Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
File: QXQcBdStftaQ5XHvXtD4dSLaR9c.mft (raw, json)
Hash identifier: bepThFGW7W0fIr6nFkTc5njxai5pEtszHUZcaw2lyw8=
Subject key identifier: 84:F2:61:5D:88:16:EF:41:AD:C4:C2:E1:28:01:0C:EB:7E:7A:AB:D9
Authority key identifier: 41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
Certificate issuer: /CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Certificate serial: 019FA9E2B9CA9167A9DEEF499FC54DD143D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
Manifest number: 157E
Signing time: Tue 28 Jul 2026 18:00:35 +0000
Manifest this update: Tue 28 Jul 2026 18:00:35 +0000
Manifest next update: Wed 29 Jul 2026 18:00:35 +0000
Files and hashes: 1: 2TuFVb4q4iH1BTsSUPjnSeD29pc.roa (hash: v7kaWU+42XGto4PM2/gidzpseNZZSa+WuikWviLH7ls=)
2: OtNgvXQFZPXV3K6VEt77FwRHyj0.roa (hash: QlmOgofQg3ZixWb6JBEFzJmxT+Sl5PaItjSGLrWz0n0=)
3: QXQcBdStftaQ5XHvXtD4dSLaR9c.crl (hash: 4y8kTlRSFxCJuNjjFFfErg7vdhsDR2ATg26e3oTK438=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:b9:ca:91:67:a9:de:ef:49:9f:c5:4d:d1:43:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Validity
Not Before: Jul 28 18:00:35 2026 GMT
Not After : Jul 29 18:00:35 2026 GMT
Subject: CN=84f2615d8816ef41adc4c2e128010ceb7e7aabd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:02:e8:05:ad:6b:d4:ac:0e:2c:9f:bf:ae:2c:
7b:92:be:66:74:c6:32:64:05:a9:12:ca:2f:fa:10:
7b:f4:da:f6:e6:c0:4e:d7:69:ca:f0:95:f5:f9:5b:
11:26:52:1b:4a:74:db:17:1a:a5:4b:86:23:b9:97:
8a:d3:6b:cc:c9:c6:2c:ab:c2:49:db:8e:24:36:9b:
1f:c8:e5:53:35:36:8f:3c:6a:87:cd:5c:86:25:4e:
0d:df:98:9a:a0:6e:59:ab:89:a4:a8:e1:87:11:03:
5c:28:43:98:2f:1c:0e:a4:b1:93:f5:69:50:37:54:
f0:35:99:89:42:c0:c0:e0:2e:79:69:1f:ec:a7:c3:
67:91:7f:20:7c:29:67:2e:05:34:54:0b:22:1e:9c:
84:42:2e:aa:9d:14:ae:8e:31:ad:ee:68:9a:68:09:
7c:ca:76:07:7f:4f:5e:9c:e0:d4:09:db:52:b9:d1:
d3:7e:5c:8d:e0:4b:d9:c5:78:53:98:67:0f:5e:d1:
c9:eb:ce:b8:92:69:4a:d4:cc:e1:42:13:14:3e:a7:
8b:a8:00:3a:46:c5:4f:70:ee:0c:5c:19:32:99:db:
48:ca:f4:50:51:0f:72:96:c1:30:46:1f:5c:76:e3:
0d:17:18:be:59:68:81:1b:ea:d9:93:f6:75:60:d6:
bc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F2:61:5D:88:16:EF:41:AD:C4:C2:E1:28:01:0C:EB:7E:7A:AB:D9
X509v3 Authority Key Identifier:
keyid:41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:57:66:fb:57:d8:b5:2a:74:f0:04:79:74:07:af:91:00:e8:
cb:35:54:e8:1d:1b:e3:6e:b0:fb:5c:a0:d5:1d:6f:0a:26:49:
f0:66:96:b7:48:98:26:8a:fb:74:52:3e:77:a6:fe:19:01:64:
a1:88:e6:19:eb:c9:7e:30:8d:1e:52:57:8c:f7:21:38:be:fa:
ac:6f:68:3d:88:8b:85:91:30:1d:36:88:d9:4b:5a:3b:e5:b4:
aa:8e:08:ae:a8:9a:fc:19:d8:39:35:75:77:f4:05:fa:c9:b6:
2b:34:aa:c9:8f:49:ca:bf:60:cf:22:19:c5:26:22:93:3b:75:
19:29:55:32:51:06:48:5d:17:b6:0c:5a:f2:36:fd:d1:ad:e4:
21:8c:54:d8:ef:62:29:85:a6:12:5a:af:df:b8:56:7b:5a:d3:
8d:d5:09:38:9d:46:b3:5f:dd:33:1d:f5:d4:d5:93:8e:da:10:
c0:31:02:c9:1d:e2:c7:15:25:58:d9:d6:b3:5a:f2:7e:89:e3:
4b:47:e2:9d:90:a1:ae:ff:db:63:08:7e:ff:89:46:d7:5b:10:
f2:81:a5:de:a4:97:3c:6a:e9:dc:52:46:2a:fb:77:0b:fe:74:
a0:15:f7:2e:f6:7f:0d:ce:2f:8d:62:d0:56:2a:c3:76:8f:e1:
16:2b:99:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:37:56 2026 by rpki-client