Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.mft
File: QBY91EFO8-eS4AUB80786UQKnE4.mft (raw, json)
Hash identifier: xBl9RorHK3Zbhv4dYNBPN+v9q7kn4odWId/XTs6SwAk=
Subject key identifier: F3:A7:11:BA:5A:BB:5F:54:DE:19:C4:E1:78:E1:4D:82:CF:74:36:FB
Authority key identifier: 40:16:3D:D4:41:4E:F3:E7:92:E0:05:01:F3:4E:FC:E9:44:0A:9C:4E
Certificate issuer: /CN=40163dd4414ef3e792e00501f34efce9440a9c4e
Certificate serial: 019FAB9A0C9ADDD26FFC08343DF4F2D5BE25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QBY91EFO8-eS4AUB80786UQKnE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 02:00:27 +0000
Manifest this update: Wed 29 Jul 2026 02:00:27 +0000
Manifest next update: Thu 30 Jul 2026 02:00:27 +0000
Files and hashes: 1: QBY91EFO8-eS4AUB80786UQKnE4.crl (hash: 1eUOXZqm1Jq9JyhVzqT/SoiKAHByvUVvAeH7qSX6riE=)
2: XVQmZyZgIfyuS-i9_dYYU_5CGT0.roa (hash: BPYDVshqMOmc9U1pef4+DfyaziPWsnfi+uZonkxHf4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QBY91EFO8-eS4AUB80786UQKnE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:0c:9a:dd:d2:6f:fc:08:34:3d:f4:f2:d5:be:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40163dd4414ef3e792e00501f34efce9440a9c4e
Validity
Not Before: Jul 29 02:00:27 2026 GMT
Not After : Jul 30 02:00:27 2026 GMT
Subject: CN=f3a711ba5abb5f54de19c4e178e14d82cf7436fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ff:4e:87:16:f6:12:0b:d0:05:5f:51:b4:e6:
c5:da:53:2f:d8:bf:74:d2:9c:38:76:18:3c:5d:4d:
47:3b:36:c8:dd:50:52:4e:f1:dc:c0:cf:3c:7c:c4:
a6:bc:0d:8e:0a:1a:c7:de:4a:da:e6:c1:44:3f:12:
a0:61:21:c7:bf:3d:e0:73:c7:fb:f4:b5:33:bf:0c:
7f:63:7b:61:a5:9b:cd:55:66:fe:56:cd:81:d4:c9:
1a:5e:5c:cd:cf:66:51:c1:5c:7d:67:38:62:f4:10:
7d:d6:14:f5:fb:22:b8:9a:64:59:75:ac:4d:24:78:
81:b5:7e:5f:59:28:fb:aa:c5:97:21:68:ff:dd:19:
49:e6:fe:2f:b7:cd:ce:20:8a:06:8b:89:df:b9:ce:
9d:03:65:ed:f2:b7:bf:a1:b1:9a:e3:27:f7:2e:2c:
ae:f9:68:4c:67:4b:fb:df:0f:86:44:fc:90:a6:01:
54:13:1b:b9:0f:5c:c7:3b:41:dc:22:e7:97:06:ae:
68:10:62:59:be:58:ba:5a:eb:9b:e1:ce:d6:bc:a1:
5e:cf:6c:44:15:ff:ff:7a:5d:3e:f5:6c:02:ee:9d:
9e:ed:c1:b8:c4:09:8c:00:6f:18:a1:c4:c6:21:a9:
dd:cf:f0:60:22:bd:91:1e:ed:32:7a:e5:88:80:1a:
f8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A7:11:BA:5A:BB:5F:54:DE:19:C4:E1:78:E1:4D:82:CF:74:36:FB
X509v3 Authority Key Identifier:
keyid:40:16:3D:D4:41:4E:F3:E7:92:E0:05:01:F3:4E:FC:E9:44:0A:9C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBY91EFO8-eS4AUB80786UQKnE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b9:67:37:6e:3f:95:79:5a:31:80:39:9a:fa:43:df:1f:a5:
14:74:5f:d9:a0:44:96:39:63:e8:70:e3:a8:bc:da:d5:8b:52:
82:1a:ae:6a:1d:89:9d:e5:cb:76:40:0c:d8:f9:22:0c:2e:21:
e0:52:43:e1:4e:a3:df:44:ba:8c:ab:0e:51:36:35:cb:23:eb:
82:78:34:f9:e2:8d:1d:c7:e5:6f:97:b1:e9:53:54:e2:b9:bd:
a9:68:54:2d:cf:41:e7:8a:9b:6a:09:fa:66:e5:36:95:08:cd:
83:d0:4a:e9:4b:2b:a0:76:f7:45:f5:95:4a:4e:01:22:7d:07:
4d:3e:78:15:80:7e:82:2c:69:6a:3d:e6:ba:7f:14:09:00:ca:
11:83:66:25:80:3e:3e:35:cc:55:5a:4d:3f:ef:c1:7a:6d:02:
36:ce:1e:9b:e9:e0:52:bd:6c:b4:37:a2:29:0f:60:b4:c1:18:
5f:1e:d2:28:64:e7:f9:be:e7:6d:f3:cc:bb:59:7b:8d:8d:12:
5a:34:15:4c:03:16:d8:6c:6b:db:e4:25:67:2f:ba:c9:4d:ae:
0a:fc:0c:77:db:3a:f3:cc:1a:e7:91:f2:09:fa:1c:db:1b:4f:
30:3f:3d:b2:0b:1f:6e:fa:30:29:00:38:f5:0f:ad:e4:a7:59:
3e:3c:2e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:07:15 2026 by rpki-client