
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
File: QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft (raw, json)
Hash identifier: mD9l06QnyPm5/sQpTdbGg+EbB/cunnx0WC/Y2qxs3ns=
Subject key identifier: 4D:A3:1C:93:B1:16:82:F6:60:29:FB:47:66:AE:3E:9B:0F:FC:2F:0D
Authority key identifier: 42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
Certificate issuer: /CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Certificate serial: 019FA899EE7C735587364C7D8E7362812290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
Manifest number: 1767
Signing time: Tue 28 Jul 2026 12:01:28 +0000
Manifest this update: Tue 28 Jul 2026 12:01:28 +0000
Manifest next update: Wed 29 Jul 2026 12:01:28 +0000
Files and hashes: 1: LR4OEFuXJFG601CBDAdGi2eJuDA.roa (hash: NMogK1dWSLWZg8KRXWYMDcVAVexU5Hc8nklyuTVzNTg=)
2: QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl (hash: QPjraF2vMQGf/cjvv2Ux/QMPmgF+84vJtVGQCrCrQ8Y=)
3: yLjJ3nLSiELitR79aZqorJ0E2nc.roa (hash: xtAiyE7KLrMeKdwMrZXmwAda9WUSSp0xD353CtNzkqA=)
4: zmI7itrZiL_gDQE-LI8VX6mhi3M.roa (hash: oaucdw8kxMg4EQDLP4CSccRXkWAvO6YKuvgDiVYtKOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:ee:7c:73:55:87:36:4c:7d:8e:73:62:81:22:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Validity
Not Before: Jul 28 12:01:28 2026 GMT
Not After : Jul 29 12:01:28 2026 GMT
Subject: CN=4da31c93b11682f66029fb4766ae3e9b0ffc2f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c8:90:4c:65:83:13:e4:a3:3e:45:04:c4:4e:
e9:94:ae:6f:94:e7:5e:7e:9e:40:3c:88:3b:b2:44:
52:6f:ed:31:8d:9b:b9:b0:e3:b3:d0:09:e9:d4:4c:
6d:e9:0c:79:40:33:ac:7c:3a:b5:5e:45:f3:dd:c2:
8d:ff:b0:c2:22:9f:1a:6b:e9:fb:37:0d:9f:7f:81:
1d:98:12:81:43:63:73:af:bd:fc:32:67:3f:75:60:
81:26:a4:9d:f4:78:f3:41:9e:0a:52:50:54:88:ee:
e4:d7:14:6a:5c:c9:3e:ef:c2:ec:a2:7f:0b:66:cb:
46:58:8d:3d:22:28:26:1b:e2:9c:44:4e:88:45:98:
f3:5e:1b:d2:53:f5:b3:6b:6c:e1:97:b8:04:56:3d:
f2:ce:2a:b9:5a:32:3e:b5:a5:5a:a1:b5:0d:42:5e:
5c:33:a2:0c:40:63:23:f2:68:e1:cd:40:08:ac:25:
df:bc:02:8a:b5:7c:68:d4:db:2c:6b:94:94:62:a4:
be:6f:02:fc:14:53:60:df:88:32:5a:19:96:45:3a:
27:5c:c0:7a:5b:e8:85:35:76:53:54:ae:95:73:c4:
a1:b9:dc:a1:f1:33:11:fa:e7:bb:93:88:fc:51:47:
a0:76:9b:5b:d8:29:0b:2d:b5:b4:93:d2:d3:b9:19:
ae:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A3:1C:93:B1:16:82:F6:60:29:FB:47:66:AE:3E:9B:0F:FC:2F:0D
X509v3 Authority Key Identifier:
keyid:42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:4b:f1:7c:4d:10:5e:82:31:ad:02:71:2c:b8:56:f0:66:a2:
5c:c1:da:b7:00:92:22:7f:c9:f6:ee:4c:4e:b7:f3:72:24:be:
9d:fb:db:1a:21:c1:87:a8:9e:16:9f:d8:89:4b:11:f4:37:42:
5e:a3:c5:38:f4:73:53:ac:0f:9e:d7:1a:61:42:0e:8a:fe:d6:
56:05:a3:fb:43:c6:53:11:10:c1:8d:13:25:be:ff:45:09:83:
cb:cf:2c:d4:1f:22:7c:14:2c:84:25:67:c2:ea:3c:3f:17:a8:
f1:d0:d1:ee:79:fb:31:14:b5:86:db:fd:d9:ab:44:39:9b:6d:
83:bb:7f:0c:ea:6c:1b:ba:8a:b4:49:49:b4:d0:13:d3:fa:8a:
1c:69:f6:0f:5e:3c:05:7f:a6:a0:f7:4f:92:e0:f4:77:47:ea:
5b:d4:9c:5b:ba:78:0b:e8:ea:3a:b1:f6:98:db:2e:5c:a9:b2:
02:59:15:06:38:a6:16:43:66:02:fa:ef:2a:aa:57:b7:ec:25:
a9:0e:ad:3c:8f:44:52:56:ac:b6:8b:6c:d8:eb:19:5a:98:86:
fe:f0:ce:76:ad:d1:ca:46:87:bb:51:af:22:6f:e9:0c:a3:80:
a6:42:98:e5:ca:31:6d:1e:a4:cf:e8:29:29:91:ef:d5:32:a1:
33:a8:20:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:38:02 2026 by rpki-client