Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/QDkoSd3TCx3szH9o1Ipo0IJlqwo.mft
File: QDkoSd3TCx3szH9o1Ipo0IJlqwo.mft (raw, json)
Hash identifier: BVoytBB3hisBw4u3c+mkuZJ+ZcdErC9izlGoDtWi/DI=
Subject key identifier: E4:53:C2:44:77:72:38:BE:95:E9:64:AE:B3:FF:B5:90:76:AD:A3:B2
Authority key identifier: 40:39:28:49:DD:D3:0B:1D:EC:CC:7F:68:D4:8A:68:D0:82:65:AB:0A
Certificate issuer: /CN=40392849ddd30b1deccc7f68d48a68d08265ab0a
Certificate serial: 01A12AD6DF53F663A658933377428804C006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDkoSd3TCx3szH9o1Ipo0IJlqwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/QDkoSd3TCx3szH9o1Ipo0IJlqwo.mft
Manifest number: 0114
Signing time: Sun 11 Oct 2026 12:01:27 +0000
Manifest this update: Sun 11 Oct 2026 12:01:27 +0000
Manifest next update: Mon 12 Oct 2026 12:01:27 +0000
Files and hashes: 1: JhIdpwixHhL4kNaauNM8xdlIml4.roa (hash: iCB8dbhDO0FjWlHMp0rp4KAWeNAdcDsy/o0K/cauhfI=)
2: QDkoSd3TCx3szH9o1Ipo0IJlqwo.crl (hash: 8iHUFe1v9lUk2KjkUaVIekPzbLKnM046V6Wiqz9gfXA=)
3: y6s9GE4v73HgJjdNT9WT8fmSBKQ.roa (hash: IQLDH3j421sCsgVzuO3PB/u22oWNjY8m7UXITCQLVuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/QDkoSd3TCx3szH9o1Ipo0IJlqwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/QDkoSd3TCx3szH9o1Ipo0IJlqwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QDkoSd3TCx3szH9o1Ipo0IJlqwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 12:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:d6:df:53:f6:63:a6:58:93:33:77:42:88:04:c0:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40392849ddd30b1deccc7f68d48a68d08265ab0a
Validity
Not Before: Oct 11 12:01:27 2026 GMT
Not After : Oct 12 12:01:27 2026 GMT
Subject: CN=e453c244777238be95e964aeb3ffb59076ada3b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:df:9e:b9:74:41:fa:7f:99:5c:28:2c:8f:3b:
2e:ac:79:3d:20:4d:e0:df:0c:1e:1e:a0:8e:a3:55:
ba:07:f1:4b:dc:50:55:5b:5f:77:ca:74:cc:84:3b:
f8:4e:3a:2b:66:5d:3b:e5:53:2d:d1:75:da:c1:ab:
ed:45:90:22:45:66:26:e5:76:99:cd:06:99:27:5a:
15:15:e3:41:5a:d5:67:dd:d3:46:b2:c4:2c:8b:db:
88:fe:b1:31:08:e2:81:67:b9:8c:47:25:fe:ab:85:
36:74:b9:f9:5c:62:58:d5:d7:7c:37:a3:f6:5d:9a:
58:c3:eb:d4:ac:b1:41:c7:63:2f:e4:db:ab:b0:0b:
e1:7f:ca:90:72:c0:2e:38:93:0d:a7:fe:c1:50:3e:
34:ea:2f:10:ac:64:35:84:c0:f9:ee:a5:81:33:32:
e7:a0:78:09:0c:f0:2b:5c:d4:bd:ef:20:b0:8f:04:
34:81:75:13:d8:46:c7:2f:0f:7d:d5:df:b3:ec:2f:
61:06:ff:67:4c:37:db:19:29:ea:a2:f6:56:ec:10:
54:22:d5:0d:30:6e:7b:0e:09:05:18:fc:52:81:66:
15:06:c6:56:f3:cc:3e:66:3b:5f:12:f4:61:8f:4f:
85:66:af:6f:8b:c5:d3:d8:a0:3e:cd:da:e6:a4:82:
f1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:53:C2:44:77:72:38:BE:95:E9:64:AE:B3:FF:B5:90:76:AD:A3:B2
X509v3 Authority Key Identifier:
keyid:40:39:28:49:DD:D3:0B:1D:EC:CC:7F:68:D4:8A:68:D0:82:65:AB:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDkoSd3TCx3szH9o1Ipo0IJlqwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/QDkoSd3TCx3szH9o1Ipo0IJlqwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/QDkoSd3TCx3szH9o1Ipo0IJlqwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:93:bd:ac:ad:60:6b:d4:ac:44:7a:c3:2e:17:a4:cd:60:8d:
22:a5:46:45:70:c6:dd:e0:2f:55:d2:a0:0e:e3:d0:a9:f3:a0:
ba:29:ad:c9:5d:95:f4:87:b5:66:d9:26:c0:5c:38:91:04:1d:
26:a8:2e:fe:1e:f6:6d:4e:d0:bb:dd:b2:48:0f:40:38:b5:a9:
b1:98:63:95:55:f3:b9:34:39:10:87:e8:45:74:58:a4:54:c2:
bd:8a:34:3b:9a:30:77:37:10:6b:87:ef:38:c7:ee:73:bd:47:
a1:a5:80:6f:f3:fb:c2:13:3e:ea:a6:48:03:76:5e:20:c0:41:
c2:b3:6f:fe:1c:ff:0a:90:99:24:f4:7f:25:23:41:1f:78:7e:
12:0b:fd:dd:d1:1c:35:1b:22:60:d2:53:90:8b:a7:5e:58:87:
30:18:b4:1d:42:6f:27:0a:d6:18:40:99:1c:77:f4:a6:1d:55:
b2:e4:65:19:c5:20:1c:19:7e:64:5b:89:8d:30:cc:82:05:81:
7d:52:c0:c8:92:72:0b:66:50:2b:41:88:a2:25:96:ff:e1:13:
5f:94:9e:c4:46:1c:bb:e8:6e:4a:51:d4:ea:5a:12:cb:3a:c5:
6a:bc:83:54:87:2f:24:e1:5d:db:84:d6:7c:41:ec:b8:45:f9:
87:07:9a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:09:26 2026 by rpki-client