Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
File: qyftHOpDIcScPKEPOv-v29rVMsI.mft (raw, json)
Hash identifier: NpyEHZ/WTAeRF7p2NuBVYkH7uSVeByx5j3idzpYfdyE=
Subject key identifier: 13:6C:33:E5:B2:B2:C7:93:71:A2:D7:67:56:0A:EA:7B:E5:F3:8A:1E
Authority key identifier: AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
Certificate issuer: /CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Certificate serial: 019FACACABB666A8B6AF4904E3A1773292D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
Manifest number: 19DC
Signing time: Wed 29 Jul 2026 07:00:24 +0000
Manifest this update: Wed 29 Jul 2026 07:00:24 +0000
Manifest next update: Thu 30 Jul 2026 07:00:24 +0000
Files and hashes: 1: PdSSD1pY2R8sHhODVspC8pD1XNg.roa (hash: Hdy0mlxbyoY3S5V4w6LQ+HVJLICaMsGMYmJLwRUw9C8=)
2: gQS_1Ytr-O-IsbRGOtGTDvNNYeY.roa (hash: s9JwwcRfagDOyb+VnD4SIPFLvOjPpaDEvmlIEjUU6Jk=)
3: qyftHOpDIcScPKEPOv-v29rVMsI.crl (hash: JnNrNk5xvd7UiOO8TWr/H9R6SnaFdsDGigWhfkAG9q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:ab:b6:66:a8:b6:af:49:04:e3:a1:77:32:92:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Validity
Not Before: Jul 29 07:00:24 2026 GMT
Not After : Jul 30 07:00:24 2026 GMT
Subject: CN=136c33e5b2b2c79371a2d767560aea7be5f38a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cb:a6:5a:99:67:49:f8:c6:ec:94:40:c9:f8:
63:6d:19:94:1b:09:3c:25:4c:eb:50:b2:b0:05:12:
fc:61:c6:bc:31:26:46:a2:0b:46:71:8c:c9:dd:ae:
e9:2c:6c:b3:6f:ff:07:4c:46:6a:09:af:ea:c1:d0:
e7:78:e5:99:20:13:fe:24:f8:e9:86:71:43:9a:ce:
79:c5:15:15:4b:df:24:63:7e:bd:65:bc:f5:ed:15:
f5:e9:33:6e:22:d6:30:5f:cd:ef:55:4a:8a:52:54:
84:8a:81:5e:35:a0:f0:e3:44:8c:24:dd:49:45:0a:
86:cd:6a:8c:87:a8:64:33:17:d1:13:91:cb:38:e4:
da:64:a7:45:f8:a2:ce:f6:b5:cf:23:7f:30:1e:a6:
cb:b7:64:b2:80:74:82:2a:ed:09:6a:8c:a5:9a:0b:
f6:ea:6f:e5:9a:c1:cf:cc:b6:31:34:23:58:3c:f3:
c0:81:96:cb:48:d0:77:ad:d2:d5:b0:03:52:cb:c9:
56:88:e3:31:cb:99:02:f8:10:d7:11:46:c5:6c:69:
70:32:56:83:f9:33:81:dd:0d:94:bc:de:28:fd:10:
08:90:73:b1:35:c0:eb:6d:45:6d:d0:b0:8c:05:41:
d4:e7:e2:db:92:20:8d:44:94:92:6e:3e:42:63:d4:
73:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6C:33:E5:B2:B2:C7:93:71:A2:D7:67:56:0A:EA:7B:E5:F3:8A:1E
X509v3 Authority Key Identifier:
keyid:AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:01:cc:e4:3a:44:80:68:9c:af:64:86:15:96:1c:d4:ea:55:
f7:24:f6:3b:a1:bd:43:ea:1c:e4:b1:1b:5a:dc:88:8a:09:ec:
04:81:a3:f6:e4:66:a5:79:18:8f:b8:5b:e8:7d:d3:6d:27:31:
5f:a6:3d:9e:fb:32:7b:a6:64:2b:5a:ac:ff:33:2d:14:30:c6:
06:16:75:52:aa:be:f7:7e:92:07:11:c3:47:8d:cf:74:5b:1c:
84:56:cb:f8:f2:8a:90:81:59:94:5e:14:4d:ac:fc:19:24:5b:
4f:66:a0:26:69:91:47:c1:b8:35:1b:51:88:54:35:86:a3:8a:
c4:1e:97:a5:20:a1:af:78:fa:d9:4a:43:13:ca:91:d5:c4:9b:
21:30:e2:0e:c4:61:5b:8f:be:40:d1:02:77:a3:80:75:af:54:
2f:54:65:f8:d2:b5:09:4e:cc:7f:c2:74:95:0b:82:48:93:93:
fc:f8:0a:de:c6:e4:3b:d4:d8:44:02:5b:88:fd:2e:5d:23:0a:
6c:0c:73:c0:16:68:b7:64:4e:4e:59:8a:f6:41:0a:48:18:40:
2f:e3:2a:a2:ca:db:c5:c2:b1:77:49:7c:63:6d:7a:da:0f:bc:
8e:16:a5:8b:ba:84:fd:f2:85:4a:a8:82:bd:c9:b8:83:66:fd:
19:8a:0a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:30:01 2026 by rpki-client