Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
File: QGYnM7yHPRPh-fZujf91yCDV0vc.mft (raw, json)
Hash identifier: Ca7Dld0lbRibqA6wwZreCYMw797B5htemx5r0vuAO6I=
Subject key identifier: A7:B2:28:71:15:9F:90:B1:E2:37:7D:B3:92:F1:51:B2:60:B3:3E:38
Authority key identifier: 40:66:27:33:BC:87:3D:13:E1:F9:F6:6E:8D:FF:75:C8:20:D5:D2:F7
Certificate issuer: /CN=40662733bc873d13e1f9f66e8dff75c820d5d2f7
Certificate serial: 019F83B10DE1E711C106EE244A14FFC5D0C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
Manifest number: 11C5
Signing time: Tue 21 Jul 2026 08:00:46 +0000
Manifest this update: Tue 21 Jul 2026 08:00:46 +0000
Manifest next update: Wed 22 Jul 2026 08:00:46 +0000
Files and hashes: 1: 41UHcYawFZ6dwCf_FfKVxB6pAyA.roa (hash: mxz0vZfXkFbrjS45D2R+Mi2lF9MSSxAbkahXO8KfBYc=)
2: QGYnM7yHPRPh-fZujf91yCDV0vc.crl (hash: XJn2IoMFeBRbwGr+yrYdId5FXVuzH26smXwWcfTjqJE=)
3: gDO3yGlii3vGStP0g8IXSinnODc.asa (hash: 4GKXfRU/6q53CGfLh+IE//Y0yEXtQGF8Ot458LYjOwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:b1:0d:e1:e7:11:c1:06:ee:24:4a:14:ff:c5:d0:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40662733bc873d13e1f9f66e8dff75c820d5d2f7
Validity
Not Before: Jul 21 08:00:46 2026 GMT
Not After : Jul 22 08:00:46 2026 GMT
Subject: CN=a7b22871159f90b1e2377db392f151b260b33e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fb:8d:6c:d7:81:13:94:90:c4:76:0c:a1:a9:
1f:52:3f:ef:23:d7:18:67:86:65:a4:6d:4a:09:1c:
53:28:3e:73:fc:98:42:78:c1:8c:0a:95:1d:a4:c7:
a2:46:c9:f5:dd:92:93:3a:59:eb:1d:2c:42:d9:25:
d1:b7:64:f3:b2:59:6c:15:05:a7:18:ba:08:6e:49:
f6:89:cd:80:fa:fd:36:62:ab:1e:b8:e5:9d:d2:59:
1e:ce:06:48:cb:12:08:af:10:ce:85:fd:eb:e2:46:
50:22:6e:fe:f8:32:3a:02:7a:15:90:23:0e:c3:85:
1f:0e:4c:e4:a1:ee:57:74:92:90:35:62:16:98:d6:
44:01:ee:75:96:ad:8c:d8:cd:7e:7e:3d:18:28:29:
f0:93:e1:0a:65:78:61:58:44:57:f8:71:44:4c:a2:
8f:87:b2:c8:d5:34:02:6c:a5:ec:eb:77:b0:f0:1e:
11:1d:72:9b:e5:cd:77:7f:34:50:39:d9:74:0a:6a:
c9:d0:85:51:f6:17:58:f2:08:7e:23:f0:32:cc:39:
64:a5:f0:5b:36:bc:90:b1:53:e7:0a:4d:7b:a3:6c:
22:60:bf:d7:19:81:c9:17:71:fb:9b:d5:b4:5c:ba:
4d:df:95:90:9e:87:08:ff:69:12:2e:8a:82:44:62:
81:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B2:28:71:15:9F:90:B1:E2:37:7D:B3:92:F1:51:B2:60:B3:3E:38
X509v3 Authority Key Identifier:
keyid:40:66:27:33:BC:87:3D:13:E1:F9:F6:6E:8D:FF:75:C8:20:D5:D2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:2f:72:e2:01:81:b6:4f:01:79:e1:71:41:87:b7:52:80:8a:
53:38:1a:03:39:2e:a7:c8:4f:cf:27:b6:71:c2:a2:c8:e6:96:
23:3c:0c:ae:68:a8:7b:20:0c:c5:52:78:39:21:42:6f:64:75:
06:d7:85:10:78:43:25:7a:21:a2:6f:79:09:84:67:1c:23:01:
7b:e3:8d:f6:7b:64:4d:e9:9b:9b:83:d5:e7:2b:29:9f:d0:a7:
66:84:92:4f:41:c7:a0:5a:18:44:a6:54:50:99:1a:49:8d:1f:
f0:3a:86:fe:9b:ee:6e:8b:dc:65:bb:6a:05:d8:69:dd:28:fa:
77:d7:c3:e5:0b:58:ed:12:b8:05:77:13:8b:5f:76:db:6f:b4:
ec:89:61:e8:72:b5:1b:7f:68:be:f3:ba:14:34:52:df:f6:54:
58:5d:21:94:3e:34:dc:0f:f1:81:c3:f7:29:40:d1:fc:fd:69:
4b:3a:1e:26:9e:c5:44:6a:12:66:e9:c4:6c:54:06:3a:8c:55:
ea:31:8f:76:76:f2:76:08:3b:5e:6b:3d:6f:f4:4f:3a:8f:1d:
e2:df:75:75:9f:ca:ee:08:73:94:f8:96:13:1f:51:e3:61:18:
65:e2:f8:c0:bc:45:3b:99:cd:9f:cf:6b:bb:98:aa:8f:60:d0:
0f:96:13:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:02:44 2026 by rpki-client