Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
File: QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft (raw, json)
Hash identifier: F5mIhseQNFbKYNZS6RYpv7X4A4YJJW3UgI3OK1elhEU=
Subject key identifier: 22:2B:89:D0:AB:71:78:81:A2:D1:06:34:A9:6F:EC:AC:75:9D:3D:74
Authority key identifier: 42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
Certificate issuer: /CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Certificate serial: 019FAA877C99BCD52B8C7D3A5AADF419A910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
Manifest number: 1768
Signing time: Tue 28 Jul 2026 21:00:33 +0000
Manifest this update: Tue 28 Jul 2026 21:00:33 +0000
Manifest next update: Wed 29 Jul 2026 21:00:33 +0000
Files and hashes: 1: LR4OEFuXJFG601CBDAdGi2eJuDA.roa (hash: NMogK1dWSLWZg8KRXWYMDcVAVexU5Hc8nklyuTVzNTg=)
2: QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl (hash: T9DnFMEHyGRzaDSSlmqJynr5DhFQMgGUm1BZtswWi50=)
3: yLjJ3nLSiELitR79aZqorJ0E2nc.roa (hash: xtAiyE7KLrMeKdwMrZXmwAda9WUSSp0xD353CtNzkqA=)
4: zmI7itrZiL_gDQE-LI8VX6mhi3M.roa (hash: oaucdw8kxMg4EQDLP4CSccRXkWAvO6YKuvgDiVYtKOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:7c:99:bc:d5:2b:8c:7d:3a:5a:ad:f4:19:a9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Validity
Not Before: Jul 28 21:00:33 2026 GMT
Not After : Jul 29 21:00:33 2026 GMT
Subject: CN=222b89d0ab717881a2d10634a96fecac759d3d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3b:52:ec:7e:c9:1b:bd:df:d8:9b:70:b3:31:
5b:64:4e:84:1d:cd:a8:e5:22:28:40:12:89:fc:77:
98:3b:ad:81:57:a9:b9:e0:5f:f4:8a:35:d1:66:9e:
f9:6b:bf:9f:14:ce:a2:bb:30:9c:9d:7e:60:c0:41:
49:db:71:d3:df:3a:0b:d9:60:53:d1:54:e3:c8:dd:
18:66:c1:e4:71:53:07:ca:92:2b:c0:b3:35:3e:2b:
99:c7:70:96:4a:d7:a0:bf:51:e2:98:ef:b5:78:7e:
de:0a:02:0e:e1:d0:44:46:3f:c9:50:8b:c1:5f:4c:
9a:d7:e0:06:b6:09:0f:4e:79:f9:9e:86:fd:17:a1:
b8:c6:92:fd:c3:f8:f2:21:2e:eb:5f:8f:ea:74:0d:
5b:44:27:67:0a:c7:c0:31:ce:6b:16:8f:72:ca:16:
cb:a5:2a:63:38:5e:45:37:d2:23:be:9e:3d:5c:1c:
43:28:b6:cf:38:b1:7a:60:d4:36:7c:cd:85:13:8f:
bc:2f:82:29:0d:98:d6:11:3b:f4:0c:68:15:12:4e:
8b:ae:52:74:9c:05:26:cf:00:08:c0:fb:90:12:25:
eb:7f:b8:0b:7c:a4:6d:70:d3:d8:fa:8e:d4:ff:58:
b4:9d:65:1d:65:7c:70:ac:14:c6:ce:62:a1:1f:c8:
20:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2B:89:D0:AB:71:78:81:A2:D1:06:34:A9:6F:EC:AC:75:9D:3D:74
X509v3 Authority Key Identifier:
keyid:42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b1:ab:21:54:19:59:1e:7c:52:b3:39:01:30:7a:34:ee:e3:
01:f0:8a:f5:ab:26:61:3c:f0:0f:6b:89:cd:dd:c8:79:7b:c3:
eb:b5:b6:3e:25:a6:ce:c5:37:fe:fa:75:46:c2:7e:cb:77:4f:
3d:f3:88:79:4c:d6:f5:80:25:53:34:d6:60:f9:67:da:42:8e:
8c:05:d2:1d:8a:83:1a:d5:a0:bc:df:b4:8c:7d:7a:ab:71:87:
d0:00:e3:b7:20:f2:02:62:ca:a1:39:03:29:ec:f2:4d:36:e8:
a5:1b:21:55:2b:7d:9d:77:92:34:d9:7c:7b:ee:0c:7d:db:3e:
ea:28:be:ac:5f:88:31:d7:9d:60:43:5f:a3:64:2b:51:89:86:
02:17:dc:1a:59:62:8e:ca:a1:c8:95:15:4a:9c:6c:7e:3b:81:
f4:d9:01:41:0e:dd:5e:c4:46:ad:e5:e7:dd:09:b9:27:0f:13:
26:1f:b6:3b:36:ac:fb:95:23:ce:79:1f:fc:ad:3b:01:fe:90:
49:26:91:fd:46:41:8f:80:6d:4a:24:79:f3:7b:a1:6c:97:00:
12:60:6d:c6:21:ff:bd:d0:b0:ba:57:0a:71:49:27:71:32:81:
10:ef:bb:84:c1:ec:4d:31:05:d1:d6:3b:86:62:57:b2:72:20:
58:d6:a9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:51:25 2026 by rpki-client