Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
File: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft (raw, json)
Hash identifier: RQ8173Tn73cdbcdEjeje49kcvtJ0dPcwkpRMvJRZjWg=
Subject key identifier: 6E:EF:B1:5E:4F:0E:BC:B5:E8:3D:07:0C:6A:F9:66:E7:C8:00:6B:5F
Authority key identifier: 40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
Certificate issuer: /CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Certificate serial: 019F859FB6BD6539D494E061148DB09277A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
Manifest number: 1298
Signing time: Tue 21 Jul 2026 17:01:04 +0000
Manifest this update: Tue 21 Jul 2026 17:01:04 +0000
Manifest next update: Wed 22 Jul 2026 17:01:04 +0000
Files and hashes: 1: 4ryD7ofmQrN3Mqeu7FPqqWRiYsE.roa (hash: q+5ychHqPBM+eMaL8WGUlpDBY/rhlRPXMm2CsfC21Bk=)
2: ORhpsoGrJDtd4dSX8wo8j8MueNc.roa (hash: Ea9U9BiaJTwEkaiRq8X+h6S8mcjyQT3ldp1ldkiJibY=)
3: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl (hash: Mm6Gvn2l+jSTAxJEC0qc/i+nuzni6aCEqhwpbpQ3yHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:9f:b6:bd:65:39:d4:94:e0:61:14:8d:b0:92:77:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Validity
Not Before: Jul 21 17:01:04 2026 GMT
Not After : Jul 22 17:01:04 2026 GMT
Subject: CN=6eefb15e4f0ebcb5e83d070c6af966e7c8006b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f7:a5:40:18:9f:db:c7:21:59:62:7b:99:f7:
05:57:8b:f5:25:c7:65:c4:3e:e3:22:a6:90:40:b4:
93:10:08:7c:e8:b5:66:92:8e:a1:e6:98:87:9c:d8:
77:77:13:1e:b0:00:89:5b:39:e2:cd:86:7b:33:bb:
e7:0c:14:62:d1:4a:55:a7:6f:1d:07:9d:e8:0a:cd:
ff:ac:4c:4e:9d:e7:ed:55:1e:2d:c4:f2:57:e4:2e:
ea:e2:dc:c7:72:ed:86:c8:62:ff:98:ed:c2:2b:46:
ee:e0:e0:5a:09:39:ce:c6:53:b3:87:ff:29:0f:5d:
09:ee:bb:b3:da:b5:8f:80:73:1a:af:02:6a:35:a2:
07:76:92:d1:07:ee:cf:0c:f0:a4:6f:e8:0c:5b:66:
9f:bb:67:f0:d2:6d:a2:6f:85:b7:0a:e9:28:75:54:
ef:ba:81:de:6e:7e:9c:cf:d0:84:d6:cf:3a:71:bf:
3f:89:44:1e:ed:f2:8f:bc:94:4b:85:ca:76:bc:47:
97:f4:17:84:f2:51:31:bc:7b:48:11:27:53:38:c5:
95:b1:9d:79:35:68:4d:46:46:bd:c4:21:b6:c8:87:
da:bc:f2:9c:9e:97:d7:48:83:cc:3e:be:cd:96:5f:
c1:76:c5:78:e0:5d:6c:5e:9f:50:71:ed:6d:3c:c8:
3a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:EF:B1:5E:4F:0E:BC:B5:E8:3D:07:0C:6A:F9:66:E7:C8:00:6B:5F
X509v3 Authority Key Identifier:
keyid:40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f2:2e:47:9c:d7:cf:ec:f5:88:3d:a8:4d:6b:e5:57:50:c9:
fd:82:40:70:54:6e:8a:81:51:54:a8:9f:72:25:55:2a:29:96:
f1:68:9f:68:dc:65:6b:93:d8:ff:ed:3a:35:c5:8a:2d:30:1a:
e3:53:7d:03:3c:26:5d:10:d6:e5:25:81:ba:04:13:31:25:22:
f8:a9:94:c3:36:2c:6c:de:3f:56:0a:91:0a:ca:eb:ee:a7:22:
ee:65:54:8b:d5:68:56:97:8d:0f:e4:53:e8:76:9d:0a:dc:bc:
9b:f9:35:bf:4f:53:aa:47:96:e9:4d:eb:ca:c7:0a:e1:6a:5b:
10:f9:10:20:5b:2f:1b:7d:e5:15:75:7e:60:ed:35:8c:54:b2:
8a:5e:f3:7b:cd:00:91:3d:bc:d8:cb:b0:f2:2b:5b:f1:99:b0:
1c:47:77:80:b3:62:78:ab:5f:bf:37:32:8a:aa:0f:e4:a5:c0:
10:d4:eb:33:4b:cb:ff:42:48:dc:1f:f6:aa:d2:8f:87:04:f2:
81:20:9c:1b:08:34:4b:1f:63:d8:9a:38:a7:f3:a7:cb:95:65:
b8:da:96:7c:a6:4f:be:be:0f:7a:87:ef:20:fc:16:56:7a:e0:
0c:c2:a8:42:56:04:f6:f4:44:2e:87:5d:c7:6f:c8:85:4b:8b:
5b:63:2d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:43:26 2026 by rpki-client