Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/QbiIzsBviqWb7MzHs6lwGKu3PQs.mft
File: QbiIzsBviqWb7MzHs6lwGKu3PQs.mft (raw, json)
Hash identifier: Vmj/ecaYvXPpYLVh9wSvUWR8veq9Z64mw+Cha87b1bI=
Subject key identifier: 76:B8:E1:5F:C6:73:58:91:5B:ED:65:0D:4D:B1:CD:23:52:6A:94:13
Authority key identifier: 41:B8:88:CE:C0:6F:8A:A5:9B:EC:CC:C7:B3:A9:70:18:AB:B7:3D:0B
Certificate issuer: /CN=41b888cec06f8aa59becccc7b3a97018abb73d0b
Certificate serial: 019FAA88048D9D01775C38C53CCF6FFCE991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbiIzsBviqWb7MzHs6lwGKu3PQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/QbiIzsBviqWb7MzHs6lwGKu3PQs.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:08 +0000
Manifest this update: Tue 28 Jul 2026 21:01:08 +0000
Manifest next update: Wed 29 Jul 2026 21:01:08 +0000
Files and hashes: 1: QbiIzsBviqWb7MzHs6lwGKu3PQs.crl (hash: 590U0M/9xChWG7tAvcmmuapNijEeP4UTvGc6Mm/arqQ=)
2: _QiQmroF9P3WbIwXaXOwVu2gju0.roa (hash: 9+ii97HZuPAGD+TGVcgVZZlv5SLZbzjKViVe7ESoXRc=)
3: kOQCx-Wt3RfUtND4HBeOaf-__Ao.roa (hash: 6wtyOlYKb3vdJIPgCwFvXGUrxNL2Wzr22WnpzvrLq54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/QbiIzsBviqWb7MzHs6lwGKu3PQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/QbiIzsBviqWb7MzHs6lwGKu3PQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbiIzsBviqWb7MzHs6lwGKu3PQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:04:8d:9d:01:77:5c:38:c5:3c:cf:6f:fc:e9:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b888cec06f8aa59becccc7b3a97018abb73d0b
Validity
Not Before: Jul 28 21:01:08 2026 GMT
Not After : Jul 29 21:01:08 2026 GMT
Subject: CN=76b8e15fc67358915bed650d4db1cd23526a9413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1b:46:c4:3e:35:bb:20:4e:72:ec:fe:36:2b:
29:f5:23:d1:1a:38:1b:fa:a9:06:d4:59:11:53:67:
5f:a9:73:d8:a1:bd:b2:9a:93:62:78:c3:8e:57:09:
a6:b2:ad:1c:3b:e7:35:5e:73:79:d5:96:a4:a0:56:
06:4c:97:a4:67:b2:35:19:dd:41:1c:52:17:7a:a6:
5b:37:44:9b:8d:d2:95:d3:8f:b6:0e:b7:bf:bb:31:
3d:a6:e1:5a:8a:57:5e:a7:f0:f0:43:ee:57:09:23:
15:77:39:92:28:62:f4:02:47:68:c9:80:4f:45:7e:
c1:8e:79:ca:21:7e:d0:69:b7:1c:89:4d:28:59:a5:
75:4b:ef:75:dc:96:47:bd:c7:d9:5c:ca:ca:91:7d:
f0:0b:06:21:6c:29:72:74:1e:0b:42:19:6b:3a:83:
72:a0:ab:7b:31:ce:ba:3a:2e:0a:8e:f2:bb:dd:18:
8a:56:d7:5e:2c:c6:de:a5:2b:77:3f:9d:a7:fb:fe:
45:be:f1:05:16:ae:56:16:27:99:d8:d7:a9:73:a2:
30:b8:ca:52:ba:4d:00:a3:e2:c2:71:6e:d2:f8:be:
c2:8d:03:80:75:35:50:0e:b0:c9:28:b2:5f:fc:79:
1f:2e:53:c7:a1:b1:d8:f2:3b:c6:43:d0:0c:34:74:
fa:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B8:E1:5F:C6:73:58:91:5B:ED:65:0D:4D:B1:CD:23:52:6A:94:13
X509v3 Authority Key Identifier:
keyid:41:B8:88:CE:C0:6F:8A:A5:9B:EC:CC:C7:B3:A9:70:18:AB:B7:3D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbiIzsBviqWb7MzHs6lwGKu3PQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/QbiIzsBviqWb7MzHs6lwGKu3PQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/QbiIzsBviqWb7MzHs6lwGKu3PQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:96:0c:08:8a:db:62:e3:6c:45:2f:cb:56:02:38:01:f9:51:
39:39:35:45:7a:26:6d:79:d8:97:5b:ec:6a:c0:7d:53:7f:18:
29:e4:78:5e:ce:8f:99:6b:48:f0:9e:84:bc:da:fd:0e:1c:35:
bf:89:2c:18:73:75:55:f0:33:a8:94:72:96:c0:d2:3c:c3:cc:
ac:5d:28:a2:6e:1d:c3:4b:a4:9b:4f:6c:4a:0e:1c:e9:ec:a0:
0d:4f:75:5e:b6:20:0e:f7:1d:60:3e:19:ac:eb:55:56:16:a8:
7e:12:ec:a2:b0:43:43:93:2e:a8:c2:2c:7c:5a:98:0e:b4:4c:
48:d0:b9:8a:c9:31:1c:a5:32:1a:ed:87:cf:20:79:00:fb:93:
c8:42:d6:bb:d6:de:8a:60:32:76:6f:6b:82:27:74:ef:dd:28:
65:b7:e9:8b:ce:65:65:35:cc:54:58:da:19:73:c1:be:cf:76:
b3:f2:ba:5f:35:a8:0b:45:df:d3:24:b9:c2:b7:29:1c:12:74:
70:60:6e:42:5c:dd:db:af:24:ec:6d:99:70:bc:1d:91:3c:e5:
24:bc:e6:ac:b3:c5:61:e2:61:6a:86:e7:6b:08:c2:0b:81:b6:
7e:58:eb:18:46:0c:5f:ca:51:bf:a0:08:8c:73:d6:fe:01:29:
b2:22:11:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:16:25 2026 by rpki-client