Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
File: Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft (raw, json)
Hash identifier: GtZqJLmUm66BJsqne7vJuxuSp82IQZrmN9muR1/QD2g=
Subject key identifier: 23:04:B3:A6:CD:31:15:44:2C:B5:AE:5A:45:1D:7C:97:1B:17:45:E4
Authority key identifier: 42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
Certificate issuer: /CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Certificate serial: 019FAD5171F7D16657A6C297155880C80F32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
Manifest number: 0858
Signing time: Wed 29 Jul 2026 10:00:23 +0000
Manifest this update: Wed 29 Jul 2026 10:00:23 +0000
Manifest next update: Thu 30 Jul 2026 10:00:23 +0000
Files and hashes: 1: Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl (hash: 0EcVZOZC7/l/L3LJ5UPrhQYUSOAtBI+mLcUgAyzMXtE=)
2: fX5QoYhC7oWQVw3vDSbjr3GlOMs.roa (hash: glhB4Xck9+EeTURBJmeIzyghgm1Xn7IH7ZSK9Lk029k=)
3: uhmE3at76dYLrtDiQbzMepv_16I.roa (hash: /LKq8mUsMWaHICUc9KVgvqVuRJ8efqGttlCEBaJ+7kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:51:71:f7:d1:66:57:a6:c2:97:15:58:80:c8:0f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Validity
Not Before: Jul 29 10:00:23 2026 GMT
Not After : Jul 30 10:00:23 2026 GMT
Subject: CN=2304b3a6cd3115442cb5ae5a451d7c971b1745e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b0:5d:44:7d:b5:4c:5e:0d:04:79:a4:fa:47:
03:98:10:28:44:87:a1:a0:07:f2:d8:c9:16:57:c2:
6d:dc:c0:a3:c0:f4:be:81:8c:a0:1d:0c:d9:bb:cb:
5b:af:6d:90:2e:20:dd:ac:77:ee:e0:aa:96:de:00:
ae:c3:e8:59:ee:80:44:c4:a3:79:16:0d:79:f1:e4:
d7:09:3d:e9:a6:87:ab:43:88:d7:bc:3e:e6:88:59:
25:f4:07:72:e7:6b:09:d2:c0:bc:f8:20:a2:bd:0a:
58:0f:ad:1f:92:af:32:4b:03:56:10:a2:59:00:09:
75:39:37:c3:83:48:df:50:bf:ea:23:45:9c:00:14:
0b:99:92:f1:06:e6:e3:bb:48:cf:de:6b:f1:bc:91:
d9:ce:74:cb:16:f8:41:4e:8a:3b:53:2f:a5:73:3e:
88:14:55:e0:46:8d:72:9b:e4:5a:96:f4:13:bf:ee:
69:5e:a4:c4:a0:60:82:dd:a3:dc:18:cb:19:56:09:
70:c3:80:b0:25:4f:c5:97:1d:1a:bd:ea:bb:cf:96:
a5:6e:ce:16:9d:c9:35:0f:1c:a2:98:3f:98:2a:4f:
92:81:ae:15:6c:06:1c:ad:0f:91:29:6c:37:48:e8:
67:1d:d5:3f:73:24:94:c3:78:40:f3:ab:eb:58:36:
ab:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:04:B3:A6:CD:31:15:44:2C:B5:AE:5A:45:1D:7C:97:1B:17:45:E4
X509v3 Authority Key Identifier:
keyid:42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d7:65:32:23:b0:1a:a8:c4:98:c6:c5:23:1a:13:9c:d5:84:
12:c7:82:0a:a8:68:37:e7:ce:15:47:d0:bd:2d:4f:c6:02:ec:
f4:0c:56:2d:be:6e:12:aa:88:47:fe:df:2e:ba:ed:0a:f4:3c:
ec:f9:42:4f:6b:f9:b4:2f:fa:07:98:43:0d:cd:40:4d:d3:ae:
ba:64:f3:f2:5c:37:d1:c6:16:db:80:12:3d:cb:19:58:06:ce:
50:0b:e7:5d:3f:d1:b9:53:5e:3f:86:7c:11:65:44:20:67:84:
0c:c7:28:0d:ca:e0:b4:8c:18:d2:94:c0:8c:cc:46:4f:e9:4b:
ce:bb:02:0b:1f:bb:c1:70:62:9a:e5:22:a1:30:d4:93:f7:92:
95:f9:53:a3:b6:18:7c:91:03:0e:13:c4:ed:f6:9a:ad:b3:aa:
88:d1:8d:c3:bf:a3:95:db:2c:ff:13:b6:a0:a0:24:93:05:71:
8f:2b:65:5b:be:92:35:bf:38:b9:2b:85:5f:e5:0d:6f:03:5c:
32:c1:53:3f:c2:06:8f:03:0e:f2:c9:76:41:37:ed:11:47:e6:
f5:b7:bd:37:bb:b3:2b:b7:45:4c:2d:90:40:eb:c8:65:67:b6:
5f:55:8b:28:c4:49:e3:4e:bf:57:1e:d3:d8:48:f3:2c:4b:e0:
1c:42:6d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:23:12 2026 by rpki-client