Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
File: QdELiOsk9iYtkxU2il0B4eCGDE4.mft (raw, json)
Hash identifier: Pi8okElD70jMtXH1iJCF28oGIeBXduMAXXkwS//CwtQ=
Subject key identifier: 19:99:1C:8C:D6:0A:39:91:F4:7B:CB:02:51:21:31:8B:3B:0E:E6:F4
Authority key identifier: 41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
Certificate issuer: /CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Certificate serial: 01A17F61ABCB214D3954A951310B1E8FACDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
Manifest number: 109D
Signing time: Tue 27 Oct 2026 22:01:09 +0000
Manifest this update: Tue 27 Oct 2026 22:01:09 +0000
Manifest next update: Wed 28 Oct 2026 22:01:09 +0000
Files and hashes: 1: 21M7HF4__TSSYuc94uYUsxaViMI.roa (hash: bLnj/IRZ795Oev6VIkUJOays0OV+AGQSOAXtErO1j5g=)
2: QdELiOsk9iYtkxU2il0B4eCGDE4.crl (hash: HKPIV4BsVJ3DKJfazoQQE95dEJol5UnLC5gEc+l5NZM=)
3: eaXikRCsLtsFiUKz6WXrDOERlPQ.roa (hash: c7SW61m3J6x7Rtxxm9NLZWtrkTB2+cri1x/k0vlq8jk=)
4: gkbICmY92gO5yWh3UUqQ3JZEKOM.roa (hash: RZ4WGmwrPF1CwIYf7Eiia3Ji+NZJkZQF8Et1XMrVS7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:61:ab:cb:21:4d:39:54:a9:51:31:0b:1e:8f:ac:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Validity
Not Before: Oct 27 22:01:09 2026 GMT
Not After : Oct 28 22:01:09 2026 GMT
Subject: CN=19991c8cd60a3991f47bcb025121318b3b0ee6f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a6:46:57:a3:e1:d7:da:6d:48:01:f8:e7:db:
b2:4e:5c:83:2c:4b:d7:c4:8f:ab:0a:5f:c1:d3:0b:
92:8c:d4:a4:8e:12:55:d9:3b:64:6d:c9:5d:63:e0:
e7:99:94:3d:7b:23:db:73:a1:a5:87:97:bc:4c:cb:
13:5c:31:9f:65:5a:ed:2e:dd:4e:46:6a:81:07:91:
0e:b7:29:c9:e1:c6:20:60:a6:c1:68:53:ce:b2:c4:
b6:79:26:40:68:07:6a:1a:7d:f7:e6:fb:c8:1a:44:
93:6b:09:11:a4:0f:6d:47:e1:05:f4:12:88:d0:b7:
94:c2:09:b5:5c:9a:2b:bc:1b:38:93:56:bc:1d:6b:
b3:13:49:eb:df:6b:15:c6:b4:0d:b5:39:2d:26:3c:
d3:1f:cc:1f:8e:4e:db:b3:b7:f9:d6:af:f7:05:61:
ac:52:a3:81:47:62:cb:4f:a5:f8:c3:07:46:93:6a:
ea:9b:60:80:6d:58:5a:d7:30:d3:b2:73:18:10:58:
9e:b6:0d:7a:dd:56:8f:e7:7a:13:78:60:67:2c:db:
bb:34:92:90:1b:3d:23:41:21:8a:1c:de:54:a1:09:
39:63:6e:8c:a6:3b:85:41:5f:66:70:46:74:f2:6a:
9e:2e:b9:c2:e7:92:6e:1f:e2:c2:54:8c:ba:5b:eb:
94:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:99:1C:8C:D6:0A:39:91:F4:7B:CB:02:51:21:31:8B:3B:0E:E6:F4
X509v3 Authority Key Identifier:
keyid:41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:9f:85:18:da:d3:10:75:ed:54:f8:4b:34:17:10:c9:f1:d0:
9a:a3:57:82:36:2e:6a:f4:f3:20:b8:7b:d5:3c:09:60:dc:df:
15:1a:de:45:cd:6b:20:09:b9:e3:ef:e1:9d:72:8c:d5:b4:93:
28:ff:55:5e:1c:f8:25:ae:59:f7:b7:d9:bf:52:b5:31:0e:d0:
72:7e:5c:d8:7b:ea:73:12:b4:18:91:9c:9b:3e:82:90:66:18:
ad:b7:88:46:6a:8e:39:77:1d:62:0f:85:d5:8f:c4:13:c8:db:
5c:7a:47:75:4f:95:19:34:62:d5:5e:c8:bd:e7:a8:87:dd:68:
6c:be:a2:83:d2:ec:57:be:bf:73:46:c9:db:24:15:ae:a1:b6:
98:15:43:e8:1b:7f:08:2d:86:36:ea:6a:2a:6b:b7:01:fd:c0:
11:d5:90:e8:ce:60:69:05:53:4f:dd:d8:fb:49:fd:a1:5e:b4:
32:e7:eb:cd:8a:fc:42:4f:dd:50:2f:3a:74:a5:1a:42:d8:52:
aa:2f:2d:07:e6:59:25:5f:54:b9:bb:4e:e0:45:34:7f:72:2e:
c5:66:aa:5a:81:46:78:45:51:df:0d:36:f0:d7:1a:9c:d3:fa:
78:76:c8:95:0b:8d:33:7e:7c:8e:ff:71:df:da:a2:99:96:e4:
81:ac:4c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:47:39 2026 by rpki-client