Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/QbiIzsBviqWb7MzHs6lwGKu3PQs.mft
File: QbiIzsBviqWb7MzHs6lwGKu3PQs.mft (raw, json)
Hash identifier: Vzyc8MRQY8Fnw72WgfzRKk6DPk8uN42lQG1bDVVbWe8=
Subject key identifier: 25:6E:35:97:56:4F:67:98:1F:74:08:63:94:58:E8:A6:A4:3B:E8:29
Authority key identifier: 41:B8:88:CE:C0:6F:8A:A5:9B:EC:CC:C7:B3:A9:70:18:AB:B7:3D:0B
Certificate issuer: /CN=41b888cec06f8aa59becccc7b3a97018abb73d0b
Certificate serial: 019FF9B65E633714CFE55F029E2A14148A4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbiIzsBviqWb7MzHs6lwGKu3PQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/QbiIzsBviqWb7MzHs6lwGKu3PQs.mft
Manifest number: 76
Signing time: Thu 13 Aug 2026 06:01:46 +0000
Manifest this update: Thu 13 Aug 2026 06:01:46 +0000
Manifest next update: Fri 14 Aug 2026 06:01:46 +0000
Files and hashes: 1: QbiIzsBviqWb7MzHs6lwGKu3PQs.crl (hash: 4yQoE2wzNvhL7JxpyeEqe+MXlBO8Y+n7pEn61K0ENug=)
2: _QiQmroF9P3WbIwXaXOwVu2gju0.roa (hash: 9+ii97HZuPAGD+TGVcgVZZlv5SLZbzjKViVe7ESoXRc=)
3: kOQCx-Wt3RfUtND4HBeOaf-__Ao.roa (hash: 6wtyOlYKb3vdJIPgCwFvXGUrxNL2Wzr22WnpzvrLq54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/QbiIzsBviqWb7MzHs6lwGKu3PQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/QbiIzsBviqWb7MzHs6lwGKu3PQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbiIzsBviqWb7MzHs6lwGKu3PQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 06:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:b6:5e:63:37:14:cf:e5:5f:02:9e:2a:14:14:8a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b888cec06f8aa59becccc7b3a97018abb73d0b
Validity
Not Before: Aug 13 06:01:46 2026 GMT
Not After : Aug 14 06:01:46 2026 GMT
Subject: CN=256e3597564f67981f7408639458e8a6a43be829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:da:90:cd:5f:8c:95:fd:0c:38:46:27:1b:f5:
ea:6f:2e:cb:d4:8b:f7:d7:d3:10:2a:48:ce:7d:fe:
46:cd:d4:c6:d9:0e:af:f5:a9:73:65:cc:02:b8:e4:
77:3d:c1:22:a8:d2:a0:cc:8e:3c:3a:96:a9:d2:46:
23:13:be:5f:01:10:87:71:22:74:6e:88:c1:45:0a:
24:b0:d5:65:7c:e5:4d:e7:bc:6d:ef:d8:31:da:e4:
ae:1d:2a:0e:b4:82:b4:6c:f8:11:fa:00:97:6a:f1:
be:49:8a:bb:cd:96:92:a6:d8:cb:9e:c8:b8:60:6d:
9e:c0:0b:37:3e:08:27:a3:65:60:41:90:22:63:b6:
be:a4:af:c1:65:4b:5c:fa:c3:96:8a:1b:d8:8d:c1:
ad:97:c0:5c:b7:25:53:55:73:97:a3:19:d2:64:af:
33:2f:4e:53:1c:19:5d:a8:56:50:a1:ba:fe:e7:c3:
c0:73:70:84:e5:00:db:19:9f:52:1a:92:33:2d:5c:
c9:31:6e:a0:24:3b:2a:38:4f:66:13:c7:f7:b0:45:
19:b2:a7:79:b6:14:b9:ff:2d:e2:e4:43:00:0f:16:
28:c8:a7:9b:42:27:f1:07:e7:d9:d4:a5:f3:02:28:
85:eb:d1:bf:a4:c3:52:1c:83:7b:f4:42:ba:02:1c:
77:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6E:35:97:56:4F:67:98:1F:74:08:63:94:58:E8:A6:A4:3B:E8:29
X509v3 Authority Key Identifier:
keyid:41:B8:88:CE:C0:6F:8A:A5:9B:EC:CC:C7:B3:A9:70:18:AB:B7:3D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbiIzsBviqWb7MzHs6lwGKu3PQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/QbiIzsBviqWb7MzHs6lwGKu3PQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/QbiIzsBviqWb7MzHs6lwGKu3PQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ee:38:60:f8:6f:94:96:2b:6d:73:fc:c6:5b:2f:b8:d9:e7:
3f:9c:c9:7e:a4:c8:97:96:2b:9f:a5:a5:77:cd:2d:14:d6:c9:
ff:6d:c3:2b:87:72:79:b4:86:ad:ae:68:61:f6:6f:a9:96:c7:
81:c9:0b:71:ee:d4:b1:e1:89:9b:05:d7:8a:d6:a1:d4:da:23:
f4:bb:f8:a8:9c:79:ed:18:bf:2f:58:96:87:d4:5c:9f:61:aa:
b4:25:32:de:8c:ff:43:3b:68:65:61:85:03:10:ad:17:ca:f8:
d2:b8:da:0a:c1:cb:df:9b:0c:2c:90:78:04:7a:99:de:26:f0:
4e:36:6b:5f:4d:47:ae:8c:4f:be:4b:04:aa:72:ff:22:5b:8e:
63:0d:55:ee:76:53:2a:ad:2e:7b:6e:1e:f0:9d:93:95:10:81:
8f:c7:e1:87:8d:26:24:17:7c:04:ec:8e:cd:a3:cf:55:67:e3:
f5:2a:a7:47:c8:ec:bd:b6:a0:77:5c:69:cc:9d:7d:9a:b9:8e:
08:8f:58:4c:9b:75:6f:ca:4b:0d:f2:17:e5:d3:31:f7:54:a1:
f4:a5:f4:2e:fb:2c:0f:47:28:f6:52:49:11:e2:fa:b5:6b:ed:
32:66:6b:99:bc:b9:2f:24:bf:26:8e:f5:dd:ce:d7:22:be:83:
5b:f6:6c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 13:18:43 2026 by rpki-client