Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
File: qHxnPzWntwWmtCTTORT6OS07li4.mft (raw, json)
Hash identifier: /StQOTIGyX9MIforq5NGSRjJsKkCPzZZ9zA/qcARoLs=
Subject key identifier: 17:1B:E2:7F:FA:AD:51:6F:2A:ED:30:BB:08:37:DD:65:03:42:C4:DC
Authority key identifier: A8:7C:67:3F:35:A7:B7:05:A6:B4:24:D3:39:14:FA:39:2D:3B:96:2E
Certificate issuer: /CN=a87c673f35a7b705a6b424d33914fa392d3b962e
Certificate serial: 019F85694C292742EA06B5281D9BD4F92E1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHxnPzWntwWmtCTTORT6OS07li4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
Manifest number: 0C3B
Signing time: Tue 21 Jul 2026 16:01:38 +0000
Manifest this update: Tue 21 Jul 2026 16:01:38 +0000
Manifest next update: Wed 22 Jul 2026 16:01:38 +0000
Files and hashes: 1: MdQ19d3eFkD78fJxuXq5iy-2rpM.roa (hash: rp9j2xxR/tRXFv1++j74kJ2PghVMO1/nSR5xC0/6LuE=)
2: qHxnPzWntwWmtCTTORT6OS07li4.crl (hash: ESTGbA/KHheB+SQgb61lDjW1UXZaYsBdJp190hW7Zik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHxnPzWntwWmtCTTORT6OS07li4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 16:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:69:4c:29:27:42:ea:06:b5:28:1d:9b:d4:f9:2e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87c673f35a7b705a6b424d33914fa392d3b962e
Validity
Not Before: Jul 21 16:01:38 2026 GMT
Not After : Jul 22 16:01:38 2026 GMT
Subject: CN=171be27ffaad516f2aed30bb0837dd650342c4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:7f:06:36:92:b6:b8:67:4d:99:94:d9:d5:5c:
54:06:0f:79:24:3d:dd:6e:fc:7d:9c:1f:65:8b:72:
f3:4e:1f:fb:3f:c9:58:db:5e:97:e2:b4:a6:ca:f3:
b5:3c:c5:be:fa:27:d7:26:d8:26:20:bc:1a:28:74:
05:f5:82:0d:0e:95:16:43:f0:aa:ac:ea:44:d9:0f:
7c:f1:f9:f8:84:91:c2:fc:f9:eb:d0:d6:b2:bc:d4:
86:4e:7e:bb:1c:c2:80:54:da:e4:75:ca:7e:a9:6a:
6e:60:37:d1:bf:30:d1:23:39:28:d9:ee:54:72:9b:
64:9a:1a:3b:c1:7e:d4:2e:e1:74:60:3f:2a:10:a9:
56:d0:c9:c7:66:40:3e:1a:eb:70:aa:17:e8:66:ec:
93:c7:80:9a:28:04:5d:c3:7d:53:2e:aa:df:30:28:
80:2d:22:68:5e:a3:db:40:c3:52:0a:9e:8f:6b:8e:
4e:d1:79:e2:bf:3d:76:08:4b:70:49:70:d2:e0:5e:
34:8f:95:96:a4:a9:66:6e:9e:8e:54:72:32:d9:e7:
ac:fc:7c:50:85:ed:84:ef:2b:0a:5d:e2:3a:4b:0f:
62:45:6d:14:01:a7:6b:69:b1:c6:09:0b:c6:56:05:
d4:fc:ea:fa:d2:33:a8:dd:e0:6d:b3:03:9b:ed:8e:
08:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1B:E2:7F:FA:AD:51:6F:2A:ED:30:BB:08:37:DD:65:03:42:C4:DC
X509v3 Authority Key Identifier:
keyid:A8:7C:67:3F:35:A7:B7:05:A6:B4:24:D3:39:14:FA:39:2D:3B:96:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHxnPzWntwWmtCTTORT6OS07li4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:bf:7a:70:85:6d:2c:eb:93:82:be:64:a5:34:fa:3c:98:71:
f9:98:50:83:3c:fc:1e:9a:85:fd:c3:d9:4a:8c:77:07:72:9f:
ae:82:f1:66:57:86:97:1d:00:6c:f3:c9:6b:fb:9b:09:e2:65:
d0:e3:56:33:ac:f4:ef:95:8c:10:00:37:07:df:70:f1:9f:f7:
7b:d2:b9:4c:1c:84:a8:21:14:47:70:75:19:49:fa:88:8a:a3:
c0:bb:2f:2e:71:b1:3e:e1:30:8d:a0:ec:9c:f7:73:75:4d:be:
15:32:c6:9e:9f:57:e6:50:6a:6c:b8:f0:2c:2d:98:45:ba:25:
6e:37:50:68:ca:be:8d:f7:95:4c:c3:ca:1c:e1:b6:fd:b9:fb:
4f:22:2b:f6:1f:0c:32:b1:7e:9f:a3:38:46:14:d3:6e:2b:21:
ed:10:44:24:43:cb:ff:92:78:ea:02:9c:6f:31:2b:cf:dd:e5:
fd:44:ce:35:f1:fd:51:73:bf:43:6b:00:ee:6a:4b:73:f2:ea:
34:f4:f0:6f:8a:b1:02:df:2f:2a:29:4d:de:4d:3e:5e:44:d2:
26:ff:b7:a4:d8:1b:14:a6:bf:43:4d:d3:82:6c:c4:8f:4b:89:
1d:b5:d3:68:de:21:69:ba:b9:ef:73:ac:44:e5:d5:25:7e:50:
ec:c0:00:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:02:59 2026 by rpki-client