Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
File: Q_BsNphySzf-GhcRQX29iOu_CpE.mft (raw, json)
Hash identifier: iscC/X1c8/vkjNZLri7tA6U5V2XP/1G0NMQduvOw39s=
Subject key identifier: 10:F1:02:14:82:CB:E7:87:A7:93:CB:6A:03:90:6D:DD:13:03:F6:2F
Authority key identifier: 43:F0:6C:36:98:72:4B:37:FE:1A:17:11:41:7D:BD:88:EB:BF:0A:91
Certificate issuer: /CN=43f06c3698724b37fe1a1711417dbd88ebbf0a91
Certificate serial: 019FAAF5DE90D02898F29CF424102B49391F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
Manifest number: 0328
Signing time: Tue 28 Jul 2026 23:01:07 +0000
Manifest this update: Tue 28 Jul 2026 23:01:07 +0000
Manifest next update: Wed 29 Jul 2026 23:01:07 +0000
Files and hashes: 1: 9i2FNq-ilnO82a12KCx8bZf9uj0.roa (hash: e5YuVWmmuJUMRKFIac15BKkt/ujz30drSZUPYaFPPoE=)
2: Q_BsNphySzf-GhcRQX29iOu_CpE.crl (hash: PJu8eCTr41YVNNeosht3uAvW4d2uKPiudhIVAvXD5zg=)
3: WGgjc9Dg0G9csDwIMq1t0ZtJTWA.roa (hash: cVZmg6mqBIAtl689EL6CUc0A6vHkHLnQ4WlcU+2etIc=)
4: tvttSBr7BAYjU6B6SYrmyrXgmPc.roa (hash: cY0rsNXodbspFudhEGa5CSODCsQ4WfZrUF/qlRWnO7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:de:90:d0:28:98:f2:9c:f4:24:10:2b:49:39:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43f06c3698724b37fe1a1711417dbd88ebbf0a91
Validity
Not Before: Jul 28 23:01:07 2026 GMT
Not After : Jul 29 23:01:07 2026 GMT
Subject: CN=10f1021482cbe787a793cb6a03906ddd1303f62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d4:a6:59:8c:62:2b:39:97:43:8e:cd:7d:66:
dd:65:14:b4:07:8a:85:ec:88:2e:d0:d6:55:93:56:
f2:8e:46:46:35:85:2f:b0:f9:93:17:ae:32:32:1e:
36:ad:f5:a5:88:89:05:36:82:cc:6d:2f:3c:f9:37:
87:50:ae:cf:af:0e:06:6f:94:6e:d7:db:34:e7:61:
c4:db:67:eb:ba:1b:e8:6a:4b:61:75:86:d0:8b:62:
71:6f:d1:89:ed:27:25:48:44:8e:e4:2d:b2:8f:6b:
9e:19:ee:c7:28:72:4c:24:11:e8:71:92:43:0b:77:
0b:34:96:ac:97:e6:7b:7a:ca:fa:2a:b3:eb:66:27:
93:fe:da:38:c7:96:97:16:4c:45:29:03:8c:ba:68:
8c:78:83:99:9b:93:0d:87:d3:55:27:a1:8e:04:79:
de:88:39:e5:6f:65:39:ab:b6:39:fe:d7:ff:de:86:
76:94:99:3b:e0:e5:1c:cf:a9:27:82:73:2e:53:8b:
78:d1:9b:68:b2:6b:1c:40:9c:cc:41:9f:a7:71:d4:
1f:64:bb:95:36:1c:50:c0:2d:cc:d6:de:1e:46:e7:
88:f9:6e:d8:83:c0:ac:49:af:ad:80:b6:af:7a:5f:
21:e0:73:91:5e:9c:45:e0:27:12:d8:2c:a1:7a:b9:
1e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F1:02:14:82:CB:E7:87:A7:93:CB:6A:03:90:6D:DD:13:03:F6:2F
X509v3 Authority Key Identifier:
keyid:43:F0:6C:36:98:72:4B:37:FE:1A:17:11:41:7D:BD:88:EB:BF:0A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:59:d8:89:4b:f8:9b:9e:46:f1:cd:d0:aa:1e:79:30:d5:9b:
95:7a:31:86:7f:7a:2e:ba:b6:66:e6:00:9a:68:2d:f5:44:c2:
da:73:77:ae:8f:f2:d5:74:7a:0d:8f:8e:a7:5f:3c:31:b4:f6:
40:8e:5c:e3:53:4b:8f:00:52:fb:40:14:06:ea:c9:f4:fe:ee:
f2:13:14:42:7c:c9:e5:03:01:6e:af:4c:2d:e0:29:83:33:8d:
47:59:d8:d0:d2:4a:80:53:8d:0e:4d:88:4c:31:24:06:95:e4:
c9:a7:21:5c:c0:14:c1:af:07:c5:7a:77:a5:af:aa:b1:7e:86:
5b:dc:35:b9:87:db:2a:ef:5d:81:19:bb:ad:fa:d5:02:90:7e:
f0:4e:be:c6:c1:c5:bb:60:48:96:41:4f:f3:9c:08:5d:26:5b:
7d:6e:4e:42:a9:bd:b2:46:24:35:7f:2c:28:ac:d3:d3:2c:a7:
93:12:8f:d1:b0:3f:d1:4c:3d:f3:54:2a:a2:a6:cd:d5:ff:42:
9f:6f:a4:0e:0e:81:46:59:d8:93:43:94:87:30:0c:7c:32:66:
bb:b5:0f:6e:22:73:84:b7:41:25:43:30:c9:65:1f:e4:b7:1d:
28:2d:99:17:ca:f6:de:04:94:48:19:76:8f:41:00:32:b3:9e:
4a:8c:aa:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:16:22 2026 by rpki-client