Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/62b442-9b0c-450d-bf17-d8d26cf0deda/1/QuDTd6wiXd4t6RDMe4FoUPC2cTI.mft
File: QuDTd6wiXd4t6RDMe4FoUPC2cTI.mft (raw, json)
Hash identifier: kGGRSVIrWo2bPHvTebKU9sjbnw65HAmtBoOD+TLzwNs=
Subject key identifier: BA:B1:91:6C:A9:59:DB:32:24:AD:2A:BE:1A:CB:34:52:D5:46:C9:E7
Authority key identifier: 42:E0:D3:77:AC:22:5D:DE:2D:E9:10:CC:7B:81:68:50:F0:B6:71:32
Certificate issuer: /CN=42e0d377ac225dde2de910cc7b816850f0b67132
Certificate serial: 019F845662F93AC6C3DE0B689D196972ED4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuDTd6wiXd4t6RDMe4FoUPC2cTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/62b442-9b0c-450d-bf17-d8d26cf0deda/1/QuDTd6wiXd4t6RDMe4FoUPC2cTI.mft
Manifest number: 59
Signing time: Tue 21 Jul 2026 11:01:21 +0000
Manifest this update: Tue 21 Jul 2026 11:01:21 +0000
Manifest next update: Wed 22 Jul 2026 11:01:21 +0000
Files and hashes: 1: QuDTd6wiXd4t6RDMe4FoUPC2cTI.crl (hash: pVfsMWNeYnhqPYRZJBXNph+wrwli8DWAHJnGEycQVk4=)
2: eVVWCsR3SsLT4BetTTjquKU-q1M.roa (hash: aeSr2d45S0h29TxwaX3O5Y/8gj9nHZ8GIzMdMwCrt1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/62b442-9b0c-450d-bf17-d8d26cf0deda/1/QuDTd6wiXd4t6RDMe4FoUPC2cTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/62b442-9b0c-450d-bf17-d8d26cf0deda/1/QuDTd6wiXd4t6RDMe4FoUPC2cTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuDTd6wiXd4t6RDMe4FoUPC2cTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:56:62:f9:3a:c6:c3:de:0b:68:9d:19:69:72:ed:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e0d377ac225dde2de910cc7b816850f0b67132
Validity
Not Before: Jul 21 11:01:21 2026 GMT
Not After : Jul 22 11:01:21 2026 GMT
Subject: CN=bab1916ca959db3224ad2abe1acb3452d546c9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fe:37:39:73:c6:11:65:15:66:4d:e3:b8:48:
3c:1f:47:31:e3:3a:75:37:de:c7:a0:1d:30:f7:54:
c4:9a:b3:b4:59:b1:49:15:a9:e4:a7:92:f8:4c:5b:
e3:88:22:a6:10:6e:7a:7b:c8:fb:fb:09:bf:4d:95:
31:8d:5b:2a:77:d0:25:78:fb:c2:23:84:4e:19:f2:
1b:25:d6:ea:15:38:bb:0b:61:55:54:1e:f2:ec:4c:
a7:b0:91:de:25:29:ef:42:1b:15:b4:a6:81:b4:c5:
b2:df:51:48:c0:f4:11:ac:73:3d:ea:ad:71:0d:00:
8f:f2:35:e3:3d:92:d0:88:ef:82:64:e2:18:94:7e:
c7:37:b4:5f:65:6c:50:d9:8c:09:28:8b:08:9c:70:
99:14:78:25:5c:66:6c:b2:eb:38:d1:88:2c:3b:b4:
cc:75:cc:0d:bc:02:f9:3e:11:f2:6e:e5:87:21:36:
81:ca:4b:15:85:dd:05:22:8e:7f:a3:a6:8b:14:ec:
d8:55:b0:3f:64:67:9f:39:47:0e:a7:a3:1a:18:8d:
16:7c:11:ba:4d:4a:af:26:df:25:df:8d:70:b0:c3:
1b:5f:e8:dd:c5:51:83:3a:76:a8:ce:14:71:c7:3b:
a1:a5:c5:1e:4e:45:4e:14:42:af:b3:0d:2f:76:9a:
e9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B1:91:6C:A9:59:DB:32:24:AD:2A:BE:1A:CB:34:52:D5:46:C9:E7
X509v3 Authority Key Identifier:
keyid:42:E0:D3:77:AC:22:5D:DE:2D:E9:10:CC:7B:81:68:50:F0:B6:71:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuDTd6wiXd4t6RDMe4FoUPC2cTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/62b442-9b0c-450d-bf17-d8d26cf0deda/1/QuDTd6wiXd4t6RDMe4FoUPC2cTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/62b442-9b0c-450d-bf17-d8d26cf0deda/1/QuDTd6wiXd4t6RDMe4FoUPC2cTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:11:86:42:12:8b:3a:5f:2d:7a:cd:2f:72:57:87:be:54:af:
01:a2:d8:22:9a:81:bb:ea:5e:3c:30:56:b3:23:f9:35:4e:6b:
bc:a4:f4:c7:9b:c5:b9:6a:43:e5:f8:e2:c4:09:e0:74:05:a6:
23:18:d8:9f:fb:a1:d1:71:cd:7d:f4:08:59:2a:a0:15:bf:cf:
2d:11:5c:9f:39:a0:e2:45:87:ab:e5:62:cc:7f:30:a0:a4:e7:
c3:f9:e6:b1:13:c9:87:db:40:ab:91:e6:0d:1f:88:22:95:90:
e8:33:63:8b:14:7b:ef:bf:6b:98:60:c4:c2:8f:24:38:35:af:
85:f7:bb:11:28:de:7b:45:98:78:f5:84:db:d9:af:c0:f9:8c:
18:38:a8:37:27:0d:2b:18:9c:04:16:d8:5f:a5:c0:f6:82:b7:
ea:f4:1b:b3:71:76:2f:99:0e:fc:4a:5c:3f:5e:1f:9f:0f:dc:
75:1a:02:b8:02:f4:b2:f5:f6:ed:a1:05:53:4c:22:d2:11:a6:
df:0e:ca:99:6a:05:46:b1:16:6c:8a:54:ef:6f:f4:f2:1e:a5:
a5:a6:73:4e:45:b2:ec:c4:ec:7f:46:b4:b7:31:46:f6:23:08:
5c:98:1e:85:15:20:c6:c2:da:21:5d:5b:d9:83:bb:c6:0b:0f:
1d:c0:14:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+EVmL5OsbD3gtonRlpcu1OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZTBkMzc3YWMyMjVkZGUyZGU5MTBjYzdiODE2ODUwZjBi
NjcxMzIwHhcNMjYwNzIxMTEwMTIxWhcNMjYwNzIyMTEwMTIxWjAzMTEwLwYDVQQD
EyhiYWIxOTE2Y2E5NTlkYjMyMjRhZDJhYmUxYWNiMzQ1MmQ1NDZjOWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4v43OXPGEWUVZk3juEg8H0cx4zp1
N97HoB0w91TEmrO0WbFJFankp5L4TFvjiCKmEG56e8j7+wm/TZUxjVsqd9AlePvC
I4ROGfIbJdbqFTi7C2FVVB7y7EynsJHeJSnvQhsVtKaBtMWy31FIwPQRrHM96q1x
DQCP8jXjPZLQiO+CZOIYlH7HN7RfZWxQ2YwJKIsInHCZFHglXGZssus40YgsO7TM
dcwNvAL5PhHybuWHITaByksVhd0FIo5/o6aLFOzYVbA/ZGefOUcOp6MaGI0WfBG6
TUqvJt8l341wsMMbX+jdxVGDOnaozhRxxzuhpcUeTkVOFEKvsw0vdprpwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqxkWypWdsyJK0qvhrLNFLVRsnnMB8GA1UdIwQY
MBaAFELg03esIl3eLekQzHuBaFDwtnEyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXVEVGQ2d2lYZDR0NlJETWU0Rm9VUEMyY1RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82MmI0NDItOWIwYy00NTBkLWJmMTct
ZDhkMjZjZjBkZWRhLzEvUXVEVGQ2d2lYZDR0NlJETWU0Rm9VUEMyY1RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS82MmI0NDItOWIwYy00NTBkLWJmMTctZDhkMjZjZjBkZWRh
LzEvUXVEVGQ2d2lYZDR0NlJETWU0Rm9VUEMyY1RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYxGGQhKL
Ol8tes0vcleHvlSvAaLYIpqBu+pePDBWsyP5NU5rvKT0x5vFuWpD5fjixAngdAWm
IxjYn/uh0XHNffQIWSqgFb/PLRFcnzmg4kWHq+VizH8woKTnw/nmsRPJh9tAq5Hm
DR+IIpWQ6DNjixR7779rmGDEwo8kODWvhfe7ESjee0WYePWE29mvwPmMGDioNycN
KxicBBbYX6XA9oK36vQbs3F2L5kO/EpcP14fnw/cdRoCuAL0svX27aEFU0wi0hGm
3w7KmWoFRrEWbIpU72/08h6lpaZzTkWy7MTsf0a0tzFG9iMIXJgehRUgxsLaIV1b
2YO7xgsPHcAUhw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:46 2026 by rpki-client