Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/QDkoSd3TCx3szH9o1Ipo0IJlqwo.mft
File: QDkoSd3TCx3szH9o1Ipo0IJlqwo.mft (raw, json)
Hash identifier: lNp5/rC08ybV1ooPDDeL7Q/pP8p9bAdrgudfe/rndcs=
Subject key identifier: B7:25:52:B8:DC:61:07:48:0E:4F:F4:87:15:DB:00:DB:9D:D0:53:F6
Authority key identifier: 40:39:28:49:DD:D3:0B:1D:EC:CC:7F:68:D4:8A:68:D0:82:65:AB:0A
Certificate issuer: /CN=40392849ddd30b1deccc7f68d48a68d08265ab0a
Certificate serial: 01A020552A7803C241A2D2BE13D0DADBB6CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDkoSd3TCx3szH9o1Ipo0IJlqwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/QDkoSd3TCx3szH9o1Ipo0IJlqwo.mft
Manifest number: 8A
Signing time: Thu 20 Aug 2026 18:00:47 +0000
Manifest this update: Thu 20 Aug 2026 18:00:47 +0000
Manifest next update: Fri 21 Aug 2026 18:00:47 +0000
Files and hashes: 1: JhIdpwixHhL4kNaauNM8xdlIml4.roa (hash: iCB8dbhDO0FjWlHMp0rp4KAWeNAdcDsy/o0K/cauhfI=)
2: QDkoSd3TCx3szH9o1Ipo0IJlqwo.crl (hash: erCfqIQENGcfdF0TGYhSB7PbpF5wAZW/fVurBQdfXo0=)
3: y6s9GE4v73HgJjdNT9WT8fmSBKQ.roa (hash: IQLDH3j421sCsgVzuO3PB/u22oWNjY8m7UXITCQLVuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/QDkoSd3TCx3szH9o1Ipo0IJlqwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/QDkoSd3TCx3szH9o1Ipo0IJlqwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QDkoSd3TCx3szH9o1Ipo0IJlqwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 18:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:55:2a:78:03:c2:41:a2:d2:be:13:d0:da:db:b6:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40392849ddd30b1deccc7f68d48a68d08265ab0a
Validity
Not Before: Aug 20 18:00:47 2026 GMT
Not After : Aug 21 18:00:47 2026 GMT
Subject: CN=b72552b8dc6107480e4ff48715db00db9dd053f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:82:af:c9:f8:8c:0d:69:8a:8d:10:40:cf:ef:
dd:17:bf:87:74:72:5d:6e:f9:d8:da:cf:3a:87:63:
48:b0:af:01:9e:92:ec:7c:67:b5:42:bf:86:6f:6c:
eb:80:c3:08:bb:e8:74:1f:03:4f:01:4b:01:b3:2b:
47:68:23:27:1c:e7:93:38:c4:34:83:e9:52:67:a8:
f6:ee:d4:e7:eb:29:fc:27:be:0d:cc:3b:46:88:09:
ca:cf:94:ac:65:61:d9:4f:93:13:5d:d5:1b:00:57:
da:46:26:86:87:83:94:4a:40:48:ce:2d:99:83:22:
cf:dc:26:27:e4:ad:4c:6b:6b:8e:af:d4:1a:15:b4:
90:72:54:68:44:57:2c:5d:d8:2b:34:30:1d:60:5e:
49:ec:b4:68:cf:a0:cf:a5:1a:6a:34:89:ad:61:ea:
98:2b:97:45:c1:d8:e3:6e:d3:41:69:2b:ee:b5:83:
4c:41:55:ad:3f:d1:7f:3d:3a:00:cf:31:0e:ee:47:
4e:1e:c8:d8:5f:6a:5d:da:70:40:25:18:2f:a6:f3:
65:25:1e:a3:ba:82:31:44:d0:eb:20:43:28:ee:b1:
cb:a6:9c:a9:0a:f7:84:af:31:0e:47:3c:e8:68:46:
56:a6:74:31:0b:ad:af:b9:97:97:a7:ea:d2:be:c8:
92:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:25:52:B8:DC:61:07:48:0E:4F:F4:87:15:DB:00:DB:9D:D0:53:F6
X509v3 Authority Key Identifier:
keyid:40:39:28:49:DD:D3:0B:1D:EC:CC:7F:68:D4:8A:68:D0:82:65:AB:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDkoSd3TCx3szH9o1Ipo0IJlqwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/QDkoSd3TCx3szH9o1Ipo0IJlqwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/QDkoSd3TCx3szH9o1Ipo0IJlqwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:01:17:d8:7e:00:78:fc:52:de:56:62:8b:70:a5:d1:e0:59:
f5:91:a1:30:8e:7f:32:e6:89:38:b8:7e:6f:8c:0b:2a:d5:ec:
e4:4f:60:4d:57:9b:b4:6c:3b:85:cb:c0:eb:08:e6:8a:85:67:
1e:03:e6:1f:8a:70:fb:7c:2d:ca:40:32:2d:a9:77:b7:6a:72:
fb:2d:26:f6:a3:07:ef:7d:98:de:9d:10:d9:fc:aa:7a:1c:ca:
93:09:ce:fb:d9:cf:f8:08:4d:dc:75:f1:b2:7d:c4:e6:fd:36:
5a:5d:55:a6:e2:e7:44:b4:e7:5f:e3:62:00:f9:57:b6:db:a1:
5b:f5:59:b4:9b:42:83:f5:af:00:40:ea:c0:eb:67:a0:eb:cf:
0d:60:b7:e3:45:00:50:12:88:f3:22:f6:3e:f2:b4:34:22:5a:
e0:cc:f7:b3:68:2c:3e:7f:6a:b5:c4:cd:13:c8:d6:b0:35:50:
3f:b9:31:ca:c8:7a:d0:e5:b0:2a:b4:8c:20:cf:c8:13:7a:74:
cf:be:7c:30:38:09:d6:0b:a3:48:4b:45:f1:05:dc:ca:09:19:
90:f4:0c:77:d7:7c:2f:7c:49:28:61:01:26:63:01:c3:a1:3d:
93:65:2c:e7:ba:d5:86:85:31:00:13:d5:a1:d7:a4:70:3e:2c:
79:d2:30:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:07:02 2026 by rpki-client