Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/d6e721-c47e-4869-adc1-13cb308f66a3/1/QdOwOPqgIOZecYN6sLNPJO4MGts.mft
File: QdOwOPqgIOZecYN6sLNPJO4MGts.mft (raw, json)
Hash identifier: RJEr5ESeQYLOIh1w0U8cQMisCCT5IxASpFxcAV52HIE=
Subject key identifier: E4:92:85:7C:95:1D:15:F2:06:76:0E:37:7E:B1:5A:4F:AC:EB:3A:45
Authority key identifier: 41:D3:B0:38:FA:A0:20:E6:5E:71:83:7A:B0:B3:4F:24:EE:0C:1A:DB
Certificate issuer: /CN=41d3b038faa020e65e71837ab0b34f24ee0c1adb
Certificate serial: 01A0F757577D79FE3E2D892BEDD2AF3F2BC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdOwOPqgIOZecYN6sLNPJO4MGts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/d6e721-c47e-4869-adc1-13cb308f66a3/1/QdOwOPqgIOZecYN6sLNPJO4MGts.mft
Manifest number: 88
Signing time: Thu 01 Oct 2026 12:01:31 +0000
Manifest this update: Thu 01 Oct 2026 12:01:31 +0000
Manifest next update: Fri 02 Oct 2026 12:01:31 +0000
Files and hashes: 1: 0PYj6M6nRs80PGa_n3IppzJD-2Q.asa (hash: qQd/vrO+5CDXir2IL3bvHvBXxqq6ploQiA7O3KLv7+I=)
2: QdOwOPqgIOZecYN6sLNPJO4MGts.crl (hash: i67gdz1UZYL//or/Hlad2yC6kV9qTPQdfzG42TsQ3xU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/d6e721-c47e-4869-adc1-13cb308f66a3/1/QdOwOPqgIOZecYN6sLNPJO4MGts.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/d6e721-c47e-4869-adc1-13cb308f66a3/1/QdOwOPqgIOZecYN6sLNPJO4MGts.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdOwOPqgIOZecYN6sLNPJO4MGts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 12:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:57:57:7d:79:fe:3e:2d:89:2b:ed:d2:af:3f:2b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d3b038faa020e65e71837ab0b34f24ee0c1adb
Validity
Not Before: Oct 1 12:01:31 2026 GMT
Not After : Oct 2 12:01:31 2026 GMT
Subject: CN=e492857c951d15f206760e377eb15a4faceb3a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c9:1e:58:74:4d:4a:45:18:76:fa:87:f9:ea:
31:33:c6:8a:19:d2:e5:2f:c0:19:ae:b7:4b:a0:37:
e8:d1:f2:c7:7f:50:db:5d:dd:ad:30:0f:85:28:3c:
b7:ad:66:0d:50:0d:c7:3e:f1:c7:f1:c1:74:48:e1:
41:1f:d8:7b:2f:b9:42:89:a9:7f:24:2e:e3:33:7f:
76:f1:05:bd:ec:d7:77:c6:5d:d2:e1:ac:cc:14:fd:
03:dd:e5:ce:36:71:eb:b9:81:4b:53:3e:9c:9e:fd:
c0:0d:36:84:4f:bd:96:11:02:e3:30:af:40:a7:97:
40:91:7f:ee:41:8d:7c:c8:0e:da:11:35:a8:c5:9f:
db:d4:63:3e:1a:87:14:0d:29:bd:8a:63:68:c3:c6:
01:b4:46:04:14:68:5d:c9:f0:d1:9f:03:e0:d9:fd:
58:21:78:4f:5c:a5:54:5a:19:03:0d:89:34:a5:0a:
14:fb:a7:e4:1b:17:94:4a:23:24:00:44:78:fc:57:
01:61:70:69:b7:1c:13:95:cb:a6:4a:7c:76:c4:39:
5a:c2:d3:7f:dd:9d:68:c6:eb:16:35:15:d6:94:81:
ed:bc:d1:a0:9d:74:78:eb:18:fe:f1:20:91:b9:98:
e9:42:d8:73:7f:94:fc:3c:a4:23:94:d9:f0:8c:c0:
7a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:92:85:7C:95:1D:15:F2:06:76:0E:37:7E:B1:5A:4F:AC:EB:3A:45
X509v3 Authority Key Identifier:
keyid:41:D3:B0:38:FA:A0:20:E6:5E:71:83:7A:B0:B3:4F:24:EE:0C:1A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdOwOPqgIOZecYN6sLNPJO4MGts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d6e721-c47e-4869-adc1-13cb308f66a3/1/QdOwOPqgIOZecYN6sLNPJO4MGts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d6e721-c47e-4869-adc1-13cb308f66a3/1/QdOwOPqgIOZecYN6sLNPJO4MGts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ee:be:e4:60:ba:09:54:36:46:7d:65:93:a4:62:d3:8c:f9:
6f:f8:3c:58:b2:61:8b:81:f9:89:9f:56:a5:76:7a:57:be:63:
c3:47:e5:b8:c7:84:27:9f:5d:d6:cd:4c:cc:46:7b:81:7e:7b:
b7:38:dd:9e:9c:30:fc:37:b0:0b:06:02:2b:44:68:d2:6a:eb:
f8:60:bc:32:b1:bc:41:f9:8b:f5:a0:56:12:03:c9:f9:12:13:
82:24:5a:a1:0f:b5:20:8a:a8:57:51:c8:2f:0d:b2:92:eb:46:
d3:fe:07:d1:41:7b:d4:d9:18:20:f3:29:2e:ca:f7:c9:4c:a7:
4e:b2:4c:05:ec:f3:c6:50:4b:ff:4f:36:39:88:b1:30:f6:79:
1b:31:64:5d:89:fc:fa:5a:c3:13:39:55:97:fa:13:63:82:43:
bc:d7:c9:59:9c:bb:72:d7:8d:29:cf:19:65:1f:c8:6f:5a:46:
0f:87:9e:ef:35:e0:8e:64:bb:8b:e9:f2:35:86:ca:f2:11:67:
6b:4a:36:44:e7:be:8e:5e:e9:5c:9e:79:eb:87:7f:2c:22:2f:
4b:06:17:e8:fe:15:74:ea:94:d4:71:b3:82:7c:eb:24:3c:f4:
f4:41:78:49:15:61:ea:b7:2f:65:b3:05:99:fd:35:0c:c8:91:
82:15:5d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 19:39:11 2026 by rpki-client