Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
File: QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft (raw, json)
Hash identifier: rTvvHXAvADTdHmameKcNkpVOHWWjKerLQrfUo9lFNNQ=
Subject key identifier: C5:BF:76:97:54:41:CC:61:04:A9:F5:AB:7F:90:8C:AD:12:BB:58:FC
Authority key identifier: 40:CF:69:CC:A2:C8:6E:19:47:54:78:8E:DC:D8:8E:35:2E:D4:E1:1C
Certificate issuer: /CN=40cf69cca2c86e194754788edcd88e352ed4e11c
Certificate serial: 019FAC3EEED04A18272C36C1AE12BE2FEDB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
Manifest number: 0FF2
Signing time: Wed 29 Jul 2026 05:00:33 +0000
Manifest this update: Wed 29 Jul 2026 05:00:33 +0000
Manifest next update: Thu 30 Jul 2026 05:00:33 +0000
Files and hashes: 1: QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl (hash: osetrU3aWvEEqZkU5r/DPYi37PjOy8So2O77W6G0i8o=)
2: yaEEybz2NfCWEApyu2Dzx2yLpcI.roa (hash: j2pzI49xHsyv/Ol3MBefWz6almNV2xHEmt1n4qjR/Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:ee:d0:4a:18:27:2c:36:c1:ae:12:be:2f:ed:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cf69cca2c86e194754788edcd88e352ed4e11c
Validity
Not Before: Jul 29 05:00:33 2026 GMT
Not After : Jul 30 05:00:33 2026 GMT
Subject: CN=c5bf76975441cc6104a9f5ab7f908cad12bb58fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2c:71:ec:ae:98:01:93:ca:e2:21:7d:4f:ef:
6a:85:0c:24:73:ef:a1:fe:6c:57:70:b1:c8:31:8b:
ba:35:98:35:24:a8:6d:0d:de:a6:14:7b:c2:42:b7:
c2:d2:ee:96:b3:47:1a:d7:59:05:ca:39:db:ac:63:
22:c6:2b:81:22:3f:ce:9c:1b:da:ac:6e:c6:5c:0d:
8d:96:a5:cf:a3:3e:5e:9e:f1:f2:c3:e7:b9:1a:f7:
cb:c1:98:8b:dd:87:31:d8:cc:66:da:2c:bf:da:81:
ba:0e:80:93:79:db:22:fb:33:a5:dc:3a:e8:18:42:
04:33:7f:be:9e:bc:89:38:86:6e:1d:3f:49:e1:a0:
e6:51:3d:f5:13:7e:5a:e0:e8:6d:f9:af:54:82:e9:
41:81:40:be:bc:a6:35:b3:99:b9:71:b3:46:08:33:
ff:80:c1:5b:d7:64:e5:80:a1:79:31:f3:22:86:d1:
19:b3:aa:ff:fb:ce:2f:85:bd:0a:eb:ee:68:98:b5:
c4:07:ab:61:86:1c:01:d7:9c:ad:36:ed:6e:3b:cc:
1c:89:2c:3c:db:09:72:c8:ec:ea:a3:b6:e9:a1:64:
28:c3:79:44:fa:30:6c:c0:02:a8:e0:3c:a2:ad:e5:
3d:9c:15:27:5c:4f:e6:76:7d:c9:65:46:25:a4:2f:
32:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:BF:76:97:54:41:CC:61:04:A9:F5:AB:7F:90:8C:AD:12:BB:58:FC
X509v3 Authority Key Identifier:
keyid:40:CF:69:CC:A2:C8:6E:19:47:54:78:8E:DC:D8:8E:35:2E:D4:E1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f6:08:96:cb:f9:49:77:3e:2f:a5:58:9a:ff:e7:51:cc:4e:
f3:cf:62:f0:aa:d2:49:84:e2:fa:dd:00:21:9f:ac:41:4f:23:
5f:ad:c9:70:4e:fa:62:5c:d0:4a:85:ec:09:38:b5:e1:fb:19:
44:b5:46:4a:d0:08:5b:81:4b:5b:31:01:6b:55:cb:31:d4:94:
55:1d:af:94:89:a2:a1:9b:7c:36:eb:4e:64:3c:9a:29:97:8e:
0d:04:4d:b2:14:a7:c3:b3:e4:d9:9c:20:f6:18:1c:90:c4:37:
02:e8:fb:33:4c:48:80:27:d3:27:1b:96:a6:ff:6d:7f:4b:55:
bd:a0:20:10:ae:fd:f6:fc:79:64:07:59:22:4a:e5:2c:57:87:
a0:c0:11:30:c5:12:1c:7c:50:0f:5c:6f:a1:be:ab:55:e9:95:
3c:d5:2f:b1:d4:5e:6a:eb:4a:10:be:01:b4:33:ea:a2:4f:73:
e4:13:32:7b:b2:87:d7:d3:87:ed:4b:0f:cb:35:4f:8d:87:be:
fd:09:2b:33:79:eb:21:13:7e:d7:33:76:e3:e5:e5:4f:ce:43:
d9:af:f4:f9:3d:f8:f1:34:30:0a:f3:36:a9:9b:e4:99:06:ed:
61:58:bb:90:14:09:15:f8:bf:9a:57:70:ca:fb:78:6f:af:05:
9f:99:c5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:12:37 2026 by rpki-client