Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
File: QHznj0rDupAqDDjcAaDF8hJlGbA.mft (raw, json)
Hash identifier: gvY4OdZNxCI0tMycjn15FwQrUmOSGv42HIgFFptBGjw=
Subject key identifier: EE:DB:E7:47:78:86:DE:27:36:6F:3A:3D:5B:1F:FD:8F:BD:79:CA:84
Authority key identifier: 40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0
Certificate issuer: /CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0
Certificate serial: 01A06EDE5FF5ECF4DC112E6A31FE6DA6BBD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
Manifest number: 0EA7
Signing time: Sat 05 Sep 2026 00:01:02 +0000
Manifest this update: Sat 05 Sep 2026 00:01:02 +0000
Manifest next update: Sun 06 Sep 2026 00:01:02 +0000
Files and hashes: 1: QHznj0rDupAqDDjcAaDF8hJlGbA.crl (hash: TbC98SAlqSTdpTucy64eOQqVFWCVe1yXJelQjKtaKQY=)
2: UKN4qXdB5emZZX9TzM0PF4jJuRs.roa (hash: Y842Sm+wv4FkMHDbdNeBmo19SEMhJtIByCHRBpFd6qo=)
3: qOyavHaQUzWIgFJKhwDzN8qp-NU.roa (hash: 6+GcU7ai/o4JeNdvfA796blKNzslNJ8s8dxyOTcoPxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 00:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:de:5f:f5:ec:f4:dc:11:2e:6a:31:fe:6d:a6:bb:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0
Validity
Not Before: Sep 5 00:01:02 2026 GMT
Not After : Sep 6 00:01:02 2026 GMT
Subject: CN=eedbe7477886de27366f3a3d5b1ffd8fbd79ca84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5b:5e:0a:25:92:25:66:5d:36:78:de:e0:4c:
67:ce:74:8f:34:33:12:a1:71:8b:70:7d:3f:09:0d:
f1:a6:2d:d6:85:67:6e:8a:8a:75:db:74:99:c7:4c:
47:0e:e1:b8:44:46:5e:e2:35:ef:cb:4c:6b:0e:c9:
c8:ff:92:0c:a0:38:56:43:e6:2d:c1:18:58:67:09:
eb:ed:2d:ad:d6:ea:97:56:bb:5c:50:e2:1c:10:04:
92:7b:79:ac:28:68:cb:61:f1:4a:23:b8:d8:0b:ff:
8b:ac:be:d4:f8:47:5d:1c:ce:7b:76:af:7c:9a:65:
c9:d8:7a:2a:ac:3c:ea:98:22:a0:9b:fc:f7:b0:91:
13:01:8b:02:3c:38:6b:fa:48:4f:09:97:ad:a0:1b:
11:fe:5b:54:f7:a4:da:3b:e0:a1:03:30:41:80:e0:
38:8e:4a:ce:14:54:a2:64:a9:15:41:d6:89:67:85:
5c:53:5b:62:75:7b:af:0c:d4:05:d2:88:df:73:44:
4c:14:17:6b:1a:82:5c:f7:d5:50:36:79:e7:0a:5f:
0a:d0:f4:62:52:d7:a4:f1:f2:ac:ab:18:24:8e:10:
20:37:c6:55:04:01:01:07:33:41:7c:2d:0e:ca:ac:
d1:8e:f0:60:56:27:68:38:49:99:8a:14:84:20:c7:
5d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DB:E7:47:78:86:DE:27:36:6F:3A:3D:5B:1F:FD:8F:BD:79:CA:84
X509v3 Authority Key Identifier:
keyid:40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:83:51:e5:22:69:d2:b4:64:13:bf:45:f4:64:b6:4e:19:04:
14:c2:b0:94:46:4a:c2:3c:6c:a9:d2:7d:99:4c:68:d5:23:54:
0c:2a:d8:07:e9:b4:27:6a:d1:22:dc:e0:9b:8c:18:dc:ba:50:
9a:de:cd:5a:9a:78:74:7b:ac:fc:db:0d:71:b1:f6:ce:0e:fd:
d2:9f:5f:05:87:b1:e1:e9:0f:4b:63:b3:b5:41:33:48:3d:7d:
b9:15:00:5b:d3:45:e3:68:8d:68:bc:46:77:a3:95:7c:4d:83:
86:f2:fd:2f:1d:27:46:62:94:54:78:86:48:99:19:e8:24:e8:
1b:21:fa:05:05:5e:8c:a3:8f:66:dc:45:e7:b0:cc:8e:09:9b:
c0:7d:8e:19:43:6d:20:96:ce:10:84:c0:60:5a:b7:34:d2:d9:
6b:84:48:fe:08:c7:19:c2:9d:51:91:fc:5f:69:bf:03:dd:18:
66:a7:ba:0f:c2:5a:91:7d:4c:15:aa:47:6b:67:91:1a:ab:1c:
b3:42:ef:6b:c5:de:a6:58:2d:01:c4:e5:41:3c:5c:20:94:80:
08:69:91:28:14:8f:4e:57:56:48:6d:ac:3b:b8:29:ba:96:9c:
d7:88:c8:1a:64:6c:d8:b8:4e:6c:f3:3c:ea:f5:a5:01:6e:01:
d0:bb:fc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 10:07:07 2026 by rpki-client