Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
File: QpNhzRgdhu9U6-L8kagOxTTOrHg.mft (raw, json)
Hash identifier: JBHuMZ3A6EolYjPvGKuCvbNzTil5wcqBAOZoxgCXLZw=
Subject key identifier: B8:58:C1:68:44:78:12:04:F9:54:8A:39:54:92:AD:90:5E:31:42:81
Authority key identifier: 42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
Certificate issuer: /CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Certificate serial: 019FAAF5816524BED9ACA889B3774AEE13EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
Manifest number: 0E05
Signing time: Tue 28 Jul 2026 23:00:43 +0000
Manifest this update: Tue 28 Jul 2026 23:00:43 +0000
Manifest next update: Wed 29 Jul 2026 23:00:43 +0000
Files and hashes: 1: 9pGoDb8m8-uHunZG0g4IpC_J3W8.roa (hash: j9T9+HzYFR2vUjj6NG2JWZokXgG77nlwhtywobwQLLE=)
2: QpNhzRgdhu9U6-L8kagOxTTOrHg.crl (hash: oBOuh5dXYneQLKCo975+gcGX95TWeCYcQLPVhrPRP14=)
3: yJnPYZA1yZSCQgYd_0lPnb8sfL4.roa (hash: ee1f7M50/x8p9bLR5E0wEJgtc9ejznbk546kHlNn9qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:81:65:24:be:d9:ac:a8:89:b3:77:4a:ee:13:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Validity
Not Before: Jul 28 23:00:43 2026 GMT
Not After : Jul 29 23:00:43 2026 GMT
Subject: CN=b858c16844781204f9548a395492ad905e314281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a1:a2:73:e7:e7:31:ae:d2:d9:5d:85:b8:fe:
e9:ff:0b:be:fd:a6:4f:48:8d:08:ea:57:4a:83:d3:
7d:d3:7a:af:96:45:c6:9f:89:45:6a:06:7e:86:e3:
9f:a1:cf:97:eb:b9:85:06:c7:bd:49:a9:b3:be:04:
d7:23:99:b8:27:80:ac:5a:e5:42:1f:50:d5:99:8e:
bb:43:c3:8f:7c:8b:40:d4:51:e5:7e:d2:f6:b9:46:
07:6b:0f:0f:0c:b7:79:74:d1:86:f5:05:c5:f1:88:
68:e1:b5:2a:4a:1c:1f:8f:9e:45:fd:7e:fc:7f:e3:
c3:e1:ec:11:aa:a7:80:72:26:2a:19:60:7f:a9:9e:
51:87:5c:f3:87:b0:2d:8a:7c:47:43:0a:a2:02:01:
62:3c:31:75:2c:01:df:7c:80:57:07:9b:28:44:5d:
d8:8c:65:39:c7:21:4a:1f:99:ed:b1:4a:7a:e7:d7:
d0:98:aa:8a:e5:0f:d5:e2:64:03:69:bb:b4:4c:1a:
bf:d2:01:bc:30:36:33:8b:8a:15:30:b5:5c:f4:cf:
81:1f:40:bb:c9:14:73:77:5f:b7:1f:a7:a3:d4:90:
38:da:be:50:b8:49:88:9f:24:c9:32:77:d7:58:52:
27:8f:e2:16:df:a0:a3:84:8d:75:db:6e:83:61:48:
f7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:58:C1:68:44:78:12:04:F9:54:8A:39:54:92:AD:90:5E:31:42:81
X509v3 Authority Key Identifier:
keyid:42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:5f:e4:53:9f:69:a9:bb:73:82:5c:0d:d4:4c:1a:75:fe:dd:
32:83:29:ad:b0:51:6f:e5:b0:49:ea:3e:97:f4:83:67:8d:16:
cf:d9:86:d3:d9:a8:de:16:c2:a9:03:08:29:57:f4:f2:bf:58:
fe:14:f1:54:2f:48:45:0d:67:56:ff:08:e5:27:5a:78:a1:4e:
b9:3c:00:d7:1d:5a:36:b1:b6:44:5a:d3:65:e5:2e:e1:81:03:
0a:1e:c9:2b:d4:93:f1:bd:fb:01:28:10:1a:bf:1c:d3:cb:ac:
80:65:95:0f:c0:7d:70:18:8e:6a:d2:c7:e0:1a:f8:4d:ce:92:
28:44:f8:e3:99:2b:7b:25:c8:ff:ad:47:e5:63:e4:15:47:43:
b2:96:db:8a:54:4e:54:f9:76:dd:bc:36:fa:4e:4d:aa:87:bf:
2b:0a:e6:e0:f4:b4:8f:8a:56:38:1b:fe:9d:16:71:c2:ba:ab:
d9:2c:67:96:e7:f2:54:7b:cd:40:cf:ca:00:25:35:3b:c5:d6:
72:fb:19:ae:c1:88:99:a6:b7:40:1f:62:99:9b:d7:a0:a3:e0:
60:7d:83:b6:57:95:7c:62:0c:51:d9:81:f8:e2:ab:80:e4:d5:
3c:50:91:28:38:c5:f1:61:97:a4:1a:59:3d:42:3f:27:2e:66:
d7:9e:70:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:51:08 2026 by rpki-client