Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft
File: QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft (raw, json)
Hash identifier: F0DtLSz/c1p7yWLyHZRUgNq+wzoA+twDkvB4zeGSkRE=
Subject key identifier: C2:E5:EE:05:4A:52:40:11:D6:A5:36:FC:2D:D9:0B:E7:25:79:A0:17
Authority key identifier: 43:32:4F:25:1B:68:FF:54:63:F6:B5:35:07:F6:6A:4B:03:4D:C0:E5
Certificate issuer: /CN=43324f251b68ff5463f6b53507f66a4b034dc0e5
Certificate serial: 019F9F287500B1908194D36A87F70BF7811E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft
Manifest number: 19C9
Signing time: Sun 26 Jul 2026 16:00:56 +0000
Manifest this update: Sun 26 Jul 2026 16:00:56 +0000
Manifest next update: Mon 27 Jul 2026 16:00:56 +0000
Files and hashes: 1: QzJPJRto_1Rj9rU1B_ZqSwNNwOU.crl (hash: xykJMRA8nEsTud5sQhAwvsiwSEInoKkNRc6FF/weo3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:28:75:00:b1:90:81:94:d3:6a:87:f7:0b:f7:81:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43324f251b68ff5463f6b53507f66a4b034dc0e5
Validity
Not Before: Jul 26 16:00:56 2026 GMT
Not After : Jul 27 16:00:56 2026 GMT
Subject: CN=c2e5ee054a524011d6a536fc2dd90be72579a017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:24:02:cb:40:ae:09:85:f7:0b:9d:a5:6f:2e:
16:c0:58:ca:51:48:b4:ef:49:b8:57:8e:24:dc:d5:
33:e3:fa:2a:ab:0d:9b:7f:27:12:ed:16:a6:93:c6:
92:14:00:dd:13:51:de:1f:f2:b8:b3:29:d8:d6:1f:
1b:81:16:d9:2e:53:30:37:8a:6f:b0:1a:ee:5c:15:
a6:73:70:9b:19:1a:4c:6b:b4:03:f5:64:54:48:c9:
31:62:8b:e7:e1:75:aa:48:d3:65:71:a0:5c:27:f9:
6c:64:9a:ee:a1:f3:a1:ba:95:26:3f:dd:39:c2:5a:
9f:b5:d8:82:99:af:2d:fc:b1:c2:dd:1b:86:22:30:
24:9c:6e:fa:a9:c9:38:50:33:85:c4:99:c2:8d:2f:
ad:c1:0d:a6:cf:6b:05:11:47:3e:79:b8:85:54:a9:
2a:76:77:4c:e1:84:03:53:8f:45:6e:f7:89:0d:e0:
11:f9:5c:fb:3d:0b:76:94:33:5b:6b:c5:a8:65:c2:
fb:42:82:62:bf:d6:71:01:b5:c5:e8:be:72:31:3b:
48:6c:53:d1:b0:d2:6a:a3:82:0e:49:d3:d2:76:8d:
4c:25:de:d0:38:d5:85:9c:60:89:7f:c8:8b:e6:94:
f4:64:e2:36:99:43:b8:66:b3:6e:24:2f:a4:b7:89:
78:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E5:EE:05:4A:52:40:11:D6:A5:36:FC:2D:D9:0B:E7:25:79:A0:17
X509v3 Authority Key Identifier:
keyid:43:32:4F:25:1B:68:FF:54:63:F6:B5:35:07:F6:6A:4B:03:4D:C0:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:01:a7:3d:2e:f9:93:6c:39:fa:15:66:dc:bb:ba:25:06:7f:
88:1d:c4:06:50:d7:2f:61:db:ab:f9:17:0c:78:59:14:7b:d1:
29:c2:56:b3:b0:bd:76:8c:17:0e:91:1a:2e:b5:46:9c:ee:2e:
fd:b9:55:eb:24:ad:5f:df:80:c4:ed:41:5c:0c:ca:23:57:01:
10:0c:8c:a8:5a:fb:b4:f6:85:86:b6:50:8d:ee:41:8b:19:52:
eb:6b:ff:0f:00:be:80:3a:17:52:67:9d:07:c3:6a:f6:90:cf:
40:e0:cc:f2:db:19:59:9b:7f:dc:69:72:43:ff:f5:6a:23:d5:
05:2d:53:96:12:1c:45:c5:17:7e:71:0a:c7:94:17:cc:9c:6c:
f8:ae:d6:e5:fd:68:3d:7a:9e:64:67:78:ca:31:9c:94:94:f2:
22:09:34:58:aa:cd:5a:61:c9:6e:4c:b0:9e:c7:9b:a9:e1:39:
ba:af:d7:65:41:85:ff:1b:e8:33:68:6b:6d:f4:af:20:08:38:
81:de:67:c4:21:9d:4b:f4:fe:72:ac:a0:83:2b:3b:59:9d:b7:
5a:d1:ba:9d:69:fa:6f:a3:fa:cd:66:dc:60:a3:f1:dd:f1:e0:
6c:fc:c5:fb:5f:39:01:38:90:dd:ec:33:80:08:9c:0d:f3:3c:
de:92:1b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 22:35:48 2026 by rpki-client