Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
File: Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft (raw, json)
Hash identifier: QBu/sXXigQCpJdFW9nGPaQHAmrW3ag8LfgM7q2kRa2A=
Subject key identifier: B6:03:A4:EA:3F:1E:4C:CB:F8:37:A4:CF:66:37:60:84:28:27:3A:6C
Authority key identifier: 41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31
Certificate issuer: /CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31
Certificate serial: 019FAC763DC733BC2170A4D0CCB8501FFF4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
Manifest number: 1368
Signing time: Wed 29 Jul 2026 06:00:57 +0000
Manifest this update: Wed 29 Jul 2026 06:00:57 +0000
Manifest next update: Thu 30 Jul 2026 06:00:57 +0000
Files and hashes: 1: NQ75nb1-xJ7HIs6FdHfLr_Qn5o8.roa (hash: 0/Ed5GPxhq59pa7mSV6ONsdGXpQguRmYVeDEeOnkcHU=)
2: PXrC0OWTvC3oDvSMYzCzL7Vl-uQ.roa (hash: 2Ri2mgKyHMUEf2CJlFmGd9Z/Z2goUwzz5lX8kmekZSA=)
3: Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl (hash: ebdzRj896XktvFzC7LOtuOCf1eYkKe8fh9NkEPFfuug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:3d:c7:33:bc:21:70:a4:d0:cc:b8:50:1f:ff:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31
Validity
Not Before: Jul 29 06:00:57 2026 GMT
Not After : Jul 30 06:00:57 2026 GMT
Subject: CN=b603a4ea3f1e4ccbf837a4cf6637608428273a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:11:95:9a:da:16:b3:3d:5c:30:dc:22:36:00:
51:58:7d:34:e4:5a:25:78:61:82:34:02:8f:6a:1f:
3b:a9:61:e1:66:0b:a1:d2:cc:b8:fd:b3:8a:5c:9c:
14:fb:50:67:ed:e5:37:af:d4:53:7b:a2:c6:54:bd:
75:ff:83:7f:1a:35:1a:9b:72:75:ad:d2:e4:5d:dd:
d5:ae:ad:bc:91:10:28:6f:ad:37:53:c4:41:c5:ec:
45:4a:7c:39:c2:68:dc:b4:27:0e:50:f4:0f:ac:e4:
d8:70:36:5c:a4:70:49:3d:f3:e2:87:ba:15:80:01:
df:c3:d4:57:f6:6d:81:62:e8:dd:23:12:00:0b:f3:
4f:40:48:bf:3f:71:ff:8e:8e:d8:85:d3:80:56:cc:
08:2b:9c:1c:87:4b:ef:46:97:a7:cd:e8:c0:33:4d:
d5:a7:ac:8f:94:2e:13:e2:7c:40:b4:17:5c:35:3d:
6b:0b:8c:09:c2:15:75:b8:3b:4a:f5:87:2c:f2:07:
a6:57:88:3b:b2:e2:2a:b7:61:67:27:89:cc:19:4d:
e4:84:bf:fa:29:9e:1d:34:65:84:0e:85:e7:73:4e:
8c:16:31:3d:88:4f:7c:2c:c5:19:a5:df:54:21:7e:
d6:1a:3f:3f:6a:19:2c:ee:6c:21:31:b0:ba:8c:13:
88:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:03:A4:EA:3F:1E:4C:CB:F8:37:A4:CF:66:37:60:84:28:27:3A:6C
X509v3 Authority Key Identifier:
keyid:41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b6:dd:d0:43:10:54:47:4f:8f:16:13:92:d2:d0:f3:0b:a0:
74:69:6f:af:b5:9b:4b:b8:42:40:8c:78:61:24:48:11:a1:5e:
64:b2:14:5f:21:0a:75:8f:e4:3d:4c:fa:96:61:6a:d2:d6:06:
4c:16:01:5d:af:7a:5a:60:f2:66:59:67:05:76:33:a8:4d:7c:
87:5a:d7:65:7a:6f:4d:89:14:87:46:33:95:c2:63:f2:91:ef:
73:50:0b:5d:d4:96:40:de:58:ac:c9:24:54:ac:5d:10:26:b0:
24:8e:88:49:29:80:50:ca:e8:34:40:8c:94:34:e1:f6:c6:5e:
b3:ce:30:44:4b:a7:e3:d7:b1:70:f6:1a:56:c7:6d:c5:6b:7c:
9a:c1:b7:4a:69:5a:6a:72:89:b2:6b:03:d7:f2:b3:2c:39:06:
97:03:a2:1a:16:eb:12:59:a4:28:5c:f2:3f:30:12:44:49:3a:
3f:92:9c:2c:1e:56:5e:9c:a9:d1:49:4a:0f:b8:96:45:07:09:
f1:c1:7e:0c:3b:3b:f8:bc:0c:3d:d5:ed:ce:4c:10:a5:3f:f4:
50:9e:12:2c:72:25:0f:2f:7f:38:5f:38:7f:ca:de:cf:92:3a:
07:93:7b:e4:84:ff:5f:e4:0b:0d:59:33:8f:3b:ed:7e:01:54:
1b:1b:a5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:38:37 2026 by rpki-client