Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.mft
File: QF_8dK6SOGr7fOdw8DkOkNTN4wY.mft (raw, json)
Hash identifier: 779dC7pxOKS6ttMMdpkf5QJf4vYp69mNpzs176X1NDo=
Subject key identifier: 23:FA:DF:B6:C7:30:0E:10:DD:C5:3D:19:FF:EC:4F:17:75:B9:72:49
Authority key identifier: 40:5F:FC:74:AE:92:38:6A:FB:7C:E7:70:F0:39:0E:90:D4:CD:E3:06
Certificate issuer: /CN=405ffc74ae92386afb7ce770f0390e90d4cde306
Certificate serial: 01A09BEE542A8A5BDD097795DF4E0FC31066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QF_8dK6SOGr7fOdw8DkOkNTN4wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.mft
Manifest number: 0698
Signing time: Sun 13 Sep 2026 18:01:22 +0000
Manifest this update: Sun 13 Sep 2026 18:01:22 +0000
Manifest next update: Mon 14 Sep 2026 18:01:22 +0000
Files and hashes: 1: QF_8dK6SOGr7fOdw8DkOkNTN4wY.crl (hash: hi0+dvckq7q3zsWCdxc7VAJlymTDCTyw0lZuEoTuiu4=)
2: wMAaF9FeE8vQPeGbyh-_gFZr-RQ.roa (hash: U3G2ZKAfz9i+c+9iabqEffqSxjMJIKuTC8d9C/LqbOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QF_8dK6SOGr7fOdw8DkOkNTN4wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 18:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9b:ee:54:2a:8a:5b:dd:09:77:95:df:4e:0f:c3:10:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=405ffc74ae92386afb7ce770f0390e90d4cde306
Validity
Not Before: Sep 13 18:01:22 2026 GMT
Not After : Sep 14 18:01:22 2026 GMT
Subject: CN=23fadfb6c7300e10ddc53d19ffec4f1775b97249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:77:02:27:77:f5:3d:9b:12:c3:3b:93:a3:3c:
b5:df:83:c5:b2:2c:06:2d:51:d5:8d:86:e3:78:30:
13:bd:81:39:6b:61:42:90:9d:7b:e3:88:1f:fe:e6:
01:e0:6c:30:a3:f4:2c:e0:09:6a:c0:8e:ca:d5:1e:
5d:96:55:32:e7:c1:fb:20:d8:e0:5b:8d:30:54:c0:
aa:34:ea:d7:74:71:54:bc:eb:1f:09:18:8e:06:3b:
55:e6:41:1f:17:c1:ec:b7:29:45:a6:fe:0f:96:9a:
88:47:7a:25:3b:02:05:10:b8:2b:39:31:23:86:b3:
20:c4:3c:56:c9:56:b6:50:93:62:dd:53:a9:37:b2:
a5:47:e8:53:09:6d:cf:9f:26:ca:d9:5e:ae:5c:f1:
91:f0:07:ff:94:02:b5:38:85:1f:f7:c6:50:09:08:
c3:41:b4:ae:88:3d:5f:24:7b:3f:f1:e7:a0:d6:b6:
16:7b:18:7b:e9:19:63:f1:c9:26:62:6d:26:d4:26:
11:61:b2:d0:02:ec:f8:1c:d4:72:9f:36:7f:cf:8a:
06:33:67:dc:89:0a:ce:30:3c:8b:33:a2:93:66:4f:
0a:4e:e1:4a:17:9b:35:8c:f3:6f:27:54:70:ed:1c:
c5:42:1b:15:d2:74:05:58:93:3e:cb:bf:dc:49:bb:
c3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FA:DF:B6:C7:30:0E:10:DD:C5:3D:19:FF:EC:4F:17:75:B9:72:49
X509v3 Authority Key Identifier:
keyid:40:5F:FC:74:AE:92:38:6A:FB:7C:E7:70:F0:39:0E:90:D4:CD:E3:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QF_8dK6SOGr7fOdw8DkOkNTN4wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:97:6d:45:ee:57:91:23:d6:ca:f2:dc:e0:20:33:b7:b1:5a:
8b:be:09:b5:25:89:ca:64:2a:c0:62:47:01:c7:ed:2f:f9:b5:
17:af:49:ad:18:fc:e4:ad:9d:c7:09:9c:40:31:5e:05:a7:02:
40:a1:40:52:7f:ea:4d:ca:49:c9:cd:0f:c0:31:50:aa:98:de:
84:2b:35:28:4e:d3:bf:15:25:b0:62:8e:f8:2f:95:6e:82:29:
09:02:97:c1:9a:26:7f:5a:59:c3:82:0a:f8:c8:1d:51:5e:9d:
52:d5:57:3d:2b:8a:55:29:0b:0f:ff:22:e5:dc:ac:07:52:be:
08:1e:e8:fa:3a:c1:4c:5a:13:04:b8:f0:52:cb:5f:48:bb:e9:
a5:f2:a6:e5:89:e1:a9:cf:22:52:1d:d1:90:ef:4c:40:53:d6:
b3:db:7c:7c:a8:f6:3d:eb:79:b1:bf:07:1b:a6:0a:27:ea:e1:
5a:3f:e2:03:fa:8b:b3:32:1a:5e:80:7a:41:c2:05:f0:98:05:
50:19:bc:a1:07:21:99:f2:eb:ee:bb:20:f7:c3:de:a8:9a:b3:
de:fc:ab:4b:4f:68:14:3a:53:89:a8:26:19:05:da:92:6b:36:
12:c2:80:6b:39:98:61:94:91:b2:64:fc:18:0a:4d:19:4b:1f:
dc:e5:57:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 01:20:24 2026 by rpki-client