Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
File: QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft (raw, json)
Hash identifier: jKEn/zM00TsO7sc45jZUnB+UCMpb0bB0JUziDgsHibw=
Subject key identifier: 41:EF:FF:F4:C8:AC:95:AD:19:89:74:71:DF:02:29:F1:02:D3:C0:7C
Authority key identifier: 42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2
Certificate issuer: /CN=4214088c77bd12687fd4ba9fe3159ea805888ed2
Certificate serial: 01A1A713DA969458AC28501EDE3C3C119623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
Manifest number: 1ADC
Signing time: Wed 04 Nov 2026 15:00:58 +0000
Manifest this update: Wed 04 Nov 2026 15:00:58 +0000
Manifest next update: Thu 05 Nov 2026 15:00:58 +0000
Files and hashes: 1: QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl (hash: rXBpa4wbfPyU9CDy0cf0uMvajfDRQdxpbUcC9ROfUXo=)
2: Qx55ZZjEUo3STaLz-yeXRfFXd6U.roa (hash: H6SY2nIdu7L2TEJH4MdS8DA2eloYCGNuqXlJqZac4sw=)
3: vuIHlCo4UFDYBSAD5tytHEhhhAY.roa (hash: hMc0m1Zi/iK2n4XsoGvD9oSD37NqfaVTNmYIxARhpew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a7:13:da:96:94:58:ac:28:50:1e:de:3c:3c:11:96:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4214088c77bd12687fd4ba9fe3159ea805888ed2
Validity
Not Before: Nov 4 15:00:58 2026 GMT
Not After : Nov 5 15:00:58 2026 GMT
Subject: CN=41effff4c8ac95ad19897471df0229f102d3c07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0e:05:5d:6e:24:92:8a:3d:fe:70:79:df:a1:
f5:03:b3:e5:34:49:92:f4:1a:4d:44:a0:05:9b:33:
71:5a:30:45:30:5c:ac:38:9f:4b:cc:34:a5:5b:b7:
19:4e:c3:73:82:e1:a6:19:23:37:d1:5b:06:af:46:
02:ae:ae:95:0a:60:50:36:f3:a7:b7:d3:34:c7:ac:
d0:8c:0a:7e:17:a0:af:94:31:40:9c:cc:4e:a4:eb:
6b:74:7e:0e:fc:ca:dd:cc:14:df:c1:58:e0:26:08:
d5:bc:a6:f6:e4:57:de:6d:11:55:88:ba:ae:df:6d:
0e:37:d2:0b:81:58:9a:49:af:bb:15:99:c2:f8:4d:
00:a8:0e:2e:1a:d2:c2:ed:60:ed:3f:55:39:2d:84:
1b:b6:af:ca:ac:72:23:f3:d5:99:2c:d6:ea:34:74:
54:4b:f2:7b:71:7e:33:f7:cb:9e:3d:71:70:30:17:
7d:12:8a:9e:39:3b:a3:ae:0b:df:d5:71:c0:89:7b:
a7:58:54:45:5d:e5:d7:6e:4c:2e:d0:a9:8e:4c:ec:
39:87:86:d8:1b:eb:2e:38:c6:04:3a:83:8e:08:f1:
03:8d:58:27:9b:6f:d7:18:01:eb:39:0a:e3:c9:16:
d7:d6:76:09:3d:9b:87:ce:3b:1f:7d:af:10:ed:30:
28:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:EF:FF:F4:C8:AC:95:AD:19:89:74:71:DF:02:29:F1:02:D3:C0:7C
X509v3 Authority Key Identifier:
keyid:42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:92:79:20:5e:2a:e7:53:37:92:3f:54:2e:d3:22:15:45:64:
d7:a6:34:e7:f5:f9:bc:b5:a6:f4:be:a5:1b:fe:50:36:23:9b:
3a:ea:25:1d:42:f1:65:81:44:51:a7:69:b4:23:04:6b:df:20:
23:87:f4:c6:95:6e:ce:c1:f4:9e:ec:2c:ed:1a:28:be:82:6b:
a6:74:e2:89:39:14:6c:3a:b4:78:47:d0:03:4d:4c:07:ab:e6:
55:da:06:ca:dc:b5:40:39:ce:a9:9b:0c:27:ab:da:16:c9:37:
f6:64:56:89:ea:1e:26:38:11:e8:69:8e:05:6a:20:28:ee:28:
15:44:f1:82:ff:f7:9d:c4:67:6d:54:e1:db:61:66:f2:3b:d8:
d4:7d:da:86:e5:d5:ce:f3:56:43:20:8d:1d:65:af:75:63:42:
d5:ea:cf:ac:ec:b7:a1:84:a3:f8:05:6f:e9:23:96:3c:82:24:
4f:df:ed:c7:87:0e:86:74:b0:a9:49:fc:72:a0:f7:8f:e3:63:
6e:45:e3:ad:f7:ef:8b:74:b7:d9:8c:be:2f:82:59:9e:23:27:
a1:64:17:1b:90:cb:e0:60:a0:68:55:b1:d4:74:ba:73:3c:23:
e1:c4:60:a1:a9:42:d6:72:8c:3a:89:0d:1b:d5:10:b1:37:ad:
26:29:fa:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 19:14:54 2026 by rpki-client