Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
File: qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft (raw, json)
Hash identifier: DTjChswAc+SJlTiGEcPEeMAbQmYYYrYf7RYDOEDCBMI=
Subject key identifier: B3:4F:7A:57:E4:AB:E4:2D:BA:3F:D3:80:2C:23:13:ED:B1:7F:27:83
Authority key identifier: A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3
Certificate issuer: /CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3
Certificate serial: 019DCDBDD49A56042A7E098AD3D277F11306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
Manifest number: 09E7
Signing time: Mon 27 Apr 2026 07:01:03 +0000
Manifest this update: Mon 27 Apr 2026 07:01:03 +0000
Manifest next update: Tue 28 Apr 2026 07:01:03 +0000
Files and hashes: 1: J_Or8KZX1wZ3vXfvww5iG8YKGng.roa (hash: d0jCHNsxIqtKvODKfik7z9iL8EdgI8lCwjcpoaXOc1E=)
2: qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl (hash: WMATDseHz8RtV+bGuAh/8l+Wcad/zpUj76i22Nxf3TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:bd:d4:9a:56:04:2a:7e:09:8a:d3:d2:77:f1:13:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3
Validity
Not Before: Apr 27 07:01:03 2026 GMT
Not After : Apr 28 07:01:03 2026 GMT
Subject: CN=b34f7a57e4abe42dba3fd3802c2313edb17f2783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a9:89:8f:b3:ff:cd:c3:5c:48:90:93:02:2f:
c2:0a:29:a9:84:e5:87:ee:8c:55:ec:3a:f2:79:5e:
77:8a:70:47:34:a7:01:80:3c:f9:f4:77:87:36:59:
9c:e4:db:db:0f:21:08:70:22:3e:b5:fd:10:1c:9c:
73:f1:66:cb:e5:d4:49:53:af:99:13:0c:02:c1:17:
c6:40:50:76:66:d2:48:0b:cb:f8:7d:4e:08:6f:49:
a6:a3:4f:e2:1b:2e:80:6e:6a:51:e9:e1:4d:64:6c:
09:3e:ca:89:cd:61:13:91:b7:5e:fd:d5:4f:03:99:
fd:8f:b3:b4:59:71:56:a9:19:2e:77:d4:91:c2:32:
d7:3c:77:23:b5:83:3a:6b:ef:59:34:5d:a6:f0:23:
af:ba:5e:70:30:b4:62:85:f2:4f:cc:2f:50:98:05:
cc:9e:ca:1d:32:c4:42:89:0c:33:ea:02:bc:05:f0:
c1:64:7a:1c:4b:61:67:bf:44:29:a4:a4:b4:de:39:
29:83:55:1a:6b:c9:94:92:67:b1:0f:ab:e5:0b:c7:
e7:0d:c2:1d:e9:88:24:84:ad:5d:d6:69:cb:63:9d:
66:0d:93:4b:e8:8b:53:a4:57:5d:e8:40:56:9c:49:
27:f7:9a:a3:60:d6:cb:4a:d4:0b:41:ca:9f:98:9f:
2e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4F:7A:57:E4:AB:E4:2D:BA:3F:D3:80:2C:23:13:ED:B1:7F:27:83
X509v3 Authority Key Identifier:
keyid:A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:2f:c3:c9:f1:a2:6f:8d:4b:e6:ef:d1:ec:ff:32:94:be:45:
f2:1b:9b:79:8e:ed:27:ab:9f:9c:f2:2d:31:45:68:db:40:e1:
4a:46:bb:7a:2c:3e:fa:c5:8c:80:a1:8a:a0:1d:60:1c:bf:b1:
e1:67:8f:1d:5e:09:ad:38:88:3e:00:53:d4:58:fc:a4:4f:cb:
7d:d0:9d:e6:5c:dd:27:99:c7:5d:ce:ef:69:9a:d3:9a:51:b5:
fc:e3:e4:52:a1:eb:fd:f9:61:5e:64:38:63:bb:02:f5:6c:f6:
3e:96:66:81:d4:ec:a4:d9:78:9c:b9:f2:c1:5d:f7:3b:99:ed:
28:d1:86:90:66:a5:d6:f4:8f:34:af:1f:20:a7:1a:e3:25:8e:
39:04:ed:87:e2:8b:1d:0c:26:e9:e9:03:09:e4:cb:a7:04:cb:
03:cc:d8:46:01:31:70:ba:61:93:6c:d5:42:83:63:5a:df:c2:
c7:9d:dc:16:fd:b1:00:d9:a2:78:a5:ba:9c:11:61:f6:88:2d:
41:49:f7:eb:dc:45:7c:35:89:f2:40:e4:36:f3:ea:fb:4d:69:
c5:e7:d8:22:4f:70:3e:32:19:6d:22:62:2d:fc:b9:14:ba:86:
d2:36:6b:9a:93:e1:0e:c3:7a:a7:d2:e4:90:0c:6b:a6:bf:8e:
f6:d4:b1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:00:42 2026 by rpki-client