
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
File: qnthN_WvPCLIWhkI1AspQe4sBvQ.mft (raw, json)
Hash identifier: az6KosjNbjY1AqqNVM+1g09v5oI0QiMNWoH1G1qfN+Q=
Subject key identifier: 10:2B:5B:95:F2:52:25:F8:18:F1:B4:2F:4C:EE:AC:3C:9B:AF:FF:46
Authority key identifier: AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4
Certificate issuer: /CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4
Certificate serial: 019FACAD2AA7C2CB20F5B74A308C0A902A85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
Manifest number: 0D1E
Signing time: Wed 29 Jul 2026 07:00:57 +0000
Manifest this update: Wed 29 Jul 2026 07:00:57 +0000
Manifest next update: Thu 30 Jul 2026 07:00:57 +0000
Files and hashes: 1: EvhdgJldzrTyPRhTwu7_R0oOsRk.roa (hash: jp9wh8X1nWQb/EKe4T8unvTtIOObggs6fceKYXSVd0M=)
2: KeD4L6y8pe2jawoO0v_Iw05d7f0.roa (hash: MlHed28QjL1er2kf3lP9+8MfBm3P54VkdbgLne7YLtA=)
3: qnthN_WvPCLIWhkI1AspQe4sBvQ.crl (hash: tWGD07RjCN1JToNg8lCAxT4PWyxQqcOvzNwg9wFRqkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ad:2a:a7:c2:cb:20:f5:b7:4a:30:8c:0a:90:2a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4
Validity
Not Before: Jul 29 07:00:57 2026 GMT
Not After : Jul 30 07:00:57 2026 GMT
Subject: CN=102b5b95f25225f818f1b42f4ceeac3c9bafff46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:20:1d:e3:09:66:31:63:eb:33:f7:52:80:33:
60:77:1b:ba:35:4f:1c:d2:c1:fd:e0:77:30:2b:ef:
63:ea:6a:99:22:8a:e4:63:1e:42:ca:8f:79:ec:e9:
eb:c5:8c:f4:86:7f:9a:74:65:da:cd:c1:05:21:52:
32:2a:25:3a:7e:d2:1f:8f:f2:96:f8:8b:62:4b:da:
3d:68:7c:35:c3:12:dc:07:7c:0a:29:71:ee:6a:38:
b3:25:60:f3:d7:cd:32:c1:d5:5b:f0:88:a0:6d:18:
8c:32:9e:2d:c2:ac:47:4c:bc:af:ee:cf:46:7f:8c:
27:e5:78:f3:65:84:3e:02:c8:e8:ff:73:eb:d9:cf:
8f:b0:a4:03:e6:e4:5e:97:2f:c9:c5:49:86:8d:62:
a9:27:75:44:38:5e:3c:f0:44:8e:b5:86:6c:f8:ad:
49:ae:18:a8:01:62:bf:ce:38:f6:0b:13:5b:d3:b1:
07:7a:02:66:f2:5f:0c:7d:fb:9d:bf:61:fc:74:47:
3e:e0:9d:88:ec:7f:de:3c:c6:39:79:a4:cf:90:de:
3b:23:60:e2:b7:2a:e4:fd:88:05:1c:40:b6:d9:a9:
9e:2e:0d:58:23:2b:ef:42:57:46:d2:51:03:d5:f3:
92:2a:f9:9b:ba:7a:f7:db:86:0c:1b:4f:c7:d9:bc:
c4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2B:5B:95:F2:52:25:F8:18:F1:B4:2F:4C:EE:AC:3C:9B:AF:FF:46
X509v3 Authority Key Identifier:
keyid:AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:46:bc:d2:e7:18:0c:62:4c:40:ce:ee:ab:5e:37:61:dd:d0:
dc:8d:ca:24:22:fe:59:10:62:f3:9d:37:d0:50:06:67:47:1e:
bd:8e:2e:ba:b7:27:37:8a:f0:5c:e8:c3:81:bd:a4:f8:a7:8b:
08:fa:83:8d:cd:fd:84:48:50:12:6f:04:b3:be:65:8a:06:7f:
eb:d9:9e:87:72:72:32:0e:5f:44:ca:5d:bd:72:85:9b:0b:2e:
e8:aa:c9:82:b1:e8:b5:35:32:ba:4a:a3:1c:58:e0:c6:b3:45:
47:e1:12:0e:cb:40:36:e7:2f:8b:1c:16:74:6f:54:90:d9:ec:
76:d0:1c:5c:20:28:0f:c0:3e:1f:7f:f4:d0:68:b1:41:3a:8d:
df:ac:4a:31:f7:b3:6e:48:28:cd:bd:e3:3d:28:18:1d:d0:47:
63:68:93:9f:6a:2d:83:85:5c:a6:72:72:46:20:c2:cf:64:ad:
c0:86:be:be:0d:18:93:e7:85:6e:a9:fb:5b:ba:1a:16:2e:8f:
5b:ff:cc:25:3b:81:8e:7c:06:ee:dc:68:94:be:a9:2f:d0:39:
58:f2:d7:c4:a9:a7:6f:21:38:e4:1c:a0:b7:25:b5:84:8c:b2:
89:2b:03:82:9b:11:c1:e6:b9:c2:48:31:2a:63:8a:ee:ab:00:
a9:ef:a0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:23:06 2026 by rpki-client