Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
File: qft75iSm8jMZjio089nZhCmrpGE.mft (raw, json)
Hash identifier: y3qP2qBi3DViaO2BR+RTw1WQY+tdgPyTJZ/GxZGL9AM=
Subject key identifier: 49:71:6D:E5:DC:54:9B:A2:FB:FF:4D:73:BD:96:BB:B6:76:1A:31:C0
Authority key identifier: A9:FB:7B:E6:24:A6:F2:33:19:8E:2A:34:F3:D9:D9:84:29:AB:A4:61
Certificate issuer: /CN=a9fb7be624a6f233198e2a34f3d9d98429aba461
Certificate serial: 019FAC7626E7E16B348CAC3EEC275FC9603D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qft75iSm8jMZjio089nZhCmrpGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
Manifest number: 0234
Signing time: Wed 29 Jul 2026 06:00:51 +0000
Manifest this update: Wed 29 Jul 2026 06:00:51 +0000
Manifest next update: Thu 30 Jul 2026 06:00:51 +0000
Files and hashes: 1: DEtXANHZs-ySfJ2DbeIG2FY0feA.roa (hash: CiC1X69cIhHbTBPnPYg9pS10KzYxN0NPXzJ/qp7bwgE=)
2: qft75iSm8jMZjio089nZhCmrpGE.crl (hash: qGLQw5FEsqrbk+LgSqUFUUqyM79yZjFnRkhnfFwof6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qft75iSm8jMZjio089nZhCmrpGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:26:e7:e1:6b:34:8c:ac:3e:ec:27:5f:c9:60:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9fb7be624a6f233198e2a34f3d9d98429aba461
Validity
Not Before: Jul 29 06:00:51 2026 GMT
Not After : Jul 30 06:00:51 2026 GMT
Subject: CN=49716de5dc549ba2fbff4d73bd96bbb6761a31c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:92:59:08:65:83:e2:0e:5d:bb:d4:73:00:d9:
c7:b1:ee:2c:5c:ed:f2:29:13:97:5c:0a:5a:70:81:
80:40:45:8f:31:bf:e1:c4:24:04:d5:6a:87:8a:1f:
5b:64:cd:a0:6d:67:e0:b7:46:82:40:de:bc:81:01:
c0:90:88:02:70:f3:d9:40:c8:0d:25:ab:88:32:77:
f7:98:52:02:1c:fd:37:f3:3a:e9:10:1f:e3:73:a5:
93:3a:83:5f:c5:d0:83:b8:ed:6e:db:78:93:73:14:
5c:54:9f:23:c8:d5:a9:b1:cf:6c:ff:6e:88:9b:4a:
ac:35:85:a6:4c:da:bb:07:c1:e9:b0:33:74:b5:76:
98:b2:95:9c:ba:40:be:e2:16:16:ba:98:a0:01:1e:
37:a6:46:95:14:6a:5e:c1:88:c3:4a:ea:80:57:0b:
d3:c1:b5:2d:38:ac:0a:01:ae:40:fd:8a:bb:b7:ae:
56:89:91:00:eb:23:1c:e6:d3:74:68:95:cb:36:bc:
5e:9d:2e:40:71:2f:fd:7c:b4:da:1c:79:6a:4d:b8:
e0:94:4a:11:bd:42:f4:e9:14:0b:39:3d:ce:25:2f:
3f:e0:33:f1:ef:ca:ab:c6:fe:27:30:76:e4:d7:c7:
3e:61:b3:df:cc:c3:31:87:88:16:e4:82:32:13:7b:
38:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:71:6D:E5:DC:54:9B:A2:FB:FF:4D:73:BD:96:BB:B6:76:1A:31:C0
X509v3 Authority Key Identifier:
keyid:A9:FB:7B:E6:24:A6:F2:33:19:8E:2A:34:F3:D9:D9:84:29:AB:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qft75iSm8jMZjio089nZhCmrpGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:20:19:05:79:b2:95:a1:38:e4:9d:eb:8f:76:90:b9:47:da:
22:ef:b2:b5:7a:fe:a0:97:2a:e4:c6:32:78:11:63:53:db:64:
53:6b:1e:9e:5d:47:80:3a:66:86:37:25:9c:8b:6d:0f:b4:65:
07:eb:28:c1:52:bb:3c:b2:e1:a7:de:4c:d9:10:19:d0:03:7d:
ab:62:36:81:ff:5a:2f:af:03:d0:1f:02:e6:fd:8b:16:1e:a1:
60:92:6d:8f:9c:46:2b:8e:02:2a:95:5e:92:50:91:b3:19:75:
ea:83:56:eb:06:8d:d1:00:ff:49:70:8c:56:42:f1:d6:25:67:
cd:93:2d:6c:4e:7c:9c:59:cb:47:de:88:8d:cb:ef:42:70:18:
bb:3f:62:dc:5b:31:ec:ec:a4:23:25:37:59:47:7d:12:ee:c2:
6c:32:cb:19:52:0f:72:41:fe:ae:70:33:07:1f:c8:5b:31:f8:
a7:5f:78:3f:63:75:9f:9c:f3:9d:4b:88:1d:ef:e2:f3:b1:4b:
ca:5d:9b:8d:5c:25:c8:81:61:a0:c0:ae:58:1d:95:a6:68:19:
5d:23:dc:9e:f8:b3:a7:85:fc:28:1b:bc:59:f0:60:df:43:19:
69:fe:16:bc:cd:2c:31:e5:cc:96:d1:5c:c7:1d:ed:6f:14:ff:
0c:9e:f6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:27:36 2026 by rpki-client