Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/0d3f44-db1b-4192-8c42-40f2a93727a4/1/QXF5yEiCEh630SJJWnrH6joAcMg.mft
File: QXF5yEiCEh630SJJWnrH6joAcMg.mft (raw, json)
Hash identifier: I3RVySMByi6Eeqhct4ZdJZ0mWYBdP90+ur39WhjDW3E=
Subject key identifier: 07:10:B3:29:85:21:D3:C4:FE:57:5B:1B:9C:FC:54:E6:AE:21:5B:04
Authority key identifier: 41:71:79:C8:48:82:12:1E:B7:D1:22:49:5A:7A:C7:EA:3A:00:70:C8
Certificate issuer: /CN=417179c84882121eb7d122495a7ac7ea3a0070c8
Certificate serial: 019F9700D0AA163A92F7DD0B555EBC17BAD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXF5yEiCEh630SJJWnrH6joAcMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/0d3f44-db1b-4192-8c42-40f2a93727a4/1/QXF5yEiCEh630SJJWnrH6joAcMg.mft
Manifest number: 019D
Signing time: Sat 25 Jul 2026 02:00:40 +0000
Manifest this update: Sat 25 Jul 2026 02:00:40 +0000
Manifest next update: Sun 26 Jul 2026 02:00:40 +0000
Files and hashes: 1: QXF5yEiCEh630SJJWnrH6joAcMg.crl (hash: RIR44m1j03waXUuykRbbUxmQycM+i1584tnVouZqPKM=)
2: gFG9Wl84d8X9xFisW6jM5nOXCEU.roa (hash: PgnlQFmyF6NB2/hGt3DIQB9LhPjYBLOyS8GHZ24ktDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/0d3f44-db1b-4192-8c42-40f2a93727a4/1/QXF5yEiCEh630SJJWnrH6joAcMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/0d3f44-db1b-4192-8c42-40f2a93727a4/1/QXF5yEiCEh630SJJWnrH6joAcMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXF5yEiCEh630SJJWnrH6joAcMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 20:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:97:00:d0:aa:16:3a:92:f7:dd:0b:55:5e:bc:17:ba:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417179c84882121eb7d122495a7ac7ea3a0070c8
Validity
Not Before: Jul 25 02:00:40 2026 GMT
Not After : Jul 26 02:00:40 2026 GMT
Subject: CN=0710b3298521d3c4fe575b1b9cfc54e6ae215b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:70:3d:35:85:cb:c3:af:80:79:8c:07:53:3e:
00:4c:46:b5:0e:f9:91:54:18:31:54:bc:ea:31:f7:
5f:dd:35:15:b8:94:02:2f:08:05:55:65:3e:52:f1:
88:d9:99:5a:f5:ed:75:51:30:1b:2b:6b:88:ab:14:
3a:4e:77:b2:49:2b:c9:03:17:b7:4d:c1:29:60:bc:
78:a2:c6:50:2f:06:af:a7:ed:b4:88:4c:97:22:36:
8b:f0:9e:de:30:ea:e6:f5:67:ec:5c:ac:7c:92:ef:
99:0e:b4:0c:26:f2:3e:d3:0b:4d:7b:cf:43:18:30:
4e:5b:19:5c:18:d7:59:59:e4:ea:0b:8e:b9:b9:2d:
5c:38:ed:36:9f:79:53:b6:0d:63:b7:f0:f1:32:5e:
de:73:7e:aa:ed:4d:6e:f0:90:7c:74:b7:30:99:1b:
30:5d:8b:66:a6:40:1b:cb:21:ec:21:2b:b3:6e:43:
96:ca:1d:02:97:8c:b9:69:2b:2c:87:c5:77:bf:62:
9d:08:f1:d2:f7:c7:45:62:8b:3e:4e:fb:e8:3f:c6:
9c:50:30:55:f1:59:35:a3:04:d3:0f:9f:3f:92:2e:
c5:86:25:87:de:ad:51:da:70:d8:ac:c7:6e:6d:ce:
bb:61:f6:c8:d5:e0:f5:6c:64:14:6b:9a:67:f1:98:
2f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:10:B3:29:85:21:D3:C4:FE:57:5B:1B:9C:FC:54:E6:AE:21:5B:04
X509v3 Authority Key Identifier:
keyid:41:71:79:C8:48:82:12:1E:B7:D1:22:49:5A:7A:C7:EA:3A:00:70:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXF5yEiCEh630SJJWnrH6joAcMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0d3f44-db1b-4192-8c42-40f2a93727a4/1/QXF5yEiCEh630SJJWnrH6joAcMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0d3f44-db1b-4192-8c42-40f2a93727a4/1/QXF5yEiCEh630SJJWnrH6joAcMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:26:3e:72:2b:1b:f6:c1:16:d5:b4:32:3a:9e:de:d4:c0:5b:
e7:e0:dd:92:ae:07:74:37:ff:31:9f:8c:a7:37:04:48:38:b9:
27:61:92:f1:40:a3:0b:00:13:80:ec:da:85:ae:51:a4:19:e4:
0f:7e:bb:71:ef:5c:30:08:7b:4a:33:9a:01:9d:36:8f:e1:fc:
0e:93:b8:d6:dc:25:63:99:7e:a5:33:bb:e4:25:ad:a3:4d:7d:
d0:14:6f:98:09:9c:10:ff:8f:54:e6:d4:43:8d:fa:1a:69:dc:
7a:9c:ac:0f:f3:1b:9b:54:c0:54:c5:da:4c:5d:ae:b6:77:82:
7b:d2:b9:7f:0c:1b:f1:63:17:31:de:f7:94:f9:ca:3b:bf:06:
97:22:a6:76:cb:40:73:81:4f:15:61:ec:ad:cd:eb:c1:92:3e:
91:d7:12:8d:a5:d1:4a:8e:99:3a:ee:ed:15:03:36:74:be:be:
83:d8:28:44:f7:b4:1a:09:6b:74:f5:b9:11:74:c5:29:ff:5a:
2f:a3:9f:6a:21:ca:48:8b:51:8a:5d:c7:67:3f:5c:c6:0c:28:
f9:7c:58:ec:b1:7c:41:1c:b7:fa:f8:74:df:31:6e:49:c7:7e:
d0:ac:2f:e0:ac:c6:a2:a5:0b:6a:9f:a6:2a:30:85:b2:11:8e:
a7:c6:9e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:55:31 2026 by rpki-client