Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/371f11-6457-43e0-941f-e7661637eebd/1/QG7xj1j1rRgE6bbFrvbiMsy4oeI.mft
File: QG7xj1j1rRgE6bbFrvbiMsy4oeI.mft (raw, json)
Hash identifier: XJC5RTygHwN7weCP3O/+CjZ4+95MDmexDRBbgl3wInI=
Subject key identifier: 96:FC:62:99:11:A4:CA:8A:88:F4:E5:22:DE:E0:D8:37:D2:B2:C8:A3
Authority key identifier: 40:6E:F1:8F:58:F5:AD:18:04:E9:B6:C5:AE:F6:E2:32:CC:B8:A1:E2
Certificate issuer: /CN=406ef18f58f5ad1804e9b6c5aef6e232ccb8a1e2
Certificate serial: 019FD1CCF2762C6972F4DD229748AB6A891E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QG7xj1j1rRgE6bbFrvbiMsy4oeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/371f11-6457-43e0-941f-e7661637eebd/1/QG7xj1j1rRgE6bbFrvbiMsy4oeI.mft
Manifest number: 013D
Signing time: Wed 05 Aug 2026 12:01:37 +0000
Manifest this update: Wed 05 Aug 2026 12:01:37 +0000
Manifest next update: Thu 06 Aug 2026 12:01:37 +0000
Files and hashes: 1: QG7xj1j1rRgE6bbFrvbiMsy4oeI.crl (hash: W/WajXaiA9bbmKadlHW9A/Pz7eMrAPg0yKQ2GAU3Bd4=)
2: bc_rDqdFLWG9EqOE3XpdCbzci7A.roa (hash: QX2e7Tpj37ujdBJf37YYj5ilDYHQsrFIORHYzhmx2Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/371f11-6457-43e0-941f-e7661637eebd/1/QG7xj1j1rRgE6bbFrvbiMsy4oeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/371f11-6457-43e0-941f-e7661637eebd/1/QG7xj1j1rRgE6bbFrvbiMsy4oeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QG7xj1j1rRgE6bbFrvbiMsy4oeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 12:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:cc:f2:76:2c:69:72:f4:dd:22:97:48:ab:6a:89:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406ef18f58f5ad1804e9b6c5aef6e232ccb8a1e2
Validity
Not Before: Aug 5 12:01:37 2026 GMT
Not After : Aug 6 12:01:37 2026 GMT
Subject: CN=96fc629911a4ca8a88f4e522dee0d837d2b2c8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:37:62:f3:6e:6f:2f:a2:d2:56:be:30:6c:3f:
45:67:40:b0:35:e1:93:bb:59:f6:a6:f2:72:b3:67:
cb:ea:73:e0:67:2c:47:5e:ea:bd:20:70:12:9b:5d:
b9:c3:9e:f9:f3:3c:77:de:92:bb:bc:2d:b4:e6:fd:
5f:98:c0:a8:e5:54:db:f4:35:2d:f2:6f:b4:9a:13:
bb:bc:97:dc:60:07:65:e4:7a:75:b7:0c:5d:85:64:
22:c2:04:4a:e6:31:a9:b5:f8:16:2c:ef:2c:ec:25:
57:f6:5d:bf:e4:1e:e6:67:89:16:b4:0c:67:5a:2c:
5a:85:40:73:c9:d8:cb:62:1c:66:50:fb:f1:62:ed:
11:ff:82:84:9f:b0:6a:35:16:63:36:d8:ba:94:53:
17:16:67:db:b9:fc:a2:c4:5b:44:ec:1d:81:bb:f5:
f7:25:c5:fd:30:b3:76:ae:dc:54:a1:67:10:46:40:
1e:88:df:9f:81:df:73:62:59:10:0b:7c:60:5f:d8:
df:12:19:19:a3:3e:f0:e4:73:8d:4c:c8:5a:fb:a9:
3c:65:48:47:09:e3:8e:47:02:7b:43:63:ed:6b:63:
c6:50:33:9a:77:5c:f1:54:70:41:b2:c6:bc:7d:de:
11:0b:75:00:b2:eb:50:7c:e6:40:56:93:bf:67:d2:
23:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FC:62:99:11:A4:CA:8A:88:F4:E5:22:DE:E0:D8:37:D2:B2:C8:A3
X509v3 Authority Key Identifier:
keyid:40:6E:F1:8F:58:F5:AD:18:04:E9:B6:C5:AE:F6:E2:32:CC:B8:A1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QG7xj1j1rRgE6bbFrvbiMsy4oeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/371f11-6457-43e0-941f-e7661637eebd/1/QG7xj1j1rRgE6bbFrvbiMsy4oeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/371f11-6457-43e0-941f-e7661637eebd/1/QG7xj1j1rRgE6bbFrvbiMsy4oeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:69:48:50:d6:36:60:d0:c0:cd:34:72:98:e3:59:00:b1:d7:
98:a9:c7:00:32:b9:4b:1f:af:d9:0f:28:5a:9a:6d:a3:a3:57:
e1:ed:47:50:66:a9:d5:54:60:7d:b9:aa:7e:dd:06:07:03:8b:
3a:f4:ac:cf:2e:28:2c:31:67:91:e6:47:a0:a9:c3:27:ef:70:
42:28:33:aa:a4:8e:e6:4f:ad:90:d3:6b:c0:c7:6a:88:c0:e8:
c5:18:14:62:1a:5e:2f:36:d9:d5:9b:0d:e3:10:a5:e6:a3:9b:
64:ba:a7:01:d8:ad:be:53:ef:d4:9b:f1:d4:88:e5:65:f9:10:
5e:b9:66:f3:ed:e8:62:8c:e2:84:74:a5:da:5d:0a:39:96:47:
bb:f6:83:79:6f:8c:a2:c9:3e:51:3d:87:6e:4c:62:c6:22:b0:
06:2c:d9:9d:8b:c5:00:6e:0b:61:56:1c:cc:07:85:69:01:df:
2b:b0:eb:41:eb:a7:fc:79:0d:41:14:00:15:d1:4c:5f:b4:7e:
75:57:69:0b:e8:e2:e4:7b:23:8a:f1:19:53:6e:e3:c6:d7:ef:
4e:fb:24:20:c2:1b:4a:d3:c2:5b:25:c3:03:de:d8:f3:3f:03:
11:69:e1:93:7d:54:9b:76:5d:6b:da:2c:30:8f:e5:83:0c:d1:
66:7b:5c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 15:04:59 2026 by rpki-client