Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
File: Qy_nD0zvEDdoNhUvOOTghTLMe58.mft (raw, json)
Hash identifier: eeW0R13COVMCtXacyd38HGsIscshx8JKj2CamMQ1W/w=
Subject key identifier: 50:6F:34:3D:DD:1C:A5:E1:DC:D8:FA:9F:C9:BA:53:E1:1A:28:E3:DD
Authority key identifier: 43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
Certificate issuer: /CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Certificate serial: 019FA296F58C7DC0E5C48EE5CAE710D743B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
Manifest number: 0879
Signing time: Mon 27 Jul 2026 08:00:29 +0000
Manifest this update: Mon 27 Jul 2026 08:00:29 +0000
Manifest next update: Tue 28 Jul 2026 08:00:29 +0000
Files and hashes: 1: A9KPkngUXWXwoXMeh9I603GmeJg.roa (hash: dKQV+T7YqY4RYKx4LLE6fQsZ703AeKW3tQVyd7Sv7c8=)
2: Qy_nD0zvEDdoNhUvOOTghTLMe58.crl (hash: Ed2xMGEZUVH9w1Daoo91Jluh7RaQF1FxkY3DywCd2aE=)
3: sKDKorvVElJgqwc1YL9x1RhoYEM.roa (hash: SXIrFPkLP5e0Dojj65FY1WNGEqYxxlyXHUyw6TzDiOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:96:f5:8c:7d:c0:e5:c4:8e:e5:ca:e7:10:d7:43:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Validity
Not Before: Jul 27 08:00:29 2026 GMT
Not After : Jul 28 08:00:29 2026 GMT
Subject: CN=506f343ddd1ca5e1dcd8fa9fc9ba53e11a28e3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f8:85:58:f8:60:e2:27:c2:e3:55:fd:0f:44:
50:f7:43:87:32:30:35:72:59:da:f4:6c:79:69:69:
16:96:60:6d:e2:b7:fe:92:09:67:4c:b5:36:cf:57:
41:79:e6:b6:c8:4b:92:cb:64:93:f6:f0:4c:a8:32:
89:21:c6:50:9b:e9:f6:aa:f8:67:d2:1a:74:d2:ff:
8e:23:d1:e1:51:1b:ae:d5:76:11:fa:fe:1e:48:ed:
8f:72:54:6c:e3:1d:a5:2f:b2:38:98:72:54:f2:95:
db:3b:ab:68:a9:30:e0:67:df:c3:9c:d0:ee:69:0f:
88:6a:f8:43:27:e3:4e:c6:01:57:40:e5:39:43:28:
4f:91:34:2d:f6:c5:0d:a9:83:71:82:5f:2f:96:f7:
53:c7:d3:d5:7b:14:34:23:ec:e9:eb:06:f7:a5:b9:
5d:10:fa:4f:72:19:1a:cd:f0:03:ad:e2:bf:4d:44:
36:12:6e:ca:c3:26:bd:0d:79:fd:4f:d5:2b:75:96:
fe:f5:02:5b:3a:73:7a:52:09:cc:c0:af:af:1b:0b:
6d:4f:bd:18:9f:2b:94:80:a9:10:b7:15:60:02:f8:
a6:1f:81:cc:9f:3a:7d:7d:6d:94:19:a9:ec:cd:d1:
2a:f5:5d:af:6c:f0:96:92:3e:16:9e:ab:9d:84:61:
74:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6F:34:3D:DD:1C:A5:E1:DC:D8:FA:9F:C9:BA:53:E1:1A:28:E3:DD
X509v3 Authority Key Identifier:
keyid:43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:28:e2:02:78:b5:51:f4:b3:b7:58:fe:ff:33:94:81:a4:9b:
02:e3:b2:26:25:3c:fd:f7:ae:a7:c9:de:c6:68:61:77:81:6c:
59:e9:3c:9a:e0:dc:a0:84:04:54:7f:b6:a1:3e:da:1e:b9:02:
63:9d:1b:da:1c:04:5b:ec:76:c4:65:a2:c8:e3:7e:da:7a:4a:
66:a3:33:da:e0:05:44:35:16:57:0f:bc:68:1a:53:5c:ad:99:
e4:03:a0:89:97:b8:7a:4c:54:d8:83:45:d5:52:01:21:28:eb:
76:ee:e7:43:cb:5e:6b:91:0f:ee:8f:22:fd:a2:17:de:84:1a:
6e:1f:a1:1a:54:60:92:89:2e:14:fa:ca:ff:79:d0:d1:e5:e6:
d7:23:5c:e0:80:7c:71:f6:3b:43:95:7d:35:3e:9a:5f:27:ea:
4a:1c:1c:a9:6a:6d:18:fd:77:85:62:e3:d7:36:70:73:47:35:
2d:5f:3e:bd:71:92:50:c0:28:06:1b:01:c4:d6:d6:b3:48:92:
11:5d:a9:10:f3:d4:47:f1:75:03:05:11:64:2c:15:12:99:0f:
2f:8f:85:7b:8a:11:52:a0:f7:7f:cc:af:bb:42:32:cc:83:5a:
30:d9:b6:0a:40:cf:bd:c3:fc:84:e6:bf:54:61:99:89:a7:52:
69:a9:fc:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:03:12 2026 by rpki-client