Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
File: QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft (raw, json)
Hash identifier: ZSPHvoZJJGvYKeO1ucaQk1qk6nSyCPt0fHoIg1MliIg=
Subject key identifier: A3:15:4B:4F:E1:7F:83:F8:39:CE:ED:7B:86:2C:5B:C3:22:28:C3:6A
Authority key identifier: 42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
Certificate issuer: /CN=4200982284a050d941dbebbd04b5d0c914f635b7
Certificate serial: 019FAAF580752FBF077CC3F0A62D92E1945C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
Manifest number: 07A3
Signing time: Tue 28 Jul 2026 23:00:43 +0000
Manifest this update: Tue 28 Jul 2026 23:00:43 +0000
Manifest next update: Wed 29 Jul 2026 23:00:43 +0000
Files and hashes: 1: 1QVffqytSmC1a3CyEMjTZiMPz2I.roa (hash: Z9oUBWWYgzGCyhKCdwmz/nYZmRhrSkL7ppTpw2620JQ=)
2: QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl (hash: f9ZqvzQOETlwnXba41YhxaW57iGRGsV+OFB/tgjlQjk=)
3: odNrW4lU42BAvPE84otnwCnAcjo.roa (hash: F1kft2u6AJ9vT8iumt/E/kv8R0gxEkszQiPaKkBRYw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:80:75:2f:bf:07:7c:c3:f0:a6:2d:92:e1:94:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4200982284a050d941dbebbd04b5d0c914f635b7
Validity
Not Before: Jul 28 23:00:43 2026 GMT
Not After : Jul 29 23:00:43 2026 GMT
Subject: CN=a3154b4fe17f83f839ceed7b862c5bc32228c36a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7f:56:18:58:6b:99:8d:ae:1d:a8:f9:2a:79:
43:d5:3e:a7:b9:e3:14:1a:06:fe:b9:62:f3:96:e6:
8b:9e:dd:1a:5b:79:5f:33:fc:be:68:ac:f1:7d:0c:
5e:fc:1e:7b:50:65:d1:8d:14:62:66:3f:25:dc:31:
81:83:01:45:3a:72:25:b3:15:91:9b:06:10:9f:31:
6e:4e:f2:98:d7:e4:af:1d:23:47:d1:86:60:78:9b:
9b:72:1c:dd:24:19:29:b1:d1:30:a5:69:af:ef:48:
5f:27:1c:8b:de:8a:89:62:b5:e2:a4:f4:a0:4e:62:
9b:12:6d:28:6b:4b:a9:3f:4d:48:62:94:f0:22:2b:
ac:ad:50:f7:13:e3:80:73:27:13:d3:79:74:ec:e2:
52:0c:6d:92:98:5c:ed:f8:33:79:6d:ee:4e:87:44:
82:4f:03:20:4d:d1:59:c4:b6:c7:c2:dc:49:47:69:
99:36:c1:24:e2:66:82:55:fe:a3:c3:99:10:5a:70:
65:f8:bc:cf:fd:e3:21:d1:8f:e6:4a:8f:3f:9a:fb:
7f:09:a9:68:59:52:74:ed:13:96:58:00:6c:da:35:
cf:fd:94:c6:d0:49:e2:c4:a9:53:c6:18:ef:5f:a6:
12:25:2a:bb:50:5d:2e:33:65:46:a2:60:26:60:0e:
59:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:15:4B:4F:E1:7F:83:F8:39:CE:ED:7B:86:2C:5B:C3:22:28:C3:6A
X509v3 Authority Key Identifier:
keyid:42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:5a:dc:09:58:72:0c:61:72:c6:96:00:e6:20:06:14:ac:9d:
00:60:a6:6d:b1:f5:77:6b:9d:09:5d:16:f9:d3:a6:1a:ce:4e:
b8:84:ef:aa:d3:d5:e6:3c:5e:d1:6c:88:5d:8b:30:97:57:db:
c8:c0:0a:ec:27:5a:92:c6:42:11:df:9a:19:58:a7:0a:9b:2e:
7e:0c:a6:14:89:01:ad:6f:22:d2:3c:48:0f:e9:64:3a:6e:df:
6a:3c:be:e9:f4:bd:31:04:70:b2:76:13:58:0c:98:5e:b3:61:
fc:3d:ec:88:8d:7c:82:f4:a7:d1:ff:ba:2f:d2:20:7a:57:32:
23:a5:6c:c4:f9:ac:ff:06:32:de:37:04:31:f7:d3:26:b0:9c:
1a:2e:1b:d1:37:10:ec:df:20:b3:6e:23:fc:a2:58:8b:6f:2f:
d8:0b:bc:5d:a7:95:66:fc:b7:7c:ce:17:37:5b:23:f9:68:cf:
d2:d3:06:5a:57:38:d4:f6:d7:c1:9f:88:38:ae:b6:3e:d5:2c:
ac:02:60:c1:b5:df:44:d7:15:fb:07:3f:b2:f8:a8:68:53:65:
d3:88:d1:8f:89:33:83:05:50:41:d7:b4:17:46:48:69:62:67:
a2:7f:4d:58:12:e9:88:cf:21:e4:82:78:83:03:1e:be:5e:3e:
69:fc:f8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:19:02 2026 by rpki-client