Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
File: Q_BsNphySzf-GhcRQX29iOu_CpE.mft (raw, json)
Hash identifier: T4qap9s7AQPbcdPT1zrntf0O8PuyeRNjJuRQEwMm3YA=
Subject key identifier: 0E:6C:CF:E5:FA:8E:26:B7:C5:45:54:7A:1F:A2:08:FF:1A:12:94:5D
Authority key identifier: 43:F0:6C:36:98:72:4B:37:FE:1A:17:11:41:7D:BD:88:EB:BF:0A:91
Certificate issuer: /CN=43f06c3698724b37fe1a1711417dbd88ebbf0a91
Certificate serial: 019FA33C5B25BD6D6895B19F2C62E64DCB02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
Manifest number: 0324
Signing time: Mon 27 Jul 2026 11:01:09 +0000
Manifest this update: Mon 27 Jul 2026 11:01:09 +0000
Manifest next update: Tue 28 Jul 2026 11:01:09 +0000
Files and hashes: 1: 9i2FNq-ilnO82a12KCx8bZf9uj0.roa (hash: e5YuVWmmuJUMRKFIac15BKkt/ujz30drSZUPYaFPPoE=)
2: Q_BsNphySzf-GhcRQX29iOu_CpE.crl (hash: Chdz/jVF2DfZeyGbi+u91uYGRp/gSR9/vENfREAYU9Y=)
3: WGgjc9Dg0G9csDwIMq1t0ZtJTWA.roa (hash: cVZmg6mqBIAtl689EL6CUc0A6vHkHLnQ4WlcU+2etIc=)
4: tvttSBr7BAYjU6B6SYrmyrXgmPc.roa (hash: cY0rsNXodbspFudhEGa5CSODCsQ4WfZrUF/qlRWnO7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3c:5b:25:bd:6d:68:95:b1:9f:2c:62:e6:4d:cb:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43f06c3698724b37fe1a1711417dbd88ebbf0a91
Validity
Not Before: Jul 27 11:01:09 2026 GMT
Not After : Jul 28 11:01:09 2026 GMT
Subject: CN=0e6ccfe5fa8e26b7c545547a1fa208ff1a12945d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4c:b2:bc:ab:02:43:bc:fb:1b:2a:d1:3b:94:
0c:a6:50:e8:29:a6:56:6b:e8:b5:96:15:fd:b4:5a:
00:10:49:b8:44:2a:24:4a:e8:19:f6:9e:51:04:e6:
1f:1a:30:d1:36:8e:4d:70:59:63:c8:5e:24:00:45:
cf:a3:66:a8:a7:9c:f6:50:28:0c:a3:74:68:a6:ca:
ef:46:f7:fc:80:96:8f:e8:b0:d7:03:5d:22:fd:51:
24:01:a2:61:39:4f:47:0b:a7:24:47:ae:85:1b:ef:
a1:65:ea:46:38:0b:2c:11:62:6f:f4:d6:e5:98:79:
8a:b2:37:04:ea:8a:50:49:58:c2:d2:f1:f8:03:cd:
5c:cd:36:39:87:b9:44:eb:2e:4a:37:6a:76:90:14:
29:24:a3:39:07:1e:f7:2a:c0:85:7d:15:7d:be:45:
4d:ec:86:94:35:58:8b:49:fa:96:60:fb:81:bc:79:
f0:9c:02:e4:b8:64:2e:1e:dd:ab:b5:d8:0c:04:d8:
dc:19:9e:8d:d7:6f:da:a6:d6:53:b3:a8:63:b1:c9:
17:ea:83:86:90:e1:ca:89:ae:5b:00:46:22:51:ec:
e5:0c:3d:f1:2b:13:2c:d3:12:60:ed:9b:b1:3d:9b:
b6:fa:51:a0:da:08:3e:ab:de:27:21:fd:da:0a:b4:
99:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6C:CF:E5:FA:8E:26:B7:C5:45:54:7A:1F:A2:08:FF:1A:12:94:5D
X509v3 Authority Key Identifier:
keyid:43:F0:6C:36:98:72:4B:37:FE:1A:17:11:41:7D:BD:88:EB:BF:0A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:fb:08:9a:17:05:a2:f5:4b:b9:b3:e8:5a:90:42:77:65:b5:
21:b3:d4:3e:52:ab:9a:ad:12:23:42:f4:a4:50:9c:b9:0d:bb:
a9:a5:78:46:5c:52:1c:14:bf:5f:f8:7d:92:59:bc:08:ad:b3:
3c:a7:81:09:ca:56:d9:09:6a:0a:5e:96:61:c9:09:1a:af:6e:
55:b8:47:f8:ab:48:03:37:2d:94:ac:fb:1a:81:3a:f5:f9:c9:
12:bb:d5:04:7e:e6:ca:1f:5b:e7:15:f2:ac:5d:3e:2e:ac:27:
71:83:a8:86:29:20:3f:5b:a3:25:df:be:a8:81:34:88:65:77:
6d:0f:9e:99:9e:f3:ca:f4:e7:c2:67:ad:f4:51:45:6a:f9:06:
91:5c:66:26:ee:71:fa:0a:08:57:ee:6d:f4:2a:c3:4a:bd:ac:
bc:fa:aa:45:a2:8b:dc:83:63:12:11:e4:13:0c:e1:72:31:ed:
db:44:08:1d:74:d6:c6:d3:94:55:04:3d:e5:0b:9d:06:b0:d6:
90:38:d4:4f:03:29:47:db:eb:c9:7f:4e:72:ab:d2:80:cf:23:
81:16:3c:d6:f7:97:ec:ec:ee:36:fc:df:a9:b2:f1:cd:e4:29:
80:bd:9e:5b:f5:cc:8c:bc:ee:f6:72:dd:5e:6e:33:33:3b:ec:
56:64:ae:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:16:59 2026 by rpki-client