Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft
File: QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft (raw, json)
Hash identifier: gW93HK4j0/9QMLSj/4AU/LTDQ6BkB4Vdhs49KLBpF3M=
Subject key identifier: A9:5B:AC:95:9F:E3:FC:DE:48:D8:43:8F:0A:B7:D5:63:2B:A0:CA:27
Authority key identifier: 42:F9:A9:69:52:77:7F:10:74:33:83:03:EC:B6:50:25:C4:E2:B8:B5
Certificate issuer: /CN=42f9a96952777f1074338303ecb65025c4e2b8b5
Certificate serial: 019FA1F2031153BFB640593A29417D216600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft
Manifest number: 0B0B
Signing time: Mon 27 Jul 2026 05:00:20 +0000
Manifest this update: Mon 27 Jul 2026 05:00:20 +0000
Manifest next update: Tue 28 Jul 2026 05:00:20 +0000
Files and hashes: 1: 65LDhkWiOsePvay_daaS19w9IrU.roa (hash: RDR1Bk3idKoyL2q+z5ptGPj51Bc2Dh1ei6t9SnrsQKk=)
2: QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl (hash: pGfb49mwTRaLZFpXcxAN4c+FRXaw9jP5coCL00WbXjI=)
3: VwG9H-H3BKxa182EuYMKOfW-pDY.asa (hash: VucV4WG0cObsmaD2Gcwxp4U13EVpmlKVeoHtemnYiqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:03:11:53:bf:b6:40:59:3a:29:41:7d:21:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f9a96952777f1074338303ecb65025c4e2b8b5
Validity
Not Before: Jul 27 05:00:20 2026 GMT
Not After : Jul 28 05:00:20 2026 GMT
Subject: CN=a95bac959fe3fcde48d8438f0ab7d5632ba0ca27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ac:85:cf:10:cd:c0:c1:f1:de:7b:1f:a4:0d:
c9:f5:26:3e:6e:55:a5:8b:d6:b1:45:e8:60:c5:91:
83:d5:f5:7a:0c:02:a6:b1:d2:a7:2c:5d:f1:ff:f1:
b8:8b:85:e3:87:49:9e:fa:a0:a0:4e:2a:7b:24:51:
a4:5a:72:53:21:78:8f:62:46:04:33:a2:8c:31:8a:
bb:3a:26:9f:91:0c:d8:b8:cc:be:f5:cb:9a:60:4b:
28:50:40:40:6b:91:10:11:48:cb:95:31:4c:e7:8d:
b0:a9:7c:b5:68:67:7d:4e:cc:dd:53:9d:f9:72:d1:
15:ef:2c:a0:0d:a3:ab:27:9c:65:45:f5:32:29:e6:
99:0f:ef:4d:1d:7e:c5:f5:75:2a:43:d4:a1:9d:db:
67:68:43:50:9e:21:b5:7b:bd:3d:5c:fb:7d:d2:83:
63:b2:d8:f7:e6:d2:89:e4:91:4a:5e:f2:31:38:3f:
e0:af:ef:e3:e3:fb:cf:25:63:83:23:5c:96:d9:aa:
4b:5f:f8:36:ab:9b:5c:63:82:36:2a:6e:38:d4:15:
85:d5:d4:c9:e8:4a:bf:d8:22:36:64:88:2e:78:60:
87:c9:55:3e:50:6e:d2:b4:28:69:16:05:49:98:13:
c7:c2:72:44:24:81:05:0f:b5:99:f4:5e:6b:9d:6c:
7e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5B:AC:95:9F:E3:FC:DE:48:D8:43:8F:0A:B7:D5:63:2B:A0:CA:27
X509v3 Authority Key Identifier:
keyid:42:F9:A9:69:52:77:7F:10:74:33:83:03:EC:B6:50:25:C4:E2:B8:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:de:d4:b9:e9:0c:e6:38:7c:25:1a:d6:15:ea:d6:42:e7:90:
d0:df:b2:7c:9a:77:0d:c1:90:21:12:94:10:c8:d7:61:aa:9b:
c4:04:59:6a:a5:e2:3b:60:6a:a5:90:eb:43:a2:c7:bd:79:0c:
a6:20:7d:24:64:ef:1c:cd:db:76:93:c0:c2:c9:c2:94:ce:e0:
8e:48:d9:4f:1f:fa:2c:9d:59:76:23:4f:55:a1:8e:79:44:66:
df:6f:5a:23:13:57:58:16:cc:69:6b:c9:7e:6d:cb:7d:84:14:
9c:7e:62:75:b3:9a:30:7c:13:60:00:a2:f4:89:3f:b8:e5:e2:
ba:27:bc:fc:2d:c2:8f:63:c2:f0:11:0f:33:58:8b:87:77:3f:
82:fa:2c:b2:e2:65:bc:13:d1:1c:99:a7:dc:d4:ca:bb:ad:47:
43:59:c4:d4:c5:99:62:22:86:e4:4b:1b:1b:22:22:bb:f3:28:
f5:6e:65:b4:80:7d:74:1a:b5:90:af:fa:64:50:a3:7c:f9:99:
df:2c:37:db:10:53:c5:46:7f:eb:f9:c1:90:0c:99:c7:f9:2e:
83:23:60:04:26:1f:48:9e:5c:12:f2:22:65:cf:7f:59:a2:2c:
64:c6:be:43:70:45:4d:65:c0:16:56:23:11:00:80:9b:3c:b5:
a0:41:29:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:38:50 2026 by rpki-client