Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
File: QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft (raw, json)
Hash identifier: IlT0HHVzOet0D51iU/FDk4bsBMFTcQnu3WsUft5ehhU=
Subject key identifier: 0B:11:E0:A7:9A:F7:2D:5B:D7:A8:0F:3E:59:D5:34:D3:28:30:E6:BC
Authority key identifier: 40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4
Certificate issuer: /CN=4092c47db8a21931154605d576c3b7341d06b4b4
Certificate serial: 019FA7BDD22DFFAF6F68EA7B1FEBC038DA7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
Manifest number: 175C
Signing time: Tue 28 Jul 2026 08:01:02 +0000
Manifest this update: Tue 28 Jul 2026 08:01:02 +0000
Manifest next update: Wed 29 Jul 2026 08:01:02 +0000
Files and hashes: 1: 4lRlhSc9Jzpgo2qyOZgRPmeBS8E.roa (hash: fe25PIHE4R92mruy7bWhmhbyquYQv4J/2uT5rEcGMtI=)
2: QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl (hash: 6XrHEFj9YdEoZpy24bHKNBXtcYTrVJZibvb0mN5pT64=)
3: d4L-Ywam3q9FKYpyHF6Nixngago.asa (hash: zY2cIfwxMRiOqaAZBQMaP/RsPvaaJfXbxud7F/yA2YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:d2:2d:ff:af:6f:68:ea:7b:1f:eb:c0:38:da:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4092c47db8a21931154605d576c3b7341d06b4b4
Validity
Not Before: Jul 28 08:01:02 2026 GMT
Not After : Jul 29 08:01:02 2026 GMT
Subject: CN=0b11e0a79af72d5bd7a80f3e59d534d32830e6bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:15:ad:7e:df:9f:e1:c1:8a:50:cd:9d:fc:0a:
18:55:09:ae:ee:57:02:15:ef:83:94:02:54:70:79:
bb:9b:ec:c7:ca:7a:1d:7f:73:a6:5c:d8:81:12:48:
c3:8f:b5:1d:eb:82:3a:51:4b:a3:9a:04:c1:a3:cf:
52:da:20:37:58:29:dd:79:bb:1c:ca:9b:df:08:34:
b5:36:5e:c7:1a:e3:cb:dd:c7:91:ce:15:b7:93:31:
52:39:13:ad:3f:7e:67:ed:81:e3:5b:4e:7b:db:d2:
70:b5:d7:7e:a7:41:97:24:27:8d:45:e8:bf:00:d8:
26:af:e8:57:bb:a6:88:b2:00:f5:3e:fe:c8:5d:af:
e4:4e:c6:4d:5b:6d:32:05:34:9d:98:42:08:cb:32:
ac:f3:ea:ac:2f:06:46:cc:94:03:1c:ef:bd:9f:94:
3c:55:18:49:3d:ff:53:6c:76:ee:1d:67:05:5d:0b:
b9:11:69:5e:ea:5c:9f:b9:fa:d5:f9:62:10:17:d9:
71:3f:96:d9:f5:74:73:35:db:2b:c4:bb:39:f8:cc:
32:3a:c6:ae:78:55:3f:53:c3:75:7e:62:35:ab:71:
2c:c9:53:2e:1b:21:0d:5d:b2:b3:e8:6c:7d:e7:4d:
13:a6:b7:32:d0:ed:b1:a3:77:ae:c2:36:76:57:52:
a7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:11:E0:A7:9A:F7:2D:5B:D7:A8:0F:3E:59:D5:34:D3:28:30:E6:BC
X509v3 Authority Key Identifier:
keyid:40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:7e:d0:21:6b:aa:17:86:41:60:84:22:93:1b:db:14:b4:ca:
42:cd:7c:16:a4:88:f5:a3:15:e4:69:e2:80:8e:45:9c:73:aa:
f3:22:d4:97:f0:a1:be:4e:2a:30:db:0d:05:fe:7f:42:8e:c5:
e8:f7:98:7e:69:df:09:d7:1e:b4:2e:c8:94:16:d1:33:95:eb:
ec:f7:6b:2c:7b:a3:4a:f1:94:4a:74:f0:88:86:1f:1b:47:21:
c2:9b:22:83:eb:d5:d3:05:e9:0b:1f:16:24:e6:15:fa:fe:68:
d8:18:cc:85:30:68:ce:da:6b:13:e4:45:59:0d:91:1d:37:54:
27:38:27:1f:c4:83:59:a9:47:ad:8e:96:6d:87:16:97:30:58:
62:e0:63:d5:29:82:b6:c3:83:aa:50:8a:f7:24:c1:f5:8f:b3:
bb:9b:bb:ec:86:7e:05:ad:4d:3e:10:48:22:1c:ad:74:34:68:
54:39:05:1a:44:65:d7:25:06:a3:b2:0a:94:54:eb:ea:85:34:
49:c3:03:8a:33:72:6e:e9:4e:a2:a1:94:5f:3f:36:21:23:8f:
b3:5c:7a:80:13:eb:2a:20:6c:11:2d:8b:e9:73:2f:96:b0:21:
2d:a6:28:23:a6:9f:fb:97:f7:70:f3:f6:d1:07:89:e9:3f:67:
54:47:ce:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:45:55 2026 by rpki-client