Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
File: QCHf817fDObkKNav_CEsRxdnnuE.mft (raw, json)
Hash identifier: lIL+4UKLaR2+KZ0QaaPysN61B+hP7lxs00VrQ1eCLAU=
Subject key identifier: 58:23:68:59:F6:6B:FA:37:AD:48:74:AC:6A:BD:23:0B:F3:C3:AF:F3
Authority key identifier: 40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
Certificate issuer: /CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Certificate serial: 019FA786713D69E2B32ED2E9E25F7CCE97E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 07:00:33 +0000
Manifest this update: Tue 28 Jul 2026 07:00:33 +0000
Manifest next update: Wed 29 Jul 2026 07:00:33 +0000
Files and hashes: 1: 5aiPK-AjdStx2wVba_jLR8yEmJE.asa (hash: 0IErVbdaESGxXE+QIywfXtfH1IshFTMGY+X2vmTVMAE=)
2: QCHf817fDObkKNav_CEsRxdnnuE.crl (hash: h9juZXSP0gPpg+fZmFNd1zIH3Kh2U0TdqGT3BrPsG3E=)
3: oH1r4igjZpHu8rKsfXxiqzBUl84.roa (hash: X0wT9e0aq2sCh5h0E8HXfviT92xXoJ7QSCDrREimpr8=)
4: r8t0mnOfuf-XZlUByZSmwxL5C8U.roa (hash: NIHY9VYRcz1i7SUH3PrDl1wZP8mWVi3+Xuf3Zc+uw+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:86:71:3d:69:e2:b3:2e:d2:e9:e2:5f:7c:ce:97:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Validity
Not Before: Jul 28 07:00:33 2026 GMT
Not After : Jul 29 07:00:33 2026 GMT
Subject: CN=58236859f66bfa37ad4874ac6abd230bf3c3aff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:cf:ee:0c:78:13:a5:87:40:0c:0e:39:73:51:
11:78:19:f3:08:00:08:e6:f5:54:2d:07:e1:d5:87:
4d:a2:c2:cc:bc:af:d0:68:8c:db:32:29:bc:1a:51:
27:2d:43:24:78:07:e9:2e:07:d6:20:a7:88:ad:4a:
cf:fb:4f:f6:69:bb:24:a9:85:35:cc:47:ed:77:9b:
1b:7b:fe:41:37:3e:d3:4d:df:90:d2:47:6d:b2:f8:
1d:7b:5b:08:10:8e:55:fc:69:c6:00:f9:09:50:dd:
97:70:4e:f7:cc:1d:31:d1:6c:6b:9e:d5:63:d2:8f:
aa:20:a3:80:2c:8e:10:97:32:5d:1c:34:99:a5:79:
d8:4d:73:ba:ea:ed:c5:e1:4d:8d:6a:01:16:c0:68:
b5:1c:fa:d8:7e:ff:39:fe:45:bb:30:dc:dc:89:2b:
5f:47:26:b0:be:6c:3e:00:83:7e:65:c4:63:c8:cc:
83:1f:b7:67:17:df:fb:42:a0:ed:5c:b2:2f:18:21:
ac:7b:ce:aa:c5:3b:e0:bc:5c:8a:66:a2:63:21:7a:
ff:21:9e:58:e8:e9:d4:1c:59:54:86:19:49:11:3a:
bf:e7:67:dd:60:4b:b8:ff:da:68:07:69:18:01:7e:
07:1f:c0:2b:18:a3:9e:70:5c:64:25:3d:c1:96:55:
e0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:23:68:59:F6:6B:FA:37:AD:48:74:AC:6A:BD:23:0B:F3:C3:AF:F3
X509v3 Authority Key Identifier:
keyid:40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b7:11:7f:32:cb:7e:d2:99:cc:c2:da:ca:f5:a7:0e:f8:2e:
70:b3:70:1c:f0:3f:81:40:35:93:7f:72:e7:ca:1f:16:9c:64:
4e:7c:7b:2d:c2:fd:a2:be:05:cb:f1:7f:21:2f:da:f0:8a:27:
d9:9d:28:91:05:d4:71:d6:0a:bf:e1:2c:14:4e:be:39:69:17:
09:48:91:ca:fd:a4:b4:e7:d7:96:35:50:1e:ae:ef:79:89:e4:
7b:30:42:38:50:0c:4a:93:3b:d3:e2:3b:e7:63:6d:87:d6:94:
db:99:06:6f:f4:e5:d0:91:5c:0b:5c:f9:46:e9:c1:fc:6a:ee:
95:99:39:2f:6d:f2:cc:3b:f4:35:c2:09:d6:b2:fd:3d:25:cd:
f8:16:4e:c9:f5:f1:ac:6e:f9:d2:2b:02:cd:d1:5f:a9:8d:79:
62:39:97:54:bd:89:84:b4:df:71:b5:be:08:67:bc:f8:dc:c0:
f3:a8:f2:bb:ce:31:d0:d8:d6:ac:58:37:08:9f:ce:88:db:32:
56:5c:62:6a:b7:de:9a:51:fe:e6:6d:bb:5d:d0:59:25:67:d8:
7a:97:0d:ba:ab:ff:cf:f7:a3:c9:48:87:86:b0:e9:5d:82:28:
e4:11:04:0c:58:4c:6f:6f:23:84:97:ea:a2:8b:87:4c:06:6c:
12:68:5f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:38:53 2026 by rpki-client