Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
File: Qy_nD0zvEDdoNhUvOOTghTLMe58.mft (raw, json)
Hash identifier: TWPNFW5U1B4AY8caEFZl1IwZ9xhJUoiixFsZu5L5XBI=
Subject key identifier: 66:33:71:75:87:53:35:B8:46:62:92:9A:72:B9:69:98:FA:50:F7:E6
Authority key identifier: 43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
Certificate issuer: /CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Certificate serial: 019FAA50A4F195A9C04DA4258917F8F4FE1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
Manifest number: 087D
Signing time: Tue 28 Jul 2026 20:00:39 +0000
Manifest this update: Tue 28 Jul 2026 20:00:39 +0000
Manifest next update: Wed 29 Jul 2026 20:00:39 +0000
Files and hashes: 1: A9KPkngUXWXwoXMeh9I603GmeJg.roa (hash: dKQV+T7YqY4RYKx4LLE6fQsZ703AeKW3tQVyd7Sv7c8=)
2: Qy_nD0zvEDdoNhUvOOTghTLMe58.crl (hash: ChzCj/9MU0gsoB6qIRolg9qKUw5d5kjRFkudtR2xri4=)
3: sKDKorvVElJgqwc1YL9x1RhoYEM.roa (hash: SXIrFPkLP5e0Dojj65FY1WNGEqYxxlyXHUyw6TzDiOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:a4:f1:95:a9:c0:4d:a4:25:89:17:f8:f4:fe:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Validity
Not Before: Jul 28 20:00:39 2026 GMT
Not After : Jul 29 20:00:39 2026 GMT
Subject: CN=66337175875335b84662929a72b96998fa50f7e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f0:56:f2:a7:bb:9c:3d:28:46:39:33:62:22:
05:74:b0:9f:70:f0:ee:ab:2b:02:9a:e4:b7:83:1c:
6c:7c:2f:4b:b7:78:55:a4:45:55:26:d8:6b:cd:b7:
42:23:b1:64:1f:0c:65:5f:79:79:dc:c3:82:49:57:
53:13:07:7b:8d:4c:83:42:07:55:b9:2a:3e:22:2c:
a0:fe:1d:16:94:a5:19:fe:03:63:e7:e1:bd:c8:0b:
85:31:93:5e:36:11:66:c3:af:ff:9c:5f:9d:7a:f2:
6b:3b:6a:29:c4:45:94:32:24:1a:db:9f:52:7d:09:
72:02:83:97:b5:cc:2d:b2:3d:34:cf:c8:d2:a5:3b:
0d:53:8c:1f:f2:84:e3:ff:90:53:72:8d:7a:df:90:
0a:8a:8f:4a:09:0b:57:e8:8e:bd:62:64:48:ce:f9:
db:f7:59:69:c1:bf:32:e2:d8:55:82:12:31:26:e9:
fd:df:56:15:d4:74:dc:0e:ff:81:51:e1:85:00:0e:
99:b3:ca:b9:50:c9:b1:00:13:95:cf:7c:75:8f:e8:
05:32:82:39:14:7d:52:a6:39:cf:22:54:3c:b0:dd:
2d:34:9b:9c:1a:49:f8:9e:92:7b:c8:7e:fb:09:f7:
cb:e8:33:74:6f:84:f4:1e:84:d2:4b:d7:8b:3c:24:
76:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:33:71:75:87:53:35:B8:46:62:92:9A:72:B9:69:98:FA:50:F7:E6
X509v3 Authority Key Identifier:
keyid:43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:0a:56:5d:0b:d3:f5:0c:1f:a5:6a:94:1b:aa:69:06:1a:28:
2d:1b:2b:5a:cc:27:be:6a:d7:e5:bb:5f:33:82:e7:a8:c5:65:
c7:e4:c1:c1:f5:d5:90:0e:70:ad:3c:4a:c5:82:2d:89:71:65:
50:f7:2d:79:3f:d2:67:42:dc:a4:d2:67:fb:57:6e:02:77:ba:
70:76:f9:ae:1f:6b:21:4b:14:08:2b:83:9a:d9:ce:d1:5c:94:
f5:85:3a:b3:50:ae:01:f4:f5:99:28:2a:e8:2d:c9:20:b2:fa:
fe:4c:2d:37:a6:d4:fc:dc:b7:ee:7c:74:1c:d6:3f:fe:87:32:
4b:07:26:55:0d:60:c1:ad:f4:b8:23:66:ce:f5:e0:ef:d7:23:
7a:2d:08:54:ea:7e:65:4f:69:1f:b2:87:65:3f:97:02:6e:6e:
ed:82:1f:35:9e:47:ef:be:ef:22:10:dd:63:04:1b:4a:68:f3:
61:0e:4c:73:8e:31:48:d7:de:92:fc:03:db:ab:eb:19:a2:b0:
a9:0c:b8:1f:23:9a:2a:aa:47:76:31:b6:43:dd:fe:db:c0:68:
01:9a:a6:d5:3a:1f:a6:b9:99:49:22:55:1c:74:b1:bd:33:b5:
52:08:7d:80:5a:89:da:a8:80:59:60:07:b0:8b:ea:76:77:ea:
83:3c:0e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:47:01 2026 by rpki-client