Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
File: Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft (raw, json)
Hash identifier: ZYjAJIpUTLQEM9O/H5INIy+k6fd8o9yoHubZztGOpJE=
Subject key identifier: 08:D4:D9:50:0B:F5:54:01:BF:66:32:89:30:1B:B9:38:6F:38:1A:5B
Authority key identifier: 42:5B:F4:37:5F:17:A0:35:70:19:69:03:01:F9:41:93:24:FF:7D:44
Certificate issuer: /CN=425bf4375f17a0357019690301f9419324ff7d44
Certificate serial: 019FA2293878203133F6DE0145A6E69C8137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
Manifest number: 1966
Signing time: Mon 27 Jul 2026 06:00:38 +0000
Manifest this update: Mon 27 Jul 2026 06:00:38 +0000
Manifest next update: Tue 28 Jul 2026 06:00:38 +0000
Files and hashes: 1: Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl (hash: Dm8A3FXJJHY6FRW+m5s449EtTAPYYHYBtGeCr9JLmdw=)
2: ekViUfVjeX96GOzSolN__8-4A4k.roa (hash: YyzGmywtQBLblhHE3rDDlveGwps6u/nY6w46Xdc6qtY=)
3: meH9o9i7-j2R-Vcd-oY44f90eGc.roa (hash: jMkC1VRwXkD+Vzq7AX9qpzMXsW5ynXfkYRel0vHaW90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:38:78:20:31:33:f6:de:01:45:a6:e6:9c:81:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=425bf4375f17a0357019690301f9419324ff7d44
Validity
Not Before: Jul 27 06:00:38 2026 GMT
Not After : Jul 28 06:00:38 2026 GMT
Subject: CN=08d4d9500bf55401bf663289301bb9386f381a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ab:2a:95:b5:9d:28:ef:10:1b:28:4d:d2:b3:
64:3f:5d:99:72:cc:0f:0f:7b:84:87:77:60:4c:b7:
34:fd:4b:e1:83:7c:90:1e:9a:05:52:01:6d:63:68:
0c:12:8e:26:7d:4b:e3:10:49:f8:4e:9e:15:26:7c:
db:bc:3a:0e:36:1c:fd:cf:5c:69:16:60:de:11:b8:
90:49:f0:48:42:58:24:fe:af:2f:00:5a:12:7a:51:
73:d4:4a:cb:25:5f:32:79:a6:be:bf:27:f6:42:1f:
0b:4b:23:9e:73:c6:be:93:b0:ef:51:b8:ad:5a:7b:
b6:bb:89:1c:c8:c1:6c:7f:bb:af:d8:41:90:2d:f7:
cc:98:17:2d:78:a0:d8:b4:49:94:57:5c:25:31:0e:
0f:4f:c0:49:6c:c2:f5:f4:f9:0a:d3:5f:2a:8e:55:
db:0c:5d:7f:a0:9f:7b:2f:87:ce:c2:66:9e:6f:ad:
77:3b:ba:58:9f:ed:de:3f:07:58:cd:05:58:11:bc:
8d:c3:31:c0:11:fb:00:a7:eb:ad:2d:66:5a:ec:d1:
bc:f7:0b:31:58:3a:64:8d:7a:8f:34:de:89:e6:37:
e0:bb:fb:41:81:3a:bc:cf:45:0d:3e:cf:b4:cc:ad:
73:71:44:ac:e2:a6:6a:c8:07:73:db:c8:01:a0:92:
93:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D4:D9:50:0B:F5:54:01:BF:66:32:89:30:1B:B9:38:6F:38:1A:5B
X509v3 Authority Key Identifier:
keyid:42:5B:F4:37:5F:17:A0:35:70:19:69:03:01:F9:41:93:24:FF:7D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:7d:9a:f7:82:e6:43:fa:62:9b:92:cd:38:e9:3d:54:ff:a2:
6b:1c:46:aa:0c:a5:7c:9b:6a:cf:32:cd:1f:da:61:b7:86:ba:
ff:8c:30:60:ed:8d:76:4c:89:0b:f6:47:d6:ab:16:42:f3:7a:
68:34:52:41:16:1c:78:fc:91:cb:df:12:ca:db:b4:c6:e2:b4:
6e:ed:e3:6a:7c:56:44:58:10:1e:ce:bf:13:db:f4:f6:e7:62:
b0:03:f4:e8:84:99:d1:11:12:19:8c:b5:5a:17:c8:43:90:c2:
5d:43:63:4f:3d:9f:c1:44:5d:16:20:69:f9:78:5e:3d:6e:5d:
ce:8d:00:64:48:50:4c:c7:c1:21:0f:e9:85:86:38:bf:c8:2c:
a5:4d:ac:95:e1:ee:2f:33:f0:9d:24:7e:ed:5f:dd:88:d4:c8:
40:bc:e4:4a:fc:48:8a:c7:3f:6e:74:91:77:81:f7:6c:d8:04:
1c:ab:7d:67:86:1b:91:c0:0e:85:48:f9:b4:29:63:f8:67:a7:
61:a1:95:5f:ec:ee:be:60:cf:02:74:5f:cf:98:42:62:72:9b:
1d:62:3c:46:51:bd:64:9e:42:e7:08:3c:a3:33:79:b7:00:89:
07:e1:5c:b0:d2:2d:48:a2:2c:c4:21:41:e9:e0:43:b3:97:06:
d0:a8:c0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:03:43 2026 by rpki-client