Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
File: QtT25CKV9UA7hFtSu6lnl2HYhNg.mft (raw, json)
Hash identifier: XTtrt2AHXPFTcT1h0R0SrxHwagryY9daLD2+QkEjIXc=
Subject key identifier: 73:4F:B6:27:5E:B9:7E:86:B5:72:4D:9F:E5:C1:ED:9A:3F:FE:B6:85
Authority key identifier: 42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
Certificate issuer: /CN=42d4f6e42295f5403b845b52bba9679761d884d8
Certificate serial: 019FAAF5C49F3D317F45055E0D2CC1B39BD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
Manifest number: 0DCF
Signing time: Tue 28 Jul 2026 23:01:01 +0000
Manifest this update: Tue 28 Jul 2026 23:01:01 +0000
Manifest next update: Wed 29 Jul 2026 23:01:01 +0000
Files and hashes: 1: CZes9ucne-93ugwSp9Uj8QRuyUI.roa (hash: SmIb+DlDVr+RAK+c6/UM+iCQn51gq6QKyPu2qNkBKg8=)
2: QtT25CKV9UA7hFtSu6lnl2HYhNg.crl (hash: hZBJX7iDcjLGest9lVvNhZz6/7fw2+TU6Vdlx0F0N74=)
3: mdvmy6IQAdVPllVNujJTmgLBeMk.roa (hash: 8bJ+OELFjDn0Z1urqhVSsIZSC0xHEOIJenSspzmy9DY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:c4:9f:3d:31:7f:45:05:5e:0d:2c:c1:b3:9b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42d4f6e42295f5403b845b52bba9679761d884d8
Validity
Not Before: Jul 28 23:01:01 2026 GMT
Not After : Jul 29 23:01:01 2026 GMT
Subject: CN=734fb6275eb97e86b5724d9fe5c1ed9a3ffeb685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3e:63:45:65:2e:90:f1:80:f1:ba:d6:4a:43:
36:c5:f9:4e:58:ca:67:de:57:47:ca:b6:cb:6d:eb:
e9:5a:17:d9:e1:9d:c9:e7:78:39:a7:2c:5a:02:af:
69:06:a8:92:20:66:04:59:b2:cb:51:da:86:c5:8b:
36:32:c9:bc:cc:d0:e7:d9:40:cb:84:6f:8c:ec:c7:
f0:5f:9c:a9:e8:a1:ef:0d:44:9d:39:0b:dc:16:39:
c1:6d:90:b1:cb:42:d1:3a:c5:45:92:18:c2:bd:9e:
c7:22:1d:af:61:41:be:c6:bf:5b:d0:e8:0c:35:cb:
1a:af:f0:ee:37:cb:2d:e7:97:24:0a:e3:3b:74:bc:
d1:a8:a7:53:27:6f:c0:18:65:a8:a9:98:28:6f:8d:
42:cf:a8:4f:ee:39:f9:51:97:23:f0:8f:60:b0:7d:
0a:ef:39:e1:9d:72:35:7e:ab:f1:fc:01:8e:86:ea:
33:02:41:00:6f:28:b9:51:aa:f6:d9:d1:74:00:64:
33:ef:e3:70:2f:2e:ac:eb:bc:94:32:5d:33:a2:58:
e6:81:6f:aa:8d:a0:0d:70:6b:4b:b4:6a:a6:36:9b:
b2:8a:38:15:23:b6:33:06:c6:7a:9b:83:08:ee:8c:
f1:02:d0:a1:f9:a2:b9:22:5a:a4:ce:e8:9b:ef:7b:
4b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:4F:B6:27:5E:B9:7E:86:B5:72:4D:9F:E5:C1:ED:9A:3F:FE:B6:85
X509v3 Authority Key Identifier:
keyid:42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a4:78:1a:54:da:d4:1a:d8:fa:6f:dc:b0:eb:79:f1:5b:f1:
10:dd:93:65:14:96:8f:f0:80:4f:66:18:3b:74:be:92:7c:36:
78:45:4e:5b:ef:99:ac:d8:1b:e8:e8:4c:9a:03:91:6b:f4:d1:
d9:2c:9e:2e:e4:10:44:e0:72:26:9e:2b:b0:3b:4d:38:31:f6:
46:42:e3:cb:cd:49:8d:7f:ec:da:53:6a:68:63:01:3d:ec:43:
32:da:e8:f4:89:63:6f:13:03:1a:df:17:d6:35:d9:d5:1b:cf:
8b:72:ea:9a:1f:05:4b:cd:35:aa:40:b4:a6:20:dd:e8:25:91:
87:c3:49:cc:d9:e1:ba:e2:3e:d3:3f:6e:0f:a2:64:0b:d0:5f:
32:c7:01:b0:67:c0:c2:89:89:00:56:aa:7b:f4:2c:55:59:05:
31:f5:3b:75:11:95:72:93:c3:7a:18:ab:d4:47:c4:bd:18:6e:
bd:53:50:f4:06:7d:fe:ba:3a:e2:4d:ef:26:45:65:67:4b:8d:
0f:76:51:55:cd:07:47:f5:b5:e8:d2:8a:c2:6b:ff:73:f0:9b:
d4:41:d9:68:2b:a2:ab:9d:7a:31:21:b2:b7:c9:4c:af:36:3e:
40:ca:2a:aa:3a:72:1b:fa:34:bb:1e:7d:0e:b5:5d:e1:61:1c:
fd:93:2f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:32:39 2026 by rpki-client