Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
File: Q_BsNphySzf-GhcRQX29iOu_CpE.mft (raw, json)
Hash identifier: fJ7/MLXDp1aG4Mrb4Agn5NypE7HdFApQk38wgWBnRxs=
Subject key identifier: 72:68:4B:44:DD:33:21:A8:F1:EA:12:F2:27:78:CF:FB:0A:A1:A8:37
Authority key identifier: 43:F0:6C:36:98:72:4B:37:FE:1A:17:11:41:7D:BD:88:EB:BF:0A:91
Certificate issuer: /CN=43f06c3698724b37fe1a1711417dbd88ebbf0a91
Certificate serial: 019FACE40B47710403D2688378FFED235E88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
Manifest number: 0329
Signing time: Wed 29 Jul 2026 08:00:53 +0000
Manifest this update: Wed 29 Jul 2026 08:00:53 +0000
Manifest next update: Thu 30 Jul 2026 08:00:53 +0000
Files and hashes: 1: 9i2FNq-ilnO82a12KCx8bZf9uj0.roa (hash: e5YuVWmmuJUMRKFIac15BKkt/ujz30drSZUPYaFPPoE=)
2: Q_BsNphySzf-GhcRQX29iOu_CpE.crl (hash: QtSJHRNGQPkdS25J6tzGZylfeW1MKO1Rk9Bs2oGPnoA=)
3: WGgjc9Dg0G9csDwIMq1t0ZtJTWA.roa (hash: cVZmg6mqBIAtl689EL6CUc0A6vHkHLnQ4WlcU+2etIc=)
4: tvttSBr7BAYjU6B6SYrmyrXgmPc.roa (hash: cY0rsNXodbspFudhEGa5CSODCsQ4WfZrUF/qlRWnO7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e4:0b:47:71:04:03:d2:68:83:78:ff:ed:23:5e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43f06c3698724b37fe1a1711417dbd88ebbf0a91
Validity
Not Before: Jul 29 08:00:53 2026 GMT
Not After : Jul 30 08:00:53 2026 GMT
Subject: CN=72684b44dd3321a8f1ea12f22778cffb0aa1a837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c7:91:9f:82:4e:7e:e9:35:d7:a6:48:7a:81:
ed:6e:30:15:34:46:ed:c1:65:14:48:46:a3:a3:6a:
a7:51:86:31:5f:39:1f:d1:b6:41:44:32:8c:5c:42:
1d:fd:76:9e:11:2f:12:b8:60:34:1f:53:f9:0d:99:
22:0d:59:a3:e5:23:09:f9:da:75:b2:c6:3b:f1:cd:
ea:26:62:c5:13:ff:ed:03:2c:ad:fc:4f:7f:f7:da:
b5:01:53:23:63:a8:67:99:09:84:a2:02:d4:e1:ce:
15:47:1e:f9:91:1d:a5:ed:66:3f:51:ec:9d:1e:5f:
2b:48:49:37:08:ef:8e:30:f5:0f:9c:6e:11:16:b0:
31:d3:2d:57:9b:11:c8:1e:5b:db:08:26:49:4e:5e:
b2:6a:d1:e9:ba:d1:65:bb:3d:3d:57:dd:d4:7c:e3:
c8:c2:43:5a:55:ab:d8:3f:96:ba:4f:9c:12:2d:5b:
96:c5:1c:00:72:d1:5b:26:b2:d7:50:af:6a:d5:e7:
c4:3c:ee:89:ee:07:97:59:41:67:03:be:f7:98:7c:
43:4b:d5:79:7c:bb:39:de:a7:bf:0b:0a:f4:50:a7:
4c:41:1b:66:51:7b:7c:8e:ee:ae:e9:10:85:5f:b7:
f4:dc:64:17:e0:e0:a2:ec:87:0f:a1:dd:5d:31:fb:
b4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:68:4B:44:DD:33:21:A8:F1:EA:12:F2:27:78:CF:FB:0A:A1:A8:37
X509v3 Authority Key Identifier:
keyid:43:F0:6C:36:98:72:4B:37:FE:1A:17:11:41:7D:BD:88:EB:BF:0A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:5b:77:f7:3d:7a:8f:da:c6:2d:5e:af:93:e3:4b:a0:a5:fc:
cb:f4:90:c2:39:3c:a5:8e:e0:8b:1a:cf:e0:e1:d9:64:58:40:
a2:56:ee:46:1d:7b:2c:85:ef:7b:a7:95:ba:a5:62:9d:58:6a:
57:fc:b8:f2:b2:70:31:b5:18:14:c7:b9:dc:04:32:4b:ec:22:
50:5e:e4:71:95:f9:a5:09:e8:6a:7b:f0:13:aa:38:ec:46:d7:
47:2c:b3:d7:2b:a2:90:6e:90:d5:90:d8:e4:bd:e7:f3:bc:54:
ba:4a:78:97:f0:e8:b9:81:6c:fc:2a:54:fe:f5:0c:1a:1a:1b:
c6:4f:01:93:51:a4:fc:6d:fd:b1:6d:06:83:b9:39:eb:5e:9f:
d8:1c:0d:1d:2d:d1:1d:0f:19:50:20:db:49:9c:50:64:6a:42:
55:e0:ac:8f:b8:07:06:e8:98:67:8e:3b:e2:83:0e:84:9c:38:
ec:4a:3b:33:2b:c7:41:52:9f:d3:7d:9c:c2:22:0b:cf:65:6b:
d9:fc:58:3b:9c:0e:7c:d2:5a:1f:6a:90:64:47:bf:64:c0:0f:
f6:69:8b:84:b7:87:3c:4c:7c:59:60:ee:f6:a4:1b:9f:c2:3a:
bb:9f:8d:b2:c3:ea:49:cf:46:14:d1:9c:26:c2:b4:51:80:e7:
e6:3b:d8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:23:04 2026 by rpki-client