Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/0d3f44-db1b-4192-8c42-40f2a93727a4/1/QXF5yEiCEh630SJJWnrH6joAcMg.mft
File: QXF5yEiCEh630SJJWnrH6joAcMg.mft (raw, json)
Hash identifier: G1IAd+K3ou6gXof262/f7rQr2Pv4Vjtac/nNX8gu+2Q=
Subject key identifier: 9A:A1:B7:39:1E:37:CA:66:94:4A:CF:8F:FE:18:10:E2:14:29:BB:78
Authority key identifier: 41:71:79:C8:48:82:12:1E:B7:D1:22:49:5A:7A:C7:EA:3A:00:70:C8
Certificate issuer: /CN=417179c84882121eb7d122495a7ac7ea3a0070c8
Certificate serial: 01A080ADB214511F128FF034B37C3E6DAE7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXF5yEiCEh630SJJWnrH6joAcMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/0d3f44-db1b-4192-8c42-40f2a93727a4/1/QXF5yEiCEh630SJJWnrH6joAcMg.mft
Manifest number: 0216
Signing time: Tue 08 Sep 2026 11:01:02 +0000
Manifest this update: Tue 08 Sep 2026 11:01:02 +0000
Manifest next update: Wed 09 Sep 2026 11:01:02 +0000
Files and hashes: 1: QXF5yEiCEh630SJJWnrH6joAcMg.crl (hash: k95yTQhC4GDsRK5yPH27g04opNWMwSTgxjPv7BRi8ec=)
2: gFG9Wl84d8X9xFisW6jM5nOXCEU.roa (hash: PgnlQFmyF6NB2/hGt3DIQB9LhPjYBLOyS8GHZ24ktDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/0d3f44-db1b-4192-8c42-40f2a93727a4/1/QXF5yEiCEh630SJJWnrH6joAcMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/0d3f44-db1b-4192-8c42-40f2a93727a4/1/QXF5yEiCEh630SJJWnrH6joAcMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXF5yEiCEh630SJJWnrH6joAcMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:ad:b2:14:51:1f:12:8f:f0:34:b3:7c:3e:6d:ae:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417179c84882121eb7d122495a7ac7ea3a0070c8
Validity
Not Before: Sep 8 11:01:02 2026 GMT
Not After : Sep 9 11:01:02 2026 GMT
Subject: CN=9aa1b7391e37ca66944acf8ffe1810e21429bb78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:31:ac:94:ac:0d:db:09:c3:3e:97:20:f2:b4:
b8:e0:f3:1c:f8:6a:a4:d9:9a:c1:35:aa:5a:e4:1e:
ad:47:01:56:bb:c9:71:72:2c:11:9c:df:e8:8d:ce:
c8:1e:27:5c:45:ab:3b:7d:94:15:83:50:49:4a:fc:
94:05:f8:8b:cd:09:8e:e7:2c:b1:20:ab:bb:6d:34:
f2:6d:ad:37:cf:ac:c7:29:96:09:ce:ac:a9:82:f9:
65:f0:b8:02:3c:ff:e2:3b:4b:02:be:05:23:5d:26:
78:9d:5e:7e:a4:83:a9:69:00:1a:fd:8e:a0:92:29:
c8:12:16:fc:2e:df:f4:6f:27:dc:55:b8:f7:1b:d5:
01:6b:34:c6:aa:c3:30:90:f9:a2:27:4f:bb:68:f1:
7b:3f:40:1d:c2:a5:f5:ea:b1:04:4f:e5:78:40:fd:
eb:a0:cd:88:98:24:c9:b8:9d:2e:92:bc:3f:a8:bc:
c9:2a:ea:0a:17:30:04:0d:81:c5:2c:c5:21:f5:1f:
3c:5d:eb:55:dd:18:57:46:24:a4:ea:79:68:62:bb:
9d:0e:c3:82:1b:14:b8:dc:e5:12:23:d2:22:71:01:
24:32:a9:bd:4a:9a:c6:8a:b1:80:56:a4:9e:c6:66:
d4:62:4c:57:86:f1:21:69:ab:16:0f:e0:7e:29:c2:
cc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A1:B7:39:1E:37:CA:66:94:4A:CF:8F:FE:18:10:E2:14:29:BB:78
X509v3 Authority Key Identifier:
keyid:41:71:79:C8:48:82:12:1E:B7:D1:22:49:5A:7A:C7:EA:3A:00:70:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXF5yEiCEh630SJJWnrH6joAcMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0d3f44-db1b-4192-8c42-40f2a93727a4/1/QXF5yEiCEh630SJJWnrH6joAcMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0d3f44-db1b-4192-8c42-40f2a93727a4/1/QXF5yEiCEh630SJJWnrH6joAcMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:fe:4e:46:1c:e7:57:43:5f:b8:45:78:d8:fa:f1:48:b6:8d:
1e:47:fb:a5:84:0e:5e:61:b7:e3:99:78:b8:20:41:dc:33:3f:
58:ff:e1:76:40:23:da:9d:a5:4f:86:07:fa:19:19:b7:7d:1f:
ed:62:80:fc:9a:3f:f4:a7:95:bb:4b:7b:59:c3:80:39:5d:30:
56:cf:8a:6e:cc:d8:bd:d0:c5:08:3f:c3:04:c0:6c:cb:f4:a7:
5b:a7:87:c7:16:43:68:91:16:b2:03:c9:e1:ee:1e:d9:08:99:
d3:36:e5:24:0a:d7:bc:0c:20:08:49:52:d5:b5:25:28:1c:00:
eb:98:20:8c:61:12:a7:23:a8:72:5c:34:f0:79:39:31:36:a2:
f5:f6:4e:0c:16:2c:0c:0e:ee:25:5f:92:69:e4:7c:eb:d2:4e:
14:2d:dc:36:8a:f7:99:e9:31:3e:ec:1e:b3:4e:61:51:e8:ac:
3f:c3:74:fd:48:91:2e:43:45:cd:e3:e2:77:af:b0:2b:98:23:
36:be:5e:78:34:ed:92:e2:6f:da:84:3e:63:1a:a8:ff:6e:dc:
06:3e:cc:32:34:45:99:a1:da:65:29:8a:de:0a:7d:1c:30:36:
4d:b2:58:fa:56:ed:61:30:27:e6:8a:9e:7c:10:a8:91:dd:d1:
2f:fa:4c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 20:41:15 2026 by rpki-client