Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/QP4jqg2xC2-IOpvBujN0lE8welQ.mft
File: QP4jqg2xC2-IOpvBujN0lE8welQ.mft (raw, json)
Hash identifier: B/CYFGwaERAmOpPhJaFUirIG50aHB648BomvS0lFUA0=
Subject key identifier: 39:DC:B1:9B:D6:57:D0:04:86:1F:12:3B:7C:65:5E:5D:8B:10:1E:BA
Authority key identifier: 40:FE:23:AA:0D:B1:0B:6F:88:3A:9B:C1:BA:33:74:94:4F:30:7A:54
Certificate issuer: /CN=40fe23aa0db10b6f883a9bc1ba3374944f307a54
Certificate serial: 019FAC7660236BC9B9ABCE0EE3A893956FF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QP4jqg2xC2-IOpvBujN0lE8welQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/QP4jqg2xC2-IOpvBujN0lE8welQ.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:06 +0000
Manifest this update: Wed 29 Jul 2026 06:01:06 +0000
Manifest next update: Thu 30 Jul 2026 06:01:06 +0000
Files and hashes: 1: QP4jqg2xC2-IOpvBujN0lE8welQ.crl (hash: a9lYrW3D14dmEoWKxmVr6ouY+M9hVGtTvSH382xkYuE=)
2: d7z8TwLlS3vreU1zRMAd0zM28Bg.roa (hash: xNI8ZsYvpaH/qY+V6WC5BKC0Y6wfNmacANSCIsjTHpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/QP4jqg2xC2-IOpvBujN0lE8welQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/QP4jqg2xC2-IOpvBujN0lE8welQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QP4jqg2xC2-IOpvBujN0lE8welQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:60:23:6b:c9:b9:ab:ce:0e:e3:a8:93:95:6f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40fe23aa0db10b6f883a9bc1ba3374944f307a54
Validity
Not Before: Jul 29 06:01:06 2026 GMT
Not After : Jul 30 06:01:06 2026 GMT
Subject: CN=39dcb19bd657d004861f123b7c655e5d8b101eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:42:8b:2e:57:1a:ae:65:c7:48:df:aa:ed:21:
e8:2f:d0:e1:65:36:ed:2f:71:c7:ba:64:06:66:3c:
ee:56:f6:9f:73:0f:97:03:a5:87:dc:81:8f:2c:82:
0c:47:15:f8:7b:4e:af:c8:98:1d:a1:8d:31:5e:00:
54:09:d0:34:a3:d9:02:7f:20:4c:af:9d:48:0b:47:
56:e0:dc:49:0a:d4:a9:28:e0:f3:da:4f:f7:38:b3:
ce:e3:43:f6:31:d0:b1:88:e0:ce:81:12:19:fe:97:
c2:b1:fa:6c:db:c5:38:da:b0:2e:6f:f2:a6:00:fa:
a4:99:51:71:94:c4:59:90:88:f4:f3:1d:85:39:f9:
7f:9f:88:e0:f0:13:51:00:62:61:f0:d1:d2:3d:a2:
eb:01:01:6b:e4:69:a9:5a:b2:15:f1:52:31:9a:e3:
9c:17:c8:90:64:bf:5b:81:0b:4c:ee:f8:b9:cb:9b:
39:1d:ec:3d:55:41:b8:4a:99:25:5d:bf:d3:18:d0:
48:ca:cc:f3:4a:c9:0c:c8:0d:6a:a6:68:cb:f8:16:
9b:7d:1d:8c:d3:a1:63:46:37:46:df:5f:be:98:42:
59:9e:60:8b:80:e2:1d:77:10:eb:e4:fa:fc:ad:a9:
18:09:eb:fa:a6:50:76:c7:fc:d2:a2:d6:78:b0:ea:
ad:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DC:B1:9B:D6:57:D0:04:86:1F:12:3B:7C:65:5E:5D:8B:10:1E:BA
X509v3 Authority Key Identifier:
keyid:40:FE:23:AA:0D:B1:0B:6F:88:3A:9B:C1:BA:33:74:94:4F:30:7A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QP4jqg2xC2-IOpvBujN0lE8welQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/QP4jqg2xC2-IOpvBujN0lE8welQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/QP4jqg2xC2-IOpvBujN0lE8welQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d4:1c:cc:f1:52:48:6a:4b:c1:21:84:ef:8d:53:24:80:f0:
f7:ae:03:8b:f1:5c:92:d2:c0:09:9a:0f:2d:97:24:0b:06:ff:
cb:97:e9:0e:87:3d:32:ec:28:82:75:e7:17:27:48:40:fc:96:
05:aa:55:5a:8f:e6:e6:b7:57:1e:18:be:66:45:38:f5:ee:13:
28:0a:66:15:5f:88:0f:cb:e1:38:7a:98:88:ea:db:2d:86:dc:
61:61:3b:2f:93:b8:d3:a5:e3:be:ae:23:fa:6a:36:da:17:07:
21:93:17:d6:a2:5d:6a:51:ff:b3:41:47:ac:da:17:9d:40:e8:
a3:cf:3a:dd:59:a1:fc:0c:24:25:fc:ec:7a:91:76:29:30:15:
25:e7:84:86:d0:50:86:71:83:98:97:3b:ef:9a:a2:9a:1c:c6:
ab:76:ef:46:43:39:f3:d9:03:4f:05:62:ef:9b:15:5e:0c:69:
bd:e0:5c:a8:dd:81:5a:56:f5:f9:42:48:1a:ef:67:e8:df:28:
ad:4a:4b:e5:6a:61:ec:00:f0:04:3f:5b:5b:9a:95:75:03:0f:
cc:6f:dc:9c:b7:9d:64:71:dc:29:c0:2f:10:69:db:c1:20:a3:
34:b2:88:ce:61:bb:21:e0:81:0c:9c:29:e2:43:7d:ff:22:0a:
58:34:5f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:05:24 2026 by rpki-client