5b:51:9f:55:9c:fe:64:
ba:da:f4:a8:ae:5d:af:0f:51:f8:ad:88:c4:f7:38:
9f:b9:ef:e6:45:98:5b:93:9d:0a:3e:22:7b:f6:49:
f5:30:27:83:09:8d:41:5e:12:12:de:e6:84:39:ad:
19:a2:84:4b:c8:3d:95:92:82:e0:d7:93:34:cb:28:
a7:15:ad:c4:28:1f:0f:13:f4:62:d9:01:b2:29:03:
c6:ff:5a:c1:db:db:ab:28:4c:08:0c:58:1b:38:f3:
38:c1:fd:72:a7:93:0c:9d:e2:1c:ff:0e:6e:a3:2f:
ce:41:aa:73:0f:2a:2f:33:2f:7c:72:31:97:32:9a:
e8:e1:64:a2:40:6a:15:01:48:8d:1e:0e:3c:22:f0:
77:98:7d:0f:3c:5e:24:46:26:a1:b7:d9:b6:a5:c0:
4f:35:b2:97:35:6c:36:10:43:5e:ce:36:c8:80:39:
32:c3:5c:cd:5f:d3:7b:d2:95:b7:1f:ff:b0:67:ff:
ad:b9:ba:6b:3a:52:ee:ed:8b:00:d3:bb:bc:ff:8b:
c1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3B:50:2B:CE:5B:31:78:D6:A6:BA:66:99:93:80:EE:78:E1:6A:E2
X509v3 Authority Key Identifier:
keyid:41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:b0:23:eb:00:f6:52:89:05:29:a6:63:a9:66:e8:4a:60:d5:
0b:8f:c1:de:19:21:bc:5c:e7:5d:93:8c:4c:57:15:b7:ce:ec:
42:c7:87:cc:6a:cd:07:93:6d:78:09:c8:6b:30:cb:23:64:72:
aa:62:d2:5f:7c:84:17:12:24:cc:62:81:8d:66:2b:93:87:06:
b9:a6:79:bb:f7:7f:60:48:ef:99:4c:9f:7a:d9:5d:4c:62:ce:
d1:d6:5a:11:5e:ef:80:86:3a:76:a4:b9:e5:4a:cf:0f:44:a4:
75:fe:d9:58:f0:0b:c4:5a:ca:15:93:cb:8b:45:bd:56:c4:e7:
c2:4e:d3:ca:c8:e5:eb:7f:05:cb:f2:bb:34:c2:08:7b:bf:b4:
31:76:d4:ce:4e:08:b6:71:e1:62:bc:d3:98:46:59:2d:12:d3:
fb:60:09:b5:42:23:8f:b0:97:f1:c9:e6:f3:a4:83:56:d7:5f:
9b:dc:7f:f5:43:c9:14:d0:f7:6d:c0:1f:be:e4:c0:83:85:fb:
f7:5d:e4:0a:e1:62:63:3e:f7:46:fd:f4:5a:ba:97:b0:c5:c2:
71:d9:52:bc:95:89:5e:9a:24:0f:61:f8:67:5d:11:2a:a2:da:
e0:3d:06:15:c5:fd:7c:f9:c1:07:7a:9c:04:fe:28:6e:02:ae:
cc:52:f9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:23:57 2026 by rpki-client