Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft
File: Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft (raw, json)
Hash identifier: OLGDnwB1uITMWUyiRmD4abuzFvqqJ4D75/8qweIZ+NI=
Subject key identifier: 1E:C7:0B:DB:6F:20:23:2B:3E:57:3A:B1:83:0C:14:17:CA:CA:E5:92
Authority key identifier: 41:F7:36:70:AC:16:1F:4B:56:67:9C:49:DA:8B:48:9B:60:BF:0B:16
Certificate issuer: /CN=41f73670ac161f4b56679c49da8b489b60bf0b16
Certificate serial: 019FAC7593A9E7C8F7066F9B7C8B48F5F3E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft
Manifest number: 185D
Signing time: Wed 29 Jul 2026 06:00:14 +0000
Manifest this update: Wed 29 Jul 2026 06:00:14 +0000
Manifest next update: Thu 30 Jul 2026 06:00:14 +0000
Files and hashes: 1: 6E7-9daevK2MkkP9J_irNaIbJPM.roa (hash: nqBQWE4qRj5lWqiwp2QfZYIRYl9NsKmCq2MDZGildvE=)
2: Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.crl (hash: HFJVN359PZN5HkQ4fNb/FFokNzqfBrhfrK0W2hTe4r4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:93:a9:e7:c8:f7:06:6f:9b:7c:8b:48:f5:f3:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f73670ac161f4b56679c49da8b489b60bf0b16
Validity
Not Before: Jul 29 06:00:14 2026 GMT
Not After : Jul 30 06:00:14 2026 GMT
Subject: CN=1ec70bdb6f20232b3e573ab1830c1417cacae592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a1:59:fa:48:e8:5a:7b:a0:25:a2:dd:af:7e:
78:e5:44:f9:77:02:19:fb:bc:21:be:d0:d7:69:0b:
6b:a6:64:ad:e1:bd:25:50:da:ff:7c:fa:8c:22:88:
5b:1d:e0:1a:18:1b:3b:eb:b7:76:4e:2a:2b:a5:d4:
4b:65:91:15:4d:a6:94:77:97:51:54:f4:b0:a6:ba:
23:e2:99:84:18:8f:c8:88:2c:79:d6:0b:95:70:24:
8b:a2:76:41:c8:b5:84:95:1c:16:07:07:13:cb:16:
e5:54:07:1a:3e:77:fd:93:96:49:28:31:b3:f0:21:
36:e8:32:b1:60:23:7e:ca:2e:fb:78:a3:b2:9f:87:
4d:e8:92:2b:f6:39:31:37:4b:6f:59:c7:60:54:f7:
ab:84:6b:fd:ea:3c:5d:98:15:e3:fa:70:43:e8:2c:
3d:26:54:66:e7:c9:d1:01:af:26:25:b8:83:c7:5b:
f2:72:dc:e8:5b:88:e8:5e:da:b9:fb:dc:26:63:53:
4c:ee:66:b3:38:a4:be:1d:31:e6:70:a1:18:7c:6a:
d4:66:e2:8a:fc:6d:d8:59:4f:59:4e:62:ca:1b:95:
1d:26:40:8a:0a:cb:dc:d9:b8:02:a9:e7:59:8e:a1:
40:33:4d:60:d4:cc:ea:6b:79:7a:d3:51:17:78:3f:
27:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C7:0B:DB:6F:20:23:2B:3E:57:3A:B1:83:0C:14:17:CA:CA:E5:92
X509v3 Authority Key Identifier:
keyid:41:F7:36:70:AC:16:1F:4B:56:67:9C:49:DA:8B:48:9B:60:BF:0B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ac:02:07:15:44:27:a7:04:4b:46:49:20:fd:b9:86:14:0c:
5a:df:2b:4b:4a:b3:29:91:1f:f4:6a:66:31:cf:05:62:81:44:
57:57:3a:a3:a1:bf:f0:86:59:9d:7c:c6:b4:36:5d:e0:31:cd:
8f:b9:f6:a8:9b:41:98:86:11:d7:d8:cf:e9:5b:32:5d:5a:c3:
fa:70:41:93:bc:14:b3:52:be:bf:b4:0a:e0:10:c6:bd:80:fc:
3f:39:29:c8:1f:32:e2:bb:37:21:18:49:ca:af:66:f0:4a:87:
ef:4b:c0:ff:30:05:9e:3c:7b:a8:57:13:7b:83:44:24:49:1b:
b9:ac:42:87:fc:23:19:44:88:5c:aa:33:f5:60:b0:dd:7a:64:
a2:ae:47:84:0b:0b:9e:21:1c:e3:3a:39:6e:66:05:7f:cb:63:
48:cc:62:e5:8d:65:aa:97:23:52:dd:b2:22:67:c8:98:fd:38:
ae:2b:9f:33:26:2c:bf:a8:7c:77:9d:d9:a9:26:fb:96:c9:48:
07:7f:19:ae:10:7c:e2:fb:a8:23:74:ff:40:1b:1d:37:e9:45:
45:87:0a:6c:53:1a:d3:7f:99:f8:e0:d3:ca:9f:c1:c5:29:c4:
31:b6:8b:18:ad:12:12:36:30:86:a3:8b:2e:fd:be:72:c6:01:
8a:2b:71:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:47:59 2026 by rpki-client