Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
File: Q0llhOXPObVodN6Nx3qjpv-eih4.mft (raw, json)
Hash identifier: eJ1pdvzuV+5gAVJZ50h4N+lGVtjEZ6EOExrgfc02ADs=
Subject key identifier: 72:23:3F:4B:A4:86:CF:B3:E0:B6:07:1A:A5:42:EB:B9:6A:B5:67:05
Authority key identifier: 43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
Certificate issuer: /CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Certificate serial: 019FAAF5AD5C69D481E85292BB3D50DF8E3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
Manifest number: 1673
Signing time: Tue 28 Jul 2026 23:00:55 +0000
Manifest this update: Tue 28 Jul 2026 23:00:55 +0000
Manifest next update: Wed 29 Jul 2026 23:00:55 +0000
Files and hashes: 1: Q0llhOXPObVodN6Nx3qjpv-eih4.crl (hash: iRP6EavdUQ/X/umP7YiaWKzrYtjrI+0fnxsIfhdy0OE=)
2: eTNkVC7XWRHBzuyFVu3pxnwq3z4.roa (hash: b8ZbPv94PI8PSCuaUsrniKkw7cN6jjfuOqQWfIOj1qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:ad:5c:69:d4:81:e8:52:92:bb:3d:50:df:8e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Validity
Not Before: Jul 28 23:00:55 2026 GMT
Not After : Jul 29 23:00:55 2026 GMT
Subject: CN=72233f4ba486cfb3e0b6071aa542ebb96ab56705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:71:bc:fc:68:2b:bc:df:9e:98:0b:8b:33:63:
7e:33:e7:23:54:a6:11:b4:a6:1f:de:65:76:7a:7a:
00:36:13:72:30:b4:49:20:75:24:9b:93:5d:1c:35:
b1:6c:bb:40:48:a3:ed:e4:c6:dd:ef:21:71:32:2b:
66:44:84:b3:4f:33:6a:59:1e:1a:e2:b4:93:fd:e9:
b6:34:03:e5:5f:09:67:ce:ce:2c:c6:fc:21:69:bd:
05:f3:ba:63:cb:13:69:41:b1:86:2d:b9:44:a3:d7:
24:bd:33:e6:57:0c:b5:15:f0:29:23:f4:ad:d2:8c:
6d:47:6a:5e:52:10:08:df:f7:5a:c7:66:3e:29:cd:
da:bb:4a:a4:1c:f8:f6:42:75:f2:82:0b:37:78:85:
7a:f0:ec:47:38:ed:fc:ef:12:a8:b9:0f:fe:59:cb:
94:ad:a6:0e:2a:c6:7b:d2:03:96:e2:d9:e8:05:fc:
e7:f3:7a:69:18:d0:44:66:26:b0:83:e5:09:90:7c:
6f:f8:6b:6f:4a:d1:83:60:68:33:a9:37:e9:97:c0:
3c:d9:b3:9b:e1:9f:01:7c:e7:b9:5b:59:12:7d:e9:
91:96:a1:13:2e:a1:55:41:ab:54:a8:01:e7:23:75:
20:4a:e8:af:06:60:5d:00:20:66:88:c6:6c:cc:49:
43:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:23:3F:4B:A4:86:CF:B3:E0:B6:07:1A:A5:42:EB:B9:6A:B5:67:05
X509v3 Authority Key Identifier:
keyid:43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:45:aa:96:95:ba:3e:0a:38:0c:dc:b6:52:52:e4:84:8b:51:
86:8b:fd:df:b4:96:82:14:fd:04:14:5d:e0:92:01:3d:6e:c2:
e1:71:e5:e2:0f:d2:b9:c1:b1:c7:32:e9:16:ba:62:4e:40:ff:
3f:31:61:16:d5:99:35:97:7a:2c:54:ed:e0:b6:94:66:57:59:
7c:ff:5e:f1:9e:c7:a6:25:91:af:cb:78:0c:1a:1f:52:9f:81:
48:e5:7f:9f:8a:20:db:58:67:a5:50:1b:82:26:64:61:ad:5a:
10:42:74:e1:2d:48:df:4c:38:9b:1c:5c:ff:36:53:43:5b:4e:
f4:43:03:27:c0:61:ca:d4:ce:32:74:a5:b0:08:01:b1:44:75:
50:0f:99:80:76:35:60:e9:33:ae:96:dd:95:ea:28:ae:34:d1:
34:c5:f1:ff:c0:9f:5f:75:58:5c:32:c7:e4:f9:61:4a:c2:76:
db:a4:e0:b4:fe:53:5a:de:98:2f:e1:0e:59:d9:6e:f3:bb:2d:
23:12:ca:98:2f:24:1c:40:82:9f:22:2d:23:1a:57:19:20:a4:
3c:af:57:75:f1:ca:03:cd:6b:82:8a:eb:b4:46:67:5b:19:7e:
0b:30:07:3a:84:2a:2e:78:8c:9e:be:ba:f5:aa:e4:ef:16:47:
e0:36:c9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:59:28 2026 by rpki-client