Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
File: QHSniVh1zyxnhUT2zm9LI59JKfs.mft (raw, json)
Hash identifier: m76ViK9LYfFfpMPdPy+5qoqaJNU0LvniLzIcvlUf2QA=
Subject key identifier: 12:24:A8:D7:B9:8A:72:80:D3:CE:A0:C4:A5:D7:7E:B2:B7:22:94:7B
Authority key identifier: 40:74:A7:89:58:75:CF:2C:67:85:44:F6:CE:6F:4B:23:9F:49:29:FB
Certificate issuer: /CN=4074a7895875cf2c678544f6ce6f4b239f4929fb
Certificate serial: 019FACAD428C7F087D67C971DB59D77D55C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
Manifest number: 19D4
Signing time: Wed 29 Jul 2026 07:01:03 +0000
Manifest this update: Wed 29 Jul 2026 07:01:03 +0000
Manifest next update: Thu 30 Jul 2026 07:01:03 +0000
Files and hashes: 1: QHSniVh1zyxnhUT2zm9LI59JKfs.crl (hash: bm6k3Tmmvi7O85jxgtfIIb3Jn0S+4fU8YnBSiASqxxQ=)
2: ugMrWtr-AgbWpTxdCrlYjC4RyWA.roa (hash: 5ukMlR12Rye0g+suC8BFsAQhk/pWlg5h05IGSX13iYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ad:42:8c:7f:08:7d:67:c9:71:db:59:d7:7d:55:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4074a7895875cf2c678544f6ce6f4b239f4929fb
Validity
Not Before: Jul 29 07:01:03 2026 GMT
Not After : Jul 30 07:01:03 2026 GMT
Subject: CN=1224a8d7b98a7280d3cea0c4a5d77eb2b722947b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:b3:52:87:01:be:54:1f:b0:dd:53:5d:4f:ef:
5c:c0:43:96:fc:7f:3e:2a:c3:d2:16:d5:83:78:09:
48:68:34:77:92:d9:2e:ec:ef:9f:c1:e6:d3:be:67:
94:94:fc:6f:47:23:d9:d9:31:fa:06:fb:e2:5a:f4:
1a:9c:5a:c8:20:cd:2c:ea:70:b9:5d:6c:41:cb:57:
cc:80:07:7a:bf:ed:ef:54:d4:a4:7d:c7:9d:12:ed:
54:66:b9:70:31:c5:5b:21:10:2e:29:04:2f:20:d0:
d0:f9:bd:06:ee:5a:5e:d9:98:d2:73:a7:25:43:4b:
b9:30:1c:60:0e:a6:3e:9d:3a:f3:80:c5:dd:78:89:
47:9d:68:7a:ea:81:2c:b6:e1:0a:47:c4:fa:aa:af:
ce:ea:b5:a1:a3:10:ea:5c:38:8d:e9:37:08:3e:0b:
e4:72:9e:03:33:3c:20:8c:b9:e6:cb:bd:12:56:8e:
d9:f2:e5:72:e6:9e:62:39:d7:83:f0:83:1f:63:f0:
61:f9:10:23:fd:08:7e:43:8a:b9:03:e5:d0:d2:a7:
fd:df:ef:c0:1a:76:d5:4f:0d:be:3f:04:e8:32:2a:
24:8f:6a:04:e1:64:cb:1d:14:ac:8e:38:9c:7d:aa:
86:41:dc:8f:08:df:3c:b2:ec:36:d4:1d:d7:71:7d:
78:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:24:A8:D7:B9:8A:72:80:D3:CE:A0:C4:A5:D7:7E:B2:B7:22:94:7B
X509v3 Authority Key Identifier:
keyid:40:74:A7:89:58:75:CF:2C:67:85:44:F6:CE:6F:4B:23:9F:49:29:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:b2:66:3f:a1:be:f8:37:6f:f7:8e:38:85:96:4f:7a:17:89:
b6:37:0d:e6:c8:ca:27:b9:b0:b8:8b:75:83:8d:84:1c:b1:c4:
d5:95:75:a7:6f:b6:4a:92:3b:f5:88:ad:35:fb:1d:9d:0f:64:
dd:61:5a:fc:39:b0:5b:c0:f1:cf:17:0d:84:63:72:61:c9:b5:
46:e2:8d:93:e5:59:fe:37:db:0d:dd:ce:6d:e7:09:2a:a4:2a:
a4:8a:8d:02:6c:a1:20:3f:60:63:d6:88:d2:02:df:db:a9:53:
d2:18:fe:a9:2a:a3:45:85:db:f5:c6:65:0c:46:07:82:6b:4d:
8b:ed:83:34:26:3d:43:a7:ad:87:4d:f7:9d:e1:ec:d9:77:05:
8c:61:7a:6f:a3:49:4f:a7:29:0d:29:77:ab:14:7d:4b:49:e3:
ee:0e:27:2c:f2:a2:bf:fe:d5:73:b1:d4:a7:1e:4d:f1:27:c7:
60:0c:d8:b1:39:e3:68:9b:03:7a:cb:56:41:35:22:33:6c:19:
3d:19:80:0f:df:80:4c:41:45:91:25:72:67:cd:50:3f:16:a6:
ac:c9:50:ea:1a:59:45:9f:51:e5:52:d2:87:b4:4e:7e:f8:c1:
94:ff:6e:97:af:65:39:ad:a4:08:7c:57:bf:1b:13:e5:38:72:
2b:20:51:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:13:46 2026 by rpki-client