Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
File: Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft (raw, json)
Hash identifier: TgGYV7pAo5eaqapKXjQrVlK5dxGEvUE1QuV4hVR3ISU=
Subject key identifier: 72:DB:8F:27:0E:17:7F:95:DE:0C:D3:70:37:FD:46:D8:74:A5:21:12
Authority key identifier: 43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD
Certificate issuer: /CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd
Certificate serial: 019FAE6478A65497348A18535675D1BA9D3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
Manifest number: 14AF
Signing time: Wed 29 Jul 2026 15:00:47 +0000
Manifest this update: Wed 29 Jul 2026 15:00:47 +0000
Manifest next update: Thu 30 Jul 2026 15:00:47 +0000
Files and hashes: 1: AOYNyLogCuZgfBQZ_rhFiasTEas.roa (hash: zOItC91i7X4F3quOK9yoQD+KspwFkw26V76frNAHPSc=)
2: Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl (hash: CTqQoyV2OwuUHJPbjGTJEtEdEwaY3kiGNy/d5nATbnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:64:78:a6:54:97:34:8a:18:53:56:75:d1:ba:9d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd
Validity
Not Before: Jul 29 15:00:47 2026 GMT
Not After : Jul 30 15:00:47 2026 GMT
Subject: CN=72db8f270e177f95de0cd37037fd46d874a52112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:85:78:bd:25:ae:3c:55:20:23:fd:ec:7e:a6:
18:c4:e8:c5:41:93:24:50:66:45:c3:3e:a2:11:68:
75:c8:b9:97:94:aa:e6:41:d8:5e:aa:d4:8a:79:3f:
1f:27:19:d7:95:59:3c:5f:a0:4d:f9:75:68:03:f9:
c6:75:ab:05:6b:71:8a:39:fd:7e:b3:c5:2a:9d:66:
af:83:55:6d:85:79:ad:17:97:54:00:a9:32:3d:f6:
45:72:93:1c:67:a3:8b:14:24:c2:9a:86:b3:27:b2:
c2:de:1c:9d:42:6f:ed:6e:01:52:ff:da:75:c0:d5:
f0:02:72:b1:3c:32:78:c9:46:df:ab:d6:79:84:cb:
5d:21:d5:90:a1:d7:24:2b:07:98:48:64:5c:aa:81:
71:48:f0:2d:ab:f8:42:73:4d:b8:11:6d:3c:5d:c0:
80:48:db:3d:52:52:16:ad:e9:59:ff:cc:4f:7e:ba:
e8:60:1a:44:93:d1:ee:ac:d8:08:17:e5:fb:b5:ae:
7b:b0:f0:42:cc:e7:f4:4c:62:51:d3:84:a5:3c:02:
e5:de:cd:5f:f8:a9:81:53:a2:a8:f1:a1:54:28:24:
6d:7d:58:0f:bd:58:4b:71:c2:4d:25:7b:bc:68:a3:
3e:2a:89:48:9f:be:11:c5:e5:19:de:a0:b5:b9:28:
35:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DB:8F:27:0E:17:7F:95:DE:0C:D3:70:37:FD:46:D8:74:A5:21:12
X509v3 Authority Key Identifier:
keyid:43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e2:18:ec:24:76:9e:3c:92:aa:55:e6:47:83:2f:8e:91:51:
42:29:43:f5:90:1b:0b:5c:fe:61:fd:27:77:5a:94:1a:c7:0e:
f9:55:f4:8a:0d:d3:75:d9:dd:1c:d0:24:12:fd:56:d4:b1:91:
47:bb:54:d4:51:f1:ab:81:3b:bf:20:c6:4c:91:57:a2:37:e8:
bd:46:fb:25:71:70:a1:45:7d:bd:49:02:31:dc:b2:f0:95:b2:
65:fa:e4:dc:2f:2d:81:85:18:48:52:b6:87:35:3a:8b:88:24:
c3:69:02:af:5e:30:89:48:9c:85:4a:0a:94:4c:2a:98:2b:61:
a9:e5:d1:6a:d3:ba:f6:86:ae:5d:9b:e2:44:cc:b7:12:04:db:
bf:97:76:d2:cd:66:73:e1:57:fe:1d:11:21:f9:52:b9:dd:6e:
bd:3e:8a:14:a0:de:24:7a:7f:76:61:a4:98:77:29:7b:07:b0:
71:08:8b:21:ff:62:83:fd:f3:d7:01:3d:80:2d:e7:11:aa:bc:
e8:bd:c5:1e:c3:58:b5:34:54:d8:32:54:5b:ba:4e:6a:f6:6f:
cf:e7:39:e8:11:5e:86:3b:c6:77:49:2a:a3:d6:1f:b6:46:9e:
ba:9d:cb:77:3a:f9:da:e6:a5:3e:a4:1d:e3:f8:a5:69:89:84:
fe:20:94:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:02:07 2026 by rpki-client