Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a7d7b3-74da-4063-871c-5e5c668deec5/1/QkvsoBqR5ElnbCSXkTLqwzGDP1Q.mft
File: QkvsoBqR5ElnbCSXkTLqwzGDP1Q.mft (raw, json)
Hash identifier: TcQH1cbRSICPKBGvTFYZkMKLJk00Os16jScwQ74KSjo=
Subject key identifier: 35:FF:D7:90:17:E7:4B:3F:73:0F:52:1A:77:EF:2B:20:CA:27:4F:90
Authority key identifier: 42:4B:EC:A0:1A:91:E4:49:67:6C:24:97:91:32:EA:C3:31:83:3F:54
Certificate issuer: /CN=424beca01a91e449676c24979132eac331833f54
Certificate serial: 019FA862258F63F6F18CCB2FCDAD346D8144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QkvsoBqR5ElnbCSXkTLqwzGDP1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a7d7b3-74da-4063-871c-5e5c668deec5/1/QkvsoBqR5ElnbCSXkTLqwzGDP1Q.mft
Manifest number: 25
Signing time: Tue 28 Jul 2026 11:00:32 +0000
Manifest this update: Tue 28 Jul 2026 11:00:32 +0000
Manifest next update: Wed 29 Jul 2026 11:00:32 +0000
Files and hashes: 1: QkvsoBqR5ElnbCSXkTLqwzGDP1Q.crl (hash: HFgbODoiHfpRe+M4S1rbGn23iPrgNQw5XSI0/9WgO7o=)
2: de2C8qkGD2C8WyY4VZXQCLj4xeA.roa (hash: Z2unCzdVebpB8G2PHQLt6XCekXAlV21Yon5IAjnmYi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a7d7b3-74da-4063-871c-5e5c668deec5/1/QkvsoBqR5ElnbCSXkTLqwzGDP1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a7d7b3-74da-4063-871c-5e5c668deec5/1/QkvsoBqR5ElnbCSXkTLqwzGDP1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QkvsoBqR5ElnbCSXkTLqwzGDP1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:25:8f:63:f6:f1:8c:cb:2f:cd:ad:34:6d:81:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424beca01a91e449676c24979132eac331833f54
Validity
Not Before: Jul 28 11:00:32 2026 GMT
Not After : Jul 29 11:00:32 2026 GMT
Subject: CN=35ffd79017e74b3f730f521a77ef2b20ca274f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ed:64:6f:35:2d:f9:57:97:65:a0:07:47:55:
fb:39:fa:2f:a1:bf:d3:99:b0:20:73:b5:09:9e:7d:
42:64:ed:59:72:ad:51:28:f2:32:fd:5c:7a:6e:b8:
41:15:16:6a:9f:b3:30:51:d3:32:17:63:0e:e5:9c:
9f:b3:85:1d:0c:db:e9:21:47:6d:84:ae:61:5f:66:
aa:ea:dd:53:85:98:ac:72:96:33:40:de:47:64:11:
a4:ef:a2:6f:71:4e:2b:20:f4:e1:99:4a:df:db:a4:
72:86:ac:b1:04:19:42:67:45:de:86:05:2f:ed:fa:
4b:6c:a7:2c:d0:c0:8a:c5:1f:9b:70:73:24:35:80:
92:e2:3a:41:16:c8:de:10:17:95:81:bb:31:7c:b7:
4e:25:09:94:1f:6a:27:ff:41:9d:e1:21:be:89:69:
75:f8:52:db:d1:36:7d:f5:81:b1:e5:b1:0e:f1:94:
38:96:44:33:f0:8d:90:1e:3e:52:99:e2:aa:e3:e0:
5b:70:ce:b4:3f:28:ed:e0:6f:c2:b9:99:c8:de:13:
92:51:de:bb:94:1e:29:67:55:a3:e4:f8:2b:2d:28:
f7:04:93:bf:3c:82:09:d7:49:4b:4f:25:f4:cc:2e:
9d:aa:e5:a8:30:76:ad:93:f1:07:96:a1:46:c4:c5:
dd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FF:D7:90:17:E7:4B:3F:73:0F:52:1A:77:EF:2B:20:CA:27:4F:90
X509v3 Authority Key Identifier:
keyid:42:4B:EC:A0:1A:91:E4:49:67:6C:24:97:91:32:EA:C3:31:83:3F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QkvsoBqR5ElnbCSXkTLqwzGDP1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a7d7b3-74da-4063-871c-5e5c668deec5/1/QkvsoBqR5ElnbCSXkTLqwzGDP1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a7d7b3-74da-4063-871c-5e5c668deec5/1/QkvsoBqR5ElnbCSXkTLqwzGDP1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:41:45:e6:d9:ee:26:d0:15:81:48:ba:1d:5a:85:01:0a:bc:
09:41:74:19:06:23:28:e5:06:33:21:00:76:c0:b9:f9:fe:1d:
40:fd:af:63:6d:73:61:02:1b:18:aa:9e:92:b1:1a:2a:26:22:
2c:d5:52:f1:63:23:ce:6c:f8:0e:05:ec:94:78:e4:8d:19:e1:
d6:70:ba:6a:be:8e:51:7c:e0:87:cf:02:3a:6e:48:80:ce:e0:
90:de:3f:0f:b7:0f:8e:f5:31:cd:da:1d:35:93:57:dc:ee:f3:
0a:a5:6e:d2:78:8a:43:c8:98:31:40:43:b7:07:ad:b1:4f:8a:
c5:35:2f:73:b2:aa:05:b9:79:a8:81:d2:81:df:16:41:19:d2:
dd:d8:6f:fb:98:c5:15:f9:76:aa:05:a5:9e:7b:e0:90:2f:ce:
41:e3:62:36:08:f5:72:52:85:38:27:20:dd:c5:4e:07:c9:cb:
97:82:ef:23:3c:9b:68:9b:a4:2b:6b:f4:21:b2:1c:8f:ec:e3:
76:a9:2a:c0:25:38:4f:99:c8:a3:30:1d:de:87:7b:40:1b:96:
27:2b:74:86:09:84:3c:d1:5d:72:c8:64:d7:28:44:04:74:07:
8a:a2:ea:89:16:83:a7:e4:6e:25:14:9d:c6:d7:36:1b:d5:2d:
59:9a:07:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:37:28 2026 by rpki-client