Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
File: QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft (raw, json)
Hash identifier: a4BqfTXaVIfp4CVtH327IOpOoIMqkbENPQ/H4vj+5Q0=
Subject key identifier: D6:87:4B:00:6B:60:DA:D2:86:53:65:5D:52:24:23:75:0D:5E:73:6C
Authority key identifier: 43:1C:57:E1:92:1D:31:A3:4A:EB:D1:2E:50:7A:13:6F:E0:45:98:C6
Certificate issuer: /CN=431c57e1921d31a34aebd12e507a136fe04598c6
Certificate serial: 019FA0A8BCD34E69CE108D0A0589993B66E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
Manifest number: 078B
Signing time: Sun 26 Jul 2026 23:00:40 +0000
Manifest this update: Sun 26 Jul 2026 23:00:40 +0000
Manifest next update: Mon 27 Jul 2026 23:00:40 +0000
Files and hashes: 1: QxxX4ZIdMaNK69EuUHoTb-BFmMY.crl (hash: OC8R1ZER8W/CD9RxFH3WTcATy5RLK/Yhpn1Y4w6emv0=)
2: mIEKfqcwzKGnUqM9s4OdPs7YrbA.roa (hash: buVxIPz10EIVfwpYwh+P1ZYqWF3K+n7bUAR0sR0jGqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a8:bc:d3:4e:69:ce:10:8d:0a:05:89:99:3b:66:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=431c57e1921d31a34aebd12e507a136fe04598c6
Validity
Not Before: Jul 26 23:00:40 2026 GMT
Not After : Jul 27 23:00:40 2026 GMT
Subject: CN=d6874b006b60dad28653655d522423750d5e736c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:26:4d:80:27:b6:7d:8c:22:97:45:7c:ca:0a:
b3:b0:8c:51:64:2e:50:57:f6:ad:63:1c:9b:96:2c:
4c:eb:31:1e:7f:2f:63:41:71:93:f3:08:76:ae:1e:
7a:8c:d8:95:5b:6f:33:81:d0:be:85:51:6e:11:4d:
df:0b:b1:b1:f5:41:e8:f9:87:e7:be:1b:1e:6b:6e:
e2:18:9a:a2:33:d9:0c:68:d7:08:e8:87:e2:30:47:
1e:26:ab:3a:85:67:46:22:97:69:03:74:8a:3a:49:
fc:38:44:15:c0:a4:fa:aa:81:fb:c6:89:fe:68:87:
2b:b6:d6:28:dd:27:2f:e4:77:21:4f:f3:af:cd:e8:
03:c3:ba:7b:c6:73:18:71:35:2c:79:84:bf:b3:a4:
ca:b8:7c:30:ba:9a:d9:f9:ca:08:07:93:9f:28:0d:
5d:6e:a8:03:6d:03:ca:d4:4c:82:85:54:ad:50:02:
69:93:c7:99:d2:65:69:8c:4e:1c:a7:70:f8:d6:2c:
16:fd:2e:90:ad:31:96:9f:a8:67:61:2f:6f:54:d5:
94:fd:11:84:0e:a3:62:b2:94:ec:23:7b:11:e1:60:
e1:01:7d:28:26:a1:43:cf:0e:18:de:76:18:21:2d:
3e:f9:b1:41:1b:d6:14:7f:00:7e:25:89:0a:13:ed:
3c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:87:4B:00:6B:60:DA:D2:86:53:65:5D:52:24:23:75:0D:5E:73:6C
X509v3 Authority Key Identifier:
keyid:43:1C:57:E1:92:1D:31:A3:4A:EB:D1:2E:50:7A:13:6F:E0:45:98:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:a4:29:87:4d:5c:ec:d3:67:5c:d1:2e:c0:8d:d7:f6:c7:8a:
37:9d:29:47:95:0b:02:4b:85:1e:9e:a4:73:a6:f6:e7:9e:74:
b4:05:29:65:81:a3:97:52:1e:20:46:72:80:c6:26:3a:48:af:
32:f2:9c:dc:c9:7f:09:1f:05:41:7a:7c:50:89:9b:cb:a3:82:
92:37:2a:72:83:66:82:1f:09:68:c9:85:e8:e4:da:1f:a1:43:
e2:9f:d4:d6:cf:7d:7a:0f:92:35:5d:ce:d5:b4:54:a3:51:9a:
c8:97:65:2b:0a:e3:7d:a8:ba:45:6e:e4:7d:6d:8d:50:03:14:
8a:51:ef:78:58:00:93:9f:82:72:27:f6:ae:00:b5:25:91:5b:
bf:f6:98:d8:ad:1e:d2:a1:2c:a8:2c:72:f2:e9:05:54:f8:a3:
fc:2b:79:4a:c8:73:22:59:8d:4d:5e:4c:32:f4:aa:65:cf:1a:
82:0a:5b:a5:b3:77:37:f2:f0:24:e9:a9:65:0c:00:3d:94:65:
ce:4f:f7:1c:81:47:be:6e:55:de:0d:1a:5e:43:be:bd:46:d4:
6e:c4:d8:20:fe:84:b3:c3:72:6b:03:9c:83:ff:a7:fb:d6:f1:
4e:4a:6f:4b:e0:90:9d:fa:69:d9:fd:20:bf:e6:ce:97:3b:c1:
c0:82:61:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:29:38 2026 by rpki-client