Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft
File: QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft (raw, json)
Hash identifier: qGlkhI21xamvR8Iu2JNDcQdRLRyQ4SnOO/7Ex0/0M3Q=
Subject key identifier: 07:AC:AC:0C:00:52:D4:CA:A8:79:F5:DB:DB:A5:4F:5E:CF:54:E1:96
Authority key identifier: 43:20:6C:3E:56:8D:B7:8A:76:CB:AB:14:2E:0E:5B:F4:F6:82:EF:E6
Certificate issuer: /CN=43206c3e568db78a76cbab142e0e5bf4f682efe6
Certificate serial: 019FA975B498E924BD7EFD721954AD4A9D71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QyBsPlaNt4p2y6sULg5b9PaC7-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft
Manifest number: 02BA
Signing time: Tue 28 Jul 2026 16:01:31 +0000
Manifest this update: Tue 28 Jul 2026 16:01:31 +0000
Manifest next update: Wed 29 Jul 2026 16:01:31 +0000
Files and hashes: 1: QyBsPlaNt4p2y6sULg5b9PaC7-Y.crl (hash: c+cK1W2KIoVsIgY13vLY/zca+uLcRKYug9FEc9vOZRs=)
2: ym0w1cReqBylheC3xkqexBP3tgU.roa (hash: zFKUp71k5SpR7ghjnbVLoDMDBWhAa4PbF+krqnsksRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/QyBsPlaNt4p2y6sULg5b9PaC7-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 16:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:b4:98:e9:24:bd:7e:fd:72:19:54:ad:4a:9d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43206c3e568db78a76cbab142e0e5bf4f682efe6
Validity
Not Before: Jul 28 16:01:31 2026 GMT
Not After : Jul 29 16:01:31 2026 GMT
Subject: CN=07acac0c0052d4caa879f5dbdba54f5ecf54e196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d7:83:78:2e:17:09:ec:1a:d6:40:de:6d:f6:
bc:99:ac:0c:ae:67:60:ba:dd:09:47:b3:3c:05:f3:
85:6e:9f:77:13:53:9d:7a:68:70:87:a8:a3:2b:0e:
e2:97:7c:47:fc:55:6e:bf:64:dc:13:71:90:63:e4:
ef:4a:87:a4:7d:13:0c:8c:27:ad:20:4e:c0:ce:cb:
1f:a1:2f:ee:5b:74:ba:45:f8:f4:84:0e:bc:46:66:
b0:4a:8d:ad:7e:67:3b:e2:3c:20:ff:59:6e:5f:b8:
41:fa:4d:9e:9f:2c:dc:8c:3b:3a:8e:11:bb:ab:70:
29:53:8c:75:08:d5:30:3d:57:2b:9d:0a:aa:42:fa:
9f:47:bd:09:75:1d:95:78:17:c3:be:a7:0d:14:ab:
60:43:f5:3d:8a:9f:84:1f:63:76:19:22:4a:49:82:
d9:81:9c:5a:3b:77:b8:31:9f:08:48:88:55:a8:07:
b8:90:e9:47:7e:0f:19:a8:fe:c1:da:b1:ef:56:55:
3d:e8:73:5d:d9:0c:8a:88:84:62:d7:29:cd:af:e7:
16:59:1d:60:59:85:69:2b:59:65:67:58:7d:e9:25:
ca:99:d2:3b:4d:ff:48:38:64:22:fe:39:c6:4d:fa:
86:97:08:df:38:c4:97:30:51:bf:eb:d1:f3:ea:b5:
2b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AC:AC:0C:00:52:D4:CA:A8:79:F5:DB:DB:A5:4F:5E:CF:54:E1:96
X509v3 Authority Key Identifier:
keyid:43:20:6C:3E:56:8D:B7:8A:76:CB:AB:14:2E:0E:5B:F4:F6:82:EF:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QyBsPlaNt4p2y6sULg5b9PaC7-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:73:1f:fd:08:23:cb:66:79:65:d4:12:f8:f7:1e:f3:8a:04:
67:58:1a:76:bf:c3:8b:02:ce:6b:12:cb:82:fd:08:71:8f:a3:
3a:d5:2f:f1:b2:26:b1:1c:fc:c0:03:b7:3c:3b:95:f1:b2:33:
69:b5:f4:8b:db:f2:13:42:7f:74:97:70:b5:c7:75:09:39:3e:
d2:c6:8a:af:22:e2:0b:8f:0a:78:fd:75:85:7e:8c:a2:f4:92:
99:ae:63:80:f0:38:e1:64:20:9c:54:ba:ec:17:73:58:2c:c5:
a8:1c:14:9f:67:58:cd:ed:fa:b1:5e:e8:d8:21:4e:4b:f2:5e:
15:a7:63:83:93:ca:43:a0:da:54:17:a4:fc:dd:3d:af:79:b6:
c5:e6:98:2c:84:ea:5f:ad:df:35:a0:11:42:64:41:d8:54:b4:
54:97:8c:3f:64:4f:51:5f:38:6b:48:a3:92:aa:51:60:b9:4a:
93:3b:01:a8:20:eb:9e:32:2b:8d:56:99:ab:16:6f:cf:8d:fc:
96:62:b2:8b:f8:d3:a5:82:c4:53:9c:02:19:be:44:2e:33:1b:
39:05:b3:46:78:57:91:56:59:c3:87:07:3e:b2:49:4a:9b:46:
36:e0:61:fc:30:70:17:2b:33:dc:75:a2:f9:91:76:98:fb:5c:
95:17:b4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:05:23 2026 by rpki-client