
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
File: qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft (raw, json)
Hash identifier: 9Z7YzWe4JbOlIIz0Sl+Ta9lh19FAczCdxplWiv5nVpM=
Subject key identifier: 2B:B8:CA:64:3A:57:DA:14:39:F5:D1:A8:6F:D4:26:7D:AE:8D:A0:49
Authority key identifier: A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3
Certificate issuer: /CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3
Certificate serial: 019EB76A8E873697809A1EBDA7FE319E42BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
Manifest number: 0A60
Signing time: Thu 11 Jun 2026 16:01:14 +0000
Manifest this update: Thu 11 Jun 2026 16:01:14 +0000
Manifest next update: Fri 12 Jun 2026 16:01:14 +0000
Files and hashes: 1: J_Or8KZX1wZ3vXfvww5iG8YKGng.roa (hash: d0jCHNsxIqtKvODKfik7z9iL8EdgI8lCwjcpoaXOc1E=)
2: qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl (hash: 2ITGIxl9weGNRdyRgCUuh9/p/5jhX1UgK/XODkgPoSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:6a:8e:87:36:97:80:9a:1e:bd:a7:fe:31:9e:42:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3
Validity
Not Before: Jun 11 16:01:14 2026 GMT
Not After : Jun 12 16:01:14 2026 GMT
Subject: CN=2bb8ca643a57da1439f5d1a86fd4267dae8da049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7e:c5:c7:f4:ec:6c:1e:da:5c:63:fb:ae:4d:
43:e1:56:1f:47:86:dd:ea:d3:36:a5:d6:3d:2f:e3:
54:66:6c:6e:60:12:55:cc:05:a3:b8:a6:f6:4f:07:
d0:48:a6:50:01:21:d4:22:d1:d5:48:08:52:df:81:
91:54:bd:63:e0:ec:0c:0d:22:d3:d9:19:86:69:d5:
be:81:50:67:30:96:c5:ed:fd:17:e9:0a:8f:47:9c:
54:bf:00:64:ed:a0:36:ce:90:72:3a:44:64:d4:f3:
9b:95:10:2e:ce:23:ce:09:3e:e5:c7:b8:1d:c3:26:
0f:ee:f6:1a:1e:91:66:9c:04:58:8b:28:19:09:f3:
8d:21:e7:d5:86:fa:8d:b6:76:71:05:92:59:6c:19:
4a:4c:7f:c7:af:65:d0:53:7d:d0:2a:35:42:17:9f:
7c:ee:77:65:c9:f6:3b:1d:d5:07:cf:23:95:d5:42:
e6:04:f6:9b:47:93:d9:cc:ea:10:7b:a0:4e:8e:89:
3c:2d:90:59:36:b8:bb:63:d1:08:e4:90:77:e2:86:
26:37:ff:db:8b:9b:39:e4:d6:c8:22:b0:5c:22:98:
62:f3:5d:d9:02:64:ba:d1:c7:52:a5:46:be:aa:d2:
a5:39:8d:f9:ea:46:a4:f3:46:bd:6e:a0:5b:6b:8d:
95:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B8:CA:64:3A:57:DA:14:39:F5:D1:A8:6F:D4:26:7D:AE:8D:A0:49
X509v3 Authority Key Identifier:
keyid:A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c2:a6:19:29:60:44:d4:ea:ed:58:c8:cf:d7:25:25:9e:c8:
0f:40:64:c6:dc:37:ca:d2:19:5f:72:27:7a:cc:65:85:67:38:
a0:07:61:98:57:4c:8d:c8:8e:70:07:1f:e8:f9:19:22:d6:2e:
e4:88:f5:de:58:76:e3:44:3c:2d:a8:35:83:05:60:b6:7f:a2:
14:60:07:aa:cc:5c:46:66:0e:24:22:d6:e2:17:e2:c9:7d:00:
ed:7e:e4:e9:04:f4:4d:c7:bd:c7:99:7a:39:6b:53:5b:80:5d:
ef:62:13:b9:ed:3c:bf:cb:67:2f:88:cb:0d:24:67:14:8a:75:
99:2b:a1:c5:ab:e9:b6:c8:d6:f4:19:2a:d0:19:f3:97:59:27:
e0:f0:4a:cb:cf:a1:b4:c6:b2:6b:25:c4:14:bf:fa:88:fb:b5:
f3:b4:55:79:b2:19:a4:36:2c:82:4b:57:3c:34:a6:77:b9:7e:
5d:3b:d4:d0:7c:88:4f:f2:d8:fb:af:1b:b4:16:c1:b1:42:38:
8e:ec:e8:85:ef:9e:a0:a2:84:08:86:50:85:99:1d:7e:b5:79:
44:08:2b:c8:f3:5f:f9:bb:1e:fb:89:99:39:ed:6f:f9:9f:06:
e5:51:d1:58:3d:62:a5:2b:24:2a:0d:4d:90:b2:a0:e7:ca:7d:
ff:4f:79:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:04:19 2026 by rpki-client