Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft
File: QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft (raw, json)
Hash identifier: L/w1GP6mJp1FVU8FyjBwO26cnqZe7D4hlo7/9w4VNF4=
Subject key identifier: 2E:00:DE:A8:A3:B5:39:42:BF:14:9C:39:5B:C0:A0:AE:AD:3A:0C:82
Authority key identifier: 43:09:59:93:80:C5:C5:9D:C0:66:84:92:0B:69:4C:3E:A6:D3:08:A6
Certificate issuer: /CN=4309599380c5c59dc06684920b694c3ea6d308a6
Certificate serial: 019FA3730A483DC45D43020B2BFB5FE28487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft
Manifest number: 0951
Signing time: Mon 27 Jul 2026 12:00:53 +0000
Manifest this update: Mon 27 Jul 2026 12:00:53 +0000
Manifest next update: Tue 28 Jul 2026 12:00:53 +0000
Files and hashes: 1: QwlZk4DFxZ3AZoSSC2lMPqbTCKY.crl (hash: NHpRhLuEsBN/N1HbaYGVA4we7HMYeQ/tIUfh5YBsfNs=)
2: WB6JPDHCA8x04ovSojhszaBWT9g.roa (hash: QAX0HjBycS9/LbaCCjqJQ2UJOnAIxeZiVHraC3/UYyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:73:0a:48:3d:c4:5d:43:02:0b:2b:fb:5f:e2:84:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4309599380c5c59dc06684920b694c3ea6d308a6
Validity
Not Before: Jul 27 12:00:53 2026 GMT
Not After : Jul 28 12:00:53 2026 GMT
Subject: CN=2e00dea8a3b53942bf149c395bc0a0aead3a0c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9c:09:ec:16:bb:c5:ff:cf:35:76:86:d7:57:
b0:d4:4f:90:b5:21:fa:82:f8:73:d4:f0:bb:0e:03:
c5:84:e6:6f:d9:70:16:f2:67:13:88:17:bd:9f:0b:
c1:45:55:a3:f5:1f:2c:b9:2f:89:a5:de:0f:e8:da:
21:6e:98:6e:da:12:60:f1:7b:1c:d8:2f:f5:ea:8f:
67:79:22:b5:9a:05:dd:5c:a3:41:d8:9a:bd:a9:79:
ab:5a:ea:cb:5f:91:f0:6e:ba:95:83:16:dc:17:02:
8c:bf:26:8e:ea:3d:c1:31:cc:bd:47:a7:e0:0c:85:
65:1e:c4:bd:d1:bd:c5:9f:6f:99:32:34:ae:ba:f6:
b9:c9:71:a0:e3:8d:5a:32:b3:74:cb:56:8f:cd:78:
01:83:b2:da:29:49:35:df:ba:4d:c9:9c:67:1d:ba:
a2:a7:d3:60:c6:33:5b:2c:0e:2c:37:33:04:cf:c1:
30:e6:1a:e3:2b:bb:f3:f3:a4:48:c5:a1:de:74:ee:
15:fc:f2:f3:97:40:66:b1:8d:17:f0:41:63:66:8d:
63:13:42:2c:e3:df:5c:85:a3:01:03:68:96:64:31:
46:ea:25:fe:59:88:70:09:00:68:ae:df:31:aa:06:
41:20:44:a6:af:12:5a:70:47:7c:b4:b4:d6:91:a5:
a7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:00:DE:A8:A3:B5:39:42:BF:14:9C:39:5B:C0:A0:AE:AD:3A:0C:82
X509v3 Authority Key Identifier:
keyid:43:09:59:93:80:C5:C5:9D:C0:66:84:92:0B:69:4C:3E:A6:D3:08:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:df:58:96:98:09:d3:00:5c:2c:4a:9f:fb:e5:5e:09:a9:4e:
4d:80:84:25:c8:b3:1f:4d:f2:e7:6a:c0:f5:3e:db:c5:c3:3f:
c0:05:91:80:3b:50:e9:e1:77:41:ff:2a:3c:a1:28:19:7a:c2:
6b:c3:19:a2:86:d1:9c:0c:7d:60:93:18:09:3b:99:ec:2d:2a:
3c:a5:bb:2c:24:4d:ce:2c:5b:9e:94:97:2e:a2:45:8c:9a:3c:
3f:07:50:18:0e:6c:86:8b:13:ac:6a:9f:19:4b:9d:c6:2a:8c:
4e:80:9e:9f:52:09:50:04:24:d9:69:6a:cb:45:98:96:53:a2:
cc:89:ed:28:71:47:b1:a4:50:7b:3e:d3:35:58:46:88:c1:98:
87:23:5b:87:8c:5a:4a:c1:10:06:76:4f:4f:8f:c3:3c:8d:c2:
e2:8d:ae:a3:33:28:4c:62:2f:06:b6:d5:0f:2e:12:d5:0c:5c:
e3:b6:6a:d0:69:ce:e6:7f:9b:a7:e5:d5:3d:f1:0d:4a:ac:e4:
e3:3f:fe:a9:1a:fb:0d:53:32:f1:6b:41:1a:9f:fd:1c:b4:dd:
d4:6b:6b:21:ae:78:30:25:bb:d0:ea:85:3f:9c:90:74:d7:3f:
ac:58:54:5a:b5:59:28:7e:e5:75:7d:28:8f:7f:ff:79:b7:17:
0a:28:66:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 21:02:14 2026 by rpki-client