
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
File: QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft (raw, json)
Hash identifier: r/TUeRnqRPZd9+NJ2T6kvgKsRUIgDmDgvDf97gjzKms=
Subject key identifier: DA:83:6E:EE:0E:D6:2B:7B:75:C2:E7:91:A7:92:B1:4D:EB:5B:6B:9C
Authority key identifier: 42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
Certificate issuer: /CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Certificate serial: 019FD9BDAEF1BA3AF03D76C3EAD28CBDE7F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
Manifest number: 1729
Signing time: Fri 07 Aug 2026 01:01:54 +0000
Manifest this update: Fri 07 Aug 2026 01:01:54 +0000
Manifest next update: Sat 08 Aug 2026 01:01:54 +0000
Files and hashes: 1: QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl (hash: +MTnGSpx+3MvfoywfVz8ax3bTsqBhR9nuLT/nS641Po=)
2: SsfnBHuvPDESg4pTMTaqtv9nT-Q.roa (hash: ZrITCydyp3ig8q1pUL+0pHbv4soXKIcGIYDQm4wHpvo=)
3: c-KZaw3UumwWkGCg1_3weGS8B-U.roa (hash: 2AcxA0Jqp/dgXDEXPcxhpKLcjp+xB4KSRrsphLc65kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Aug 2026 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d9:bd:ae:f1:ba:3a:f0:3d:76:c3:ea:d2:8c:bd:e7:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Validity
Not Before: Aug 7 01:01:54 2026 GMT
Not After : Aug 8 01:01:54 2026 GMT
Subject: CN=da836eee0ed62b7b75c2e791a792b14deb5b6b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f6:39:24:38:c7:dd:2a:84:70:33:08:a5:3e:
39:39:40:c9:0a:a3:6e:58:32:91:69:e2:ad:05:2b:
75:d6:6f:e3:f9:e5:26:42:ef:ec:9c:6f:cb:b9:3a:
da:3b:90:df:cf:1e:71:5f:0e:86:51:21:70:1e:46:
f2:b0:6d:9d:c7:c8:39:7a:58:cf:46:ad:44:9a:b6:
17:5e:9a:f6:9d:58:c6:54:07:d9:04:bc:ff:ed:9b:
1c:79:39:c8:94:48:99:d1:f4:13:09:11:98:45:5c:
9c:e8:aa:6a:d3:bb:29:62:6d:c6:d3:8b:3f:8b:16:
de:ee:f0:ca:56:44:3f:07:a3:8d:82:e1:fc:9e:ad:
12:c5:38:36:c4:c4:61:bb:fb:e3:c3:f1:33:c0:32:
29:a2:33:a4:81:f9:7b:dc:4a:17:a8:cd:6e:81:a9:
0c:c4:42:87:5e:a6:cc:07:ec:78:d7:ed:ad:30:16:
c5:c1:1b:e6:ab:e7:41:c0:60:e1:f7:d8:d1:0e:8b:
ba:b9:c9:e2:1f:01:62:e8:73:4b:f6:a2:67:57:02:
6c:3a:bb:1e:f0:cc:2e:1c:bf:61:e2:1d:42:95:f4:
d8:b4:82:3b:1c:40:7e:e1:15:b2:e1:1c:a6:6a:01:
d7:b6:73:aa:b4:b8:bf:c3:47:08:cf:67:d3:1d:b9:
ac:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:83:6E:EE:0E:D6:2B:7B:75:C2:E7:91:A7:92:B1:4D:EB:5B:6B:9C
X509v3 Authority Key Identifier:
keyid:42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:85:60:b3:8d:8b:70:41:7e:fd:ab:48:2b:9a:55:1b:79:4c:
fb:9a:4d:2f:91:98:b6:4f:13:0b:37:80:3d:ac:3b:b6:f7:db:
01:c6:20:ea:3a:ca:dd:5a:04:2b:57:93:dc:c1:0e:fb:a8:d1:
55:e9:dd:00:f5:b4:20:b7:9a:77:20:70:f8:d4:1f:e5:a7:e0:
99:d7:22:62:82:c1:5c:21:b4:56:31:e3:e7:a2:64:62:80:b2:
12:09:fb:cb:41:03:48:57:df:a0:85:df:ee:94:2c:23:a3:e1:
2a:ea:07:f9:5e:97:81:3a:05:49:a9:d6:dc:76:3d:c5:6f:b8:
9e:6a:08:14:2a:42:eb:3d:21:c1:f2:e7:e8:b6:80:96:5e:b4:
89:2a:45:30:6e:7b:31:43:61:a2:9f:90:73:05:b4:16:30:71:
e4:59:fa:be:2a:7c:73:95:76:72:b5:66:53:fe:5a:92:a9:9f:
40:88:eb:d2:65:5e:e4:ed:9d:8d:ca:9e:65:e4:21:25:03:7c:
7d:1d:7c:f5:14:d2:d7:fe:4e:5e:a9:52:2e:3d:61:9c:93:94:
31:71:75:0b:15:d2:26:2d:f8:3b:53:1a:d3:9f:a7:6f:00:1d:
44:2a:2b:32:c8:3b:f7:fb:c1:96:2e:62:76:03:47:39:ef:13:
ce:27:e9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 03:55:29 2026 by rpki-client