
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
File: QHSniVh1zyxnhUT2zm9LI59JKfs.mft (raw, json)
Hash identifier: /PRgALPh7cJzgMpWvEBQVwk/Su2PfTYtQiAIecFF93U=
Subject key identifier: 42:23:61:43:16:2F:5F:94:E2:77:36:62:02:A2:6B:A4:4A:B8:E5:2A
Authority key identifier: 40:74:A7:89:58:75:CF:2C:67:85:44:F6:CE:6F:4B:23:9F:49:29:FB
Certificate issuer: /CN=4074a7895875cf2c678544f6ce6f4b239f4929fb
Certificate serial: 019FAABEA119B8B5CCD7FC27D413DF4129CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 22:00:47 +0000
Manifest this update: Tue 28 Jul 2026 22:00:47 +0000
Manifest next update: Wed 29 Jul 2026 22:00:47 +0000
Files and hashes: 1: QHSniVh1zyxnhUT2zm9LI59JKfs.crl (hash: 4JcRMyy/D2BHRHXWTAZL77EOKaU/7C/eLQnr8IJmlNQ=)
2: ugMrWtr-AgbWpTxdCrlYjC4RyWA.roa (hash: 5ukMlR12Rye0g+suC8BFsAQhk/pWlg5h05IGSX13iYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:a1:19:b8:b5:cc:d7:fc:27:d4:13:df:41:29:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4074a7895875cf2c678544f6ce6f4b239f4929fb
Validity
Not Before: Jul 28 22:00:47 2026 GMT
Not After : Jul 29 22:00:47 2026 GMT
Subject: CN=42236143162f5f94e277366202a26ba44ab8e52a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:88:18:1c:51:ce:06:3f:28:aa:90:32:f5:5b:
87:d5:22:c8:68:12:27:99:46:cd:af:8d:78:38:0d:
5d:ef:04:62:6d:ae:15:17:50:a6:f8:3c:6a:10:5b:
29:c7:ea:cc:7a:0d:09:0f:0c:12:3f:7c:45:d4:4d:
70:3c:0e:14:9c:74:29:71:9c:dd:3b:e4:a6:fd:92:
5a:5e:c8:64:02:4b:44:91:8f:67:36:ce:aa:fe:96:
5b:84:d2:cb:4e:e0:82:56:3d:49:b9:e2:49:86:32:
08:ed:07:23:2d:4b:82:fa:59:39:af:b0:cf:95:9b:
7e:cc:dd:6e:6e:a2:44:f8:de:6d:0d:2a:7e:10:2e:
f5:a2:c0:b4:91:cb:c7:0c:ff:35:c8:8e:61:a2:24:
b1:19:c7:99:e8:7c:2b:0b:b3:89:d1:54:22:63:61:
6d:9c:49:ee:21:eb:1f:12:a1:0c:c6:08:e5:7d:17:
c3:9f:28:54:67:35:21:4b:3e:62:6d:b8:43:40:94:
5e:f0:2f:b6:0a:ad:9c:44:64:7a:68:50:07:08:66:
96:e3:a0:34:1f:15:7e:58:a2:d5:0f:88:05:4f:88:
7e:ef:03:bb:8c:7a:3c:2c:e6:a0:32:9a:c2:a9:f0:
61:fe:e3:43:4c:eb:46:46:dc:7a:d9:cf:d4:3f:ca:
30:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:23:61:43:16:2F:5F:94:E2:77:36:62:02:A2:6B:A4:4A:B8:E5:2A
X509v3 Authority Key Identifier:
keyid:40:74:A7:89:58:75:CF:2C:67:85:44:F6:CE:6F:4B:23:9F:49:29:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f7:90:dd:0c:a7:b8:7c:6f:e6:21:07:4c:b1:ce:84:c3:fd:
ae:bf:d5:71:31:4e:40:3e:74:e0:ea:b9:e4:b7:ce:1b:d0:8a:
2b:fd:fe:b0:62:35:e4:f6:58:52:26:c6:52:1c:08:7e:ce:d5:
70:d4:ab:35:34:36:1e:f0:ca:7e:85:0d:d8:fd:19:80:70:3f:
c3:c1:b3:62:8b:7e:55:04:7b:e6:40:78:74:da:7a:73:d2:44:
d9:48:a5:cc:7d:63:08:13:65:1e:2f:b1:47:56:89:b0:86:8c:
a7:33:43:15:66:12:86:24:8a:38:71:a8:61:e5:cb:82:27:5e:
c6:c1:88:c5:f6:20:bf:a8:1e:94:72:e7:8a:50:07:f0:a8:7c:
fb:61:f1:ff:54:74:c9:b9:53:ff:4f:23:fb:47:7d:e2:b7:a6:
9f:56:6d:ec:74:44:b6:b4:47:f0:9f:d6:7f:8c:3e:33:19:a7:
8a:16:5c:92:1b:0d:2a:d4:b6:9b:34:21:4e:91:df:df:52:28:
82:97:89:2d:3d:03:46:22:ac:86:e4:78:f7:b4:ff:8b:7a:ed:
86:6d:38:47:7b:52:9b:2d:8d:6f:c7:51:21:9a:aa:46:8e:a0:
bb:8f:9b:fb:f4:7c:8c:bc:fe:6b:3a:c8:af:a6:6d:58:69:b8:
0a:71:91:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:04:47 2026 by rpki-client