
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
File: QbjC83vY1-BOdphaTO1FWddlHEM.mft (raw, json)
Hash identifier: EECtr2FKTyi9FzNw5SX5kYYpnRJ0GCieSCEnMTuiNEE=
Subject key identifier: 66:DF:AB:8E:D1:A2:E1:F8:50:12:65:A8:BE:0D:2C:80:91:3A:29:DC
Authority key identifier: 41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
Certificate issuer: /CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Certificate serial: 01A08B3145CB5A5451DC0B66A558E7A3E23E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
Manifest number: 1A51
Signing time: Thu 10 Sep 2026 12:00:57 +0000
Manifest this update: Thu 10 Sep 2026 12:00:57 +0000
Manifest next update: Fri 11 Sep 2026 12:00:57 +0000
Files and hashes: 1: Dxm0EoxGp2ndo74sPdVeeXzoflk.roa (hash: yNKkIjFKgCoECJezorrDtiFQ2gdUXVgat36+B1ETObs=)
2: OMxShmSN_MmgdqjB3FCH456QPyw.roa (hash: Vm7cRKSz6QpnQGwyuo2jJgMyLFID06ztzYaKVdmY098=)
3: QbjC83vY1-BOdphaTO1FWddlHEM.crl (hash: /Xs5LhDkVkP1Pdy2fo4B8ZPizinzxy/87HwM0gkJKgs=)
4: VLAKggAmP_2e5ujcu_orpJmGymk.roa (hash: R7zarhFK+F6qeI1f2Us/zQph/cT5R9wLEpRj2LShETc=)
5: g_4YB2ktK_BZdQW2jisjb57z4v4.roa (hash: FrWnOJyYlT2BDuUH41B6UfYjVVUxab5ezAoKnJ2JP3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:45:cb:5a:54:51:dc:0b:66:a5:58:e7:a3:e2:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Validity
Not Before: Sep 10 12:00:57 2026 GMT
Not After : Sep 11 12:00:57 2026 GMT
Subject: CN=66dfab8ed1a2e1f8501265a8be0d2c80913a29dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:70:fd:ed:0d:bf:82:69:11:0f:34:90:76:45:
90:bd:e7:af:7e:97:cd:86:f7:c5:12:26:c1:36:9a:
67:5a:d9:5c:38:ad:1f:72:f7:70:6d:22:af:7c:94:
37:dc:b9:99:2c:3b:2f:88:9e:7d:f9:b0:3c:5e:52:
08:e4:e0:ed:7d:9f:2b:bb:58:02:c0:9e:d1:b7:48:
06:06:9c:72:51:b0:66:39:03:e2:4d:e8:d3:6b:0c:
69:96:02:ce:7e:ed:62:ac:88:50:8f:c4:fe:83:ed:
11:98:17:6f:c0:db:ce:2e:7e:1f:b1:69:ce:9c:03:
0b:ca:0e:56:7d:32:c3:85:dd:c0:b8:f5:92:78:23:
79:7c:6e:21:5f:91:e7:db:12:19:7d:89:8c:0a:64:
75:36:95:1d:ce:02:84:3f:d0:6e:0f:c9:3e:86:18:
13:fc:60:57:0d:44:bd:62:90:03:72:66:13:99:aa:
85:26:d9:88:7e:56:b8:ad:c4:1f:1e:ec:1b:98:b2:
54:21:86:f0:4d:ff:0f:61:b1:53:6d:9d:18:ae:9e:
90:64:79:7b:64:64:75:7f:b2:14:1d:90:d5:fc:53:
21:76:b3:62:90:79:03:a3:00:e1:85:ce:26:be:75:
31:cb:8a:3a:f2:d9:04:c5:bd:83:fb:a2:05:2c:14:
cc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DF:AB:8E:D1:A2:E1:F8:50:12:65:A8:BE:0D:2C:80:91:3A:29:DC
X509v3 Authority Key Identifier:
keyid:41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:07:1d:ef:f6:0f:b4:3e:e0:da:ef:9e:95:99:0c:b7:85:40:
6b:3f:38:96:92:37:8f:04:63:bd:0c:73:b5:87:8b:d4:8a:d1:
a2:9d:db:9e:2e:b0:b8:dc:ef:6b:d7:03:11:03:44:df:d6:21:
dd:94:9e:4d:36:8d:54:1a:8d:c1:ee:86:a0:40:b4:85:14:51:
22:e7:9d:6f:24:28:69:a8:fc:1e:4f:5c:58:fa:10:dd:81:73:
de:8a:c2:fb:15:cf:c6:87:f8:f8:ea:5a:16:8d:2b:dd:28:7f:
15:32:fe:c5:53:c9:76:7a:ee:88:1a:9e:b6:9a:fa:c9:8e:57:
21:10:af:99:11:ab:89:b9:2e:80:25:ec:78:03:8c:4c:a2:b5:
5a:f6:93:87:d7:c3:c1:c1:8e:70:03:7e:f6:2c:02:79:47:2b:
6c:fb:87:26:cf:44:c3:cf:c1:4f:dd:9d:d2:c4:e0:ac:b2:0e:
1e:3b:da:b3:ac:4c:aa:6d:cb:f3:96:59:4b:a7:ec:d5:a8:14:
45:e3:a0:32:39:d1:d1:55:41:a0:e8:bd:3b:d6:62:66:14:53:
c4:84:bf:db:28:96:26:d7:30:15:17:34:1c:ec:ab:5b:19:f2:
a4:37:ce:3a:b8:04:ee:95:e8:11:8b:9f:d9:be:30:21:68:10:
77:b0:c5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:14:13 2026 by rpki-client