Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
File: QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft (raw, json)
Hash identifier: VnAfErfGHkaVd7RPCdr9E7/0vQdnlYx2yBB0BD2OYAY=
Subject key identifier: 1B:91:21:D1:03:63:26:F4:D2:4C:D9:FA:31:74:FE:A5:E3:E2:C5:BD
Authority key identifier: 41:49:15:CD:D3:22:BF:E3:94:72:53:69:55:46:4A:5F:F6:71:17:C3
Certificate issuer: /CN=414915cdd322bfe39472536955464a5ff67117c3
Certificate serial: 019FA260C87241ABA09468334DBAC963DC7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
Manifest number: 09DD
Signing time: Mon 27 Jul 2026 07:01:19 +0000
Manifest this update: Mon 27 Jul 2026 07:01:19 +0000
Manifest next update: Tue 28 Jul 2026 07:01:19 +0000
Files and hashes: 1: D-OhIFYDtU_Cd-e4wB1EEbfz2ZY.roa (hash: NEAvke3XuRiHlogwVc4RcyWVQUznukeff4gqiKDQn+U=)
2: QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl (hash: PT8vEF+EgSde7cRJeDLOKu9KMDiAThIhex1EJTQwzXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:c8:72:41:ab:a0:94:68:33:4d:ba:c9:63:dc:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=414915cdd322bfe39472536955464a5ff67117c3
Validity
Not Before: Jul 27 07:01:19 2026 GMT
Not After : Jul 28 07:01:19 2026 GMT
Subject: CN=1b9121d1036326f4d24cd9fa3174fea5e3e2c5bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c0:15:b0:e2:9d:be:f9:e9:70:e7:fe:ea:fa:
53:4d:ae:ea:9e:8f:97:c9:c8:9f:41:2e:51:ed:31:
2e:65:62:2b:b2:37:b0:41:a9:3f:3a:67:80:35:b1:
4e:c5:98:d4:e6:be:65:41:00:10:8c:7a:48:d0:a6:
5d:05:12:80:58:b9:81:9c:94:88:01:0f:16:aa:34:
27:5f:b5:60:62:07:2e:d5:6c:72:24:e1:54:42:9c:
a6:cd:bc:62:37:2f:94:dc:79:87:e9:27:9a:af:e4:
a4:a6:8c:c9:80:3e:38:78:b6:3a:e1:f8:ad:16:9d:
41:7f:1a:ea:df:5a:f1:b3:24:e5:82:3b:7c:2f:62:
dc:90:6c:2a:7b:d5:3b:40:37:93:1d:60:47:ba:e5:
f4:16:35:b0:8c:ba:96:e9:c1:b0:a3:6b:a0:99:b6:
06:26:44:54:6f:ac:80:ca:60:bb:95:c0:f9:a9:82:
c5:75:88:b8:64:a3:ff:9b:72:74:dc:bc:54:65:34:
7e:76:b6:1f:10:61:26:99:72:72:57:9b:47:67:63:
44:85:8f:6c:53:f5:f7:42:37:b8:8e:84:fd:e9:08:
4a:a7:87:be:e2:dd:bd:88:19:7b:5b:22:4d:ea:3e:
3f:fe:f8:b8:b4:67:5a:f8:8c:76:c2:f3:90:76:0e:
f6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:91:21:D1:03:63:26:F4:D2:4C:D9:FA:31:74:FE:A5:E3:E2:C5:BD
X509v3 Authority Key Identifier:
keyid:41:49:15:CD:D3:22:BF:E3:94:72:53:69:55:46:4A:5F:F6:71:17:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:bf:8b:17:17:78:e7:44:48:9a:37:d8:bf:a4:3c:60:c7:2e:
71:98:f4:60:a0:09:de:a4:b4:40:e5:bc:d5:d0:4b:17:81:7c:
53:74:6c:4d:cd:a9:3b:29:eb:86:a7:6b:05:c4:2a:c3:06:7a:
17:26:b6:fa:fb:b5:fb:37:1a:1c:00:60:c4:cb:60:da:19:98:
14:a3:fc:20:0d:37:be:0c:13:e0:5e:15:ab:19:93:1d:f2:39:
70:3d:7b:4d:ae:8d:46:0d:57:b5:ce:f4:c8:21:14:86:3a:ae:
1a:6a:86:e0:1a:38:1c:ea:d9:fb:0b:39:cc:4f:41:28:ce:7a:
88:45:f5:b3:84:3b:06:ec:72:ea:0f:4b:d6:87:17:51:90:cf:
33:0d:15:77:27:e8:9c:bb:7d:9f:79:87:a8:f9:a9:3f:2d:96:
7f:a3:fc:a6:12:b1:ac:b8:87:3b:d8:cd:e8:0f:73:96:9a:fb:
83:38:8a:ec:fe:b6:e9:43:ac:e5:9d:52:c4:59:d2:4b:fa:19:
66:84:61:2d:4c:26:bd:96:c2:04:ff:0e:40:16:96:11:75:0c:
99:ef:13:6e:61:81:39:ae:25:c5:65:87:26:0b:09:73:3f:f0:
b8:f1:1c:29:87:03:fc:ca:06:ef:13:00:f7:aa:35:60:df:eb:
f2:5a:49:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:04:58 2026 by rpki-client