Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
File: QftrFwgzUAawpqrGUL-v8_yNKSw.mft (raw, json)
Hash identifier: +qlzBSikHHMqwk84iWPSZH/exxOA4dIRmcBGUoUBzYU=
Subject key identifier: 43:BB:9B:76:9E:A6:B0:1D:3C:39:D1:1A:C1:14:E8:8A:9A:0B:36:91
Authority key identifier: 41:FB:6B:17:08:33:50:06:B0:A6:AA:C6:50:BF:AF:F3:FC:8D:29:2C
Certificate issuer: /CN=41fb6b1708335006b0a6aac650bfaff3fc8d292c
Certificate serial: 01A08AC3B0912DEE8E3AA48B65D6E748BBE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
Manifest number: 1A4D
Signing time: Thu 10 Sep 2026 10:01:15 +0000
Manifest this update: Thu 10 Sep 2026 10:01:15 +0000
Manifest next update: Fri 11 Sep 2026 10:01:15 +0000
Files and hashes: 1: 38IcWrFWJbqE37FYpFMigdsHVdo.roa (hash: jTZcDNir5nH2T9oJuhPtVnEcZ5OgfBAR2idpIej2Fr4=)
2: QftrFwgzUAawpqrGUL-v8_yNKSw.crl (hash: 0oYTPwBnH7l3byZSg87CttyM5Tq5lu1YUpaetuGbsNA=)
3: S9un40BglrRD8oUoRwpeEoCPKzQ.roa (hash: 63quj0FUggFB47Cme3ZNE0Mctu62nOnwW9NKWHljeOQ=)
4: nLIrARXN9dPSDCt_sdmjJM0dIgA.roa (hash: g+OtbxwAHIUNiByLd40WQVbq7MwXJk9aaDtEPJLR4Ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:b0:91:2d:ee:8e:3a:a4:8b:65:d6:e7:48:bb:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fb6b1708335006b0a6aac650bfaff3fc8d292c
Validity
Not Before: Sep 10 10:01:15 2026 GMT
Not After : Sep 11 10:01:15 2026 GMT
Subject: CN=43bb9b769ea6b01d3c39d11ac114e88a9a0b3691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:11:c1:ff:23:75:92:fd:d4:25:15:1d:52:dd:
9b:24:84:45:18:cf:33:31:29:a4:22:24:c2:47:6f:
ae:36:e3:e0:a8:01:9e:03:16:4d:db:14:4b:a4:ea:
65:7a:73:69:6e:d4:55:bf:6f:52:7b:f6:0a:81:1c:
9b:ef:fc:24:d0:ae:01:3d:1b:df:a4:7d:48:e3:42:
0a:e0:a3:18:b2:b9:45:52:0d:6d:b6:6c:05:a5:2f:
d1:be:d4:06:de:33:1c:53:cc:2f:34:ae:91:86:e5:
60:8d:61:5f:cc:a8:c0:04:1f:2d:13:46:63:06:0a:
e4:dd:d3:f8:55:72:b7:5b:fb:62:77:48:09:28:6f:
3c:3c:1d:a5:ee:53:fc:09:01:3f:d8:3d:0b:c1:ff:
62:aa:84:67:86:b5:51:b1:b3:cd:a8:05:f3:b1:fb:
f8:4a:ea:fc:07:02:48:77:30:f9:22:b3:3d:62:a5:
c0:d2:28:5e:26:5e:e3:cc:9f:14:a8:73:d1:9d:16:
af:4e:9e:52:a5:1f:ed:8e:11:de:07:6a:1c:b5:fc:
59:20:ac:38:17:57:4c:4c:1a:74:0a:7a:aa:b6:3d:
6f:e7:e0:0a:3b:20:89:91:b6:45:2b:ba:be:f6:0f:
aa:06:b8:cf:3b:13:62:fd:12:43:88:f4:6f:69:8d:
70:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BB:9B:76:9E:A6:B0:1D:3C:39:D1:1A:C1:14:E8:8A:9A:0B:36:91
X509v3 Authority Key Identifier:
keyid:41:FB:6B:17:08:33:50:06:B0:A6:AA:C6:50:BF:AF:F3:FC:8D:29:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a2:b9:df:7a:30:aa:93:5c:0b:3e:fb:ec:81:19:1e:cf:eb:
f1:18:0c:91:14:45:bf:28:24:90:40:6c:a3:09:50:80:b9:31:
58:fd:27:62:5a:eb:46:24:df:d5:1e:99:d0:70:5b:d1:40:bf:
05:e6:cb:89:2b:9c:90:7b:32:00:65:d4:b6:d4:db:d3:05:49:
75:85:ca:bb:11:0f:43:cc:8e:b9:ff:c7:5e:f4:ae:10:07:7c:
5d:fc:80:19:54:c6:eb:48:db:b3:ad:3c:7c:4c:bc:9b:3d:1e:
e6:d7:b7:9d:19:ce:53:07:98:74:3e:eb:2e:52:c9:59:e4:97:
c1:4b:af:6c:bc:23:d5:c8:b4:a5:4c:ec:56:c9:92:75:1a:5f:
05:a9:ec:88:cc:89:c6:a9:47:b8:76:d6:93:79:70:aa:a3:bc:
25:dd:3d:6c:e0:0b:08:5a:07:76:9c:69:dd:3c:02:cf:5c:4d:
38:03:34:f0:a0:ee:77:5e:fd:02:eb:76:9f:fc:1a:e7:9b:ae:
30:10:69:a8:a3:e5:92:98:a1:cd:71:58:cf:b7:c2:f3:7d:d6:
b7:0a:53:d4:1a:d8:b0:dd:a8:e3:40:f7:1b:75:85:ec:47:de:
07:6c:c2:d6:17:d9:c6:ec:17:52:6a:79:18:28:1a:eb:b9:c6:
ad:e5:36:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:16:12 2026 by rpki-client