Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
File: QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft (raw, json)
Hash identifier: /m5NGhXSHfRb0ShCM2b7bf/f02fCFwpPJ+l4b8/lkmU=
Subject key identifier: 2A:E0:0B:45:8C:AA:37:06:A8:54:7C:C0:4A:09:6D:E8:13:EB:5C:D6
Authority key identifier: 40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7
Certificate issuer: /CN=40d933e82474650c6aa3e9cbf0574d27286592e7
Certificate serial: 019FAABE5EEF9E9BCD510C097456AC2597E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
Manifest number: 19DF
Signing time: Tue 28 Jul 2026 22:00:30 +0000
Manifest this update: Tue 28 Jul 2026 22:00:30 +0000
Manifest next update: Wed 29 Jul 2026 22:00:30 +0000
Files and hashes: 1: 1-ojtBFfG2H1rWqjbXk4N7WD3PpY.roa (hash: 33NVVlGbTWQg3lb1uDpxYt5Pr6SGR6CWL3Kw3mH/dfw=)
2: QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl (hash: CPmhXLQUgKl8I8hOa5THRNVoeduLTNs71SSjYs+yFJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:5e:ef:9e:9b:cd:51:0c:09:74:56:ac:25:97:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d933e82474650c6aa3e9cbf0574d27286592e7
Validity
Not Before: Jul 28 22:00:30 2026 GMT
Not After : Jul 29 22:00:30 2026 GMT
Subject: CN=2ae00b458caa3706a8547cc04a096de813eb5cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7c:92:02:e5:f0:be:cc:8f:a3:97:b0:86:3d:
ca:31:b2:fe:61:84:f1:f3:39:44:36:e3:3b:4f:e7:
2c:36:fa:17:f1:eb:8a:29:35:68:23:49:e3:2a:00:
93:ae:12:ef:c5:90:69:5b:53:28:3a:63:23:34:28:
0d:72:3a:32:32:6e:12:fb:36:cc:71:3e:5d:e9:c5:
1f:a3:08:bc:65:3f:33:7f:20:bf:c6:48:06:12:ac:
37:59:1b:14:06:5e:89:63:c3:77:b1:75:ba:3e:9f:
64:f2:c0:5b:d7:8f:18:5a:3a:49:80:84:aa:17:e7:
12:c6:ae:74:23:a2:3c:c3:01:77:3f:8b:4d:4a:22:
38:0a:32:33:9d:a0:95:26:d9:14:d6:68:a9:29:fc:
40:49:21:9a:d3:fc:fb:cd:a4:5f:8d:f9:de:fe:55:
85:7d:27:64:4e:44:68:ae:52:77:71:5e:69:3a:fd:
09:b5:3a:36:58:2a:9f:20:44:e6:51:03:46:c3:d2:
79:25:bf:af:e6:86:3f:36:07:d3:6a:c7:40:ca:51:
fc:7e:fa:cb:40:06:23:11:25:0a:a0:53:c5:48:fd:
a1:08:ba:14:d8:47:3a:88:47:72:d6:48:5e:73:97:
8c:51:32:bc:f9:a2:d4:d5:c6:71:31:8b:a6:8d:e0:
06:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E0:0B:45:8C:AA:37:06:A8:54:7C:C0:4A:09:6D:E8:13:EB:5C:D6
X509v3 Authority Key Identifier:
keyid:40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:8f:28:c1:f4:a4:70:3a:ee:f5:79:55:ff:2e:cc:02:aa:9f:
11:fc:64:b0:8e:40:aa:ce:9d:8d:c8:e5:2a:e9:bc:fd:a8:a1:
07:4a:50:93:58:dd:e8:0e:ac:de:d9:a1:0b:b0:2a:6c:8b:ae:
d2:15:d6:84:c1:04:b1:4f:44:32:2e:9b:56:f8:03:f1:8b:d0:
0e:05:60:61:6b:0d:e9:2f:b3:01:d2:8b:aa:32:6e:41:71:f4:
fe:87:86:25:1b:21:0c:e6:09:c8:5c:3c:30:30:c1:7a:52:94:
57:74:7d:d0:b5:12:87:1d:c6:5a:a9:c8:a6:20:a2:91:05:b7:
69:68:29:b4:54:06:76:ed:cc:79:48:cd:90:ed:8a:3c:13:85:
a2:6f:44:e5:53:9d:c2:7f:45:fd:5d:5c:77:53:2f:ec:c9:15:
0b:4c:68:7d:74:16:7e:ba:26:32:79:27:e9:48:05:4d:4b:40:
53:66:91:f1:75:cb:71:70:f0:d6:12:21:3a:05:d8:ce:be:f7:
ab:32:b2:0c:02:df:33:c4:f9:cb:56:d9:9b:89:c3:00:c2:2b:
79:a5:96:b4:ac:fe:b9:e2:8a:bf:79:97:70:5a:f3:ff:0b:ff:
f8:e7:6f:d4:de:ae:5b:1c:e1:1f:9f:72:10:4c:e5:79:4f:2b:
bb:6b:b0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:58:28 2026 by rpki-client