Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft
File: QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft (raw, json)
Hash identifier: 0qizEw7vMzPwP2cEGoZ9AqrnD8OMEYmnlZID/gYWK/8=
Subject key identifier: DB:F4:11:DA:D3:BF:67:A7:39:BC:28:DB:E5:60:EE:DE:CC:3D:47:2F
Authority key identifier: 41:D6:45:1B:92:3A:07:E3:65:B2:F1:90:FA:A5:5A:57:2D:D0:FA:FC
Certificate issuer: /CN=41d6451b923a07e365b2f190faa55a572dd0fafc
Certificate serial: 019FA93DC00FD81C0E89174B30EBA08ABCF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft
Manifest number: 0C9C
Signing time: Tue 28 Jul 2026 15:00:24 +0000
Manifest this update: Tue 28 Jul 2026 15:00:24 +0000
Manifest next update: Wed 29 Jul 2026 15:00:24 +0000
Files and hashes: 1: M2qWTH73NkMquwfzQJVxK2FVK8I.roa (hash: 5PswSRa1E9ITddc7NsFeNUg4nkAmj5HsnCX0ziwfNao=)
2: QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.crl (hash: MzlkYLaRp6FTSD0oAyBB5dUU0PTZNil6Eq/+WClR+vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:c0:0f:d8:1c:0e:89:17:4b:30:eb:a0:8a:bc:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d6451b923a07e365b2f190faa55a572dd0fafc
Validity
Not Before: Jul 28 15:00:24 2026 GMT
Not After : Jul 29 15:00:24 2026 GMT
Subject: CN=dbf411dad3bf67a739bc28dbe560eedecc3d472f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6a:bf:23:ce:72:12:57:4b:a3:d2:cc:48:1e:
ed:b1:2a:b7:4e:4a:da:ed:ee:28:2d:94:37:47:8c:
8b:bd:ab:36:5a:c6:44:7c:47:2d:fe:3e:41:4c:27:
cd:96:8d:6b:5e:51:64:99:83:66:55:ea:3b:7d:3e:
0e:08:57:75:e1:40:36:73:c6:ce:97:8b:90:c2:8d:
df:a9:82:b6:16:85:ff:4d:57:d2:e5:e0:df:e8:c0:
d6:90:8a:42:51:e3:3a:d6:5c:9b:d0:f2:de:18:53:
d4:d2:64:c0:71:e6:95:2c:11:65:d8:88:36:a2:c2:
94:b8:8e:ba:52:e7:98:dd:d9:76:7e:73:f5:0a:7e:
3e:ea:fe:eb:6c:13:0d:ea:d0:c2:90:1e:8d:78:28:
cb:66:ea:94:31:da:17:0b:a2:ed:a2:b6:28:fe:b2:
6b:c1:0c:da:90:dc:63:7d:65:58:0e:09:4c:82:1d:
3e:77:1e:2c:05:e2:47:e0:5d:6d:aa:de:f3:1b:7b:
06:7c:fd:3e:11:21:8b:2c:88:11:0d:3a:da:c6:f8:
34:a8:79:24:4e:42:76:93:ae:a7:e6:0c:ba:20:5d:
9f:55:ee:ec:a6:e7:46:ac:0f:b6:5c:37:35:7d:8f:
18:86:5d:85:2c:44:42:97:4d:16:c6:1a:92:40:c1:
b0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F4:11:DA:D3:BF:67:A7:39:BC:28:DB:E5:60:EE:DE:CC:3D:47:2F
X509v3 Authority Key Identifier:
keyid:41:D6:45:1B:92:3A:07:E3:65:B2:F1:90:FA:A5:5A:57:2D:D0:FA:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:2f:96:61:f3:b1:1e:37:95:85:19:6d:22:2c:75:b7:9d:f7:
9b:4b:ad:3d:c2:8d:89:55:1d:c1:1d:83:d7:38:8e:86:96:ba:
9a:78:7c:e1:cd:8d:d6:db:f9:62:c3:c8:6e:61:6f:f2:be:e8:
28:e1:46:ff:44:ec:c8:ca:44:a4:a1:d9:a1:02:eb:1b:54:5f:
8c:17:0f:1f:cf:f6:a7:8b:90:9f:68:3f:79:93:d7:01:54:77:
e8:39:d1:45:f3:f8:10:c3:7a:a4:6b:be:ae:c1:cb:cf:be:10:
f4:10:ce:98:14:7a:7e:07:16:e4:fb:73:72:c7:72:f5:c6:b9:
70:0f:68:c7:15:f1:04:b4:ea:1f:ae:f9:41:db:f3:cf:6d:4b:
c5:1c:71:a3:81:db:47:94:57:ea:b6:e8:d3:b2:b4:c6:2a:4a:
ee:a1:b1:41:61:d6:b5:27:b6:10:19:44:f7:15:b9:54:c3:81:
97:29:96:12:b0:2a:ad:53:84:8b:47:27:6f:59:22:15:38:1f:
26:f1:3d:aa:a5:69:ca:b2:6b:52:b7:19:f6:2b:a3:07:23:60:
36:ea:fd:b1:6e:31:78:20:2e:9b:90:6f:19:4e:0d:a7:e0:cc:
f5:14:73:2b:30:83:06:22:95:0f:41:64:be:e4:f8:fe:0b:1e:
57:91:d4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:37:27 2026 by rpki-client