Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a7d7b3-74da-4063-871c-5e5c668deec5/1/QkvsoBqR5ElnbCSXkTLqwzGDP1Q.mft
File: QkvsoBqR5ElnbCSXkTLqwzGDP1Q.mft (raw, json)
Hash identifier: NQXTs0biD1yJRKG24ixXWynM7KFm+CqiMNBqJQ+i8EU=
Subject key identifier: 3E:B3:F4:78:DE:91:60:2F:2E:E0:EF:02:56:A6:44:51:68:8C:47:09
Authority key identifier: 42:4B:EC:A0:1A:91:E4:49:67:6C:24:97:91:32:EA:C3:31:83:3F:54
Certificate issuer: /CN=424beca01a91e449676c24979132eac331833f54
Certificate serial: 019FD4CD92A48E112B8B69FD2225F43716C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QkvsoBqR5ElnbCSXkTLqwzGDP1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a7d7b3-74da-4063-871c-5e5c668deec5/1/QkvsoBqR5ElnbCSXkTLqwzGDP1Q.mft
Manifest number: 3C
Signing time: Thu 06 Aug 2026 02:01:09 +0000
Manifest this update: Thu 06 Aug 2026 02:01:09 +0000
Manifest next update: Fri 07 Aug 2026 02:01:09 +0000
Files and hashes: 1: QkvsoBqR5ElnbCSXkTLqwzGDP1Q.crl (hash: eAg0tPcuydlDtBcAkqeOv2Csz1Fn9C1RCYxBkENbyTQ=)
2: de2C8qkGD2C8WyY4VZXQCLj4xeA.roa (hash: Z2unCzdVebpB8G2PHQLt6XCekXAlV21Yon5IAjnmYi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a7d7b3-74da-4063-871c-5e5c668deec5/1/QkvsoBqR5ElnbCSXkTLqwzGDP1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a7d7b3-74da-4063-871c-5e5c668deec5/1/QkvsoBqR5ElnbCSXkTLqwzGDP1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QkvsoBqR5ElnbCSXkTLqwzGDP1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d4:cd:92:a4:8e:11:2b:8b:69:fd:22:25:f4:37:16:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424beca01a91e449676c24979132eac331833f54
Validity
Not Before: Aug 6 02:01:09 2026 GMT
Not After : Aug 7 02:01:09 2026 GMT
Subject: CN=3eb3f478de91602f2ee0ef0256a64451688c4709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:04:6c:ba:d8:29:1a:e7:ef:cd:5e:a3:a5:ef:
24:f6:24:f4:e5:b0:34:55:2c:17:9c:33:e9:18:01:
5a:af:c9:f0:b2:80:fd:3d:c8:9d:62:f2:e9:72:52:
9f:6b:21:50:c2:3f:02:ea:ae:f7:c4:a5:c6:4c:b6:
e4:8a:a8:2d:ab:bd:b0:b1:a3:ba:5a:54:e6:4c:0a:
d4:29:80:69:56:ce:f3:17:97:65:61:94:1f:38:f4:
46:ef:82:51:83:00:73:f3:df:3d:3f:e6:a9:a6:3e:
62:5a:7c:2d:63:bb:e9:93:59:ae:c1:0b:75:aa:e4:
31:36:85:8c:84:0c:d2:9d:fc:fb:29:1e:bd:d7:fc:
40:fe:15:1f:8e:c3:e5:33:9d:99:c4:0a:b2:b8:97:
ca:cf:32:8f:5b:f1:b3:13:ac:f7:9f:f2:e4:d5:c2:
20:e7:b9:2f:85:6a:6d:a6:40:b1:ed:ae:99:a0:1d:
a9:1a:88:3b:13:f6:6d:b5:3d:b9:7d:8f:04:aa:01:
a7:0b:1c:b8:b6:b1:65:aa:38:56:c5:50:00:f2:24:
fb:54:df:c4:87:73:d5:5c:68:49:ae:c9:61:ff:5d:
cf:7b:db:6a:01:4a:d0:1f:a2:a9:fd:1c:d3:67:97:
0c:9a:e7:df:4b:5c:7c:ef:c5:8a:0e:0d:c7:08:a2:
b5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B3:F4:78:DE:91:60:2F:2E:E0:EF:02:56:A6:44:51:68:8C:47:09
X509v3 Authority Key Identifier:
keyid:42:4B:EC:A0:1A:91:E4:49:67:6C:24:97:91:32:EA:C3:31:83:3F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QkvsoBqR5ElnbCSXkTLqwzGDP1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a7d7b3-74da-4063-871c-5e5c668deec5/1/QkvsoBqR5ElnbCSXkTLqwzGDP1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a7d7b3-74da-4063-871c-5e5c668deec5/1/QkvsoBqR5ElnbCSXkTLqwzGDP1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:29:65:89:b0:03:b8:f8:cd:76:43:ba:f9:07:d5:b7:dd:f0:
9c:16:7b:54:84:5e:39:18:65:26:1a:41:fc:5f:c6:86:6f:40:
54:30:52:14:69:5e:a5:09:4e:f5:51:39:4c:47:84:70:f8:7a:
61:4d:25:e4:99:15:6d:06:65:ee:d4:4d:c0:02:b2:02:34:4b:
7a:f2:83:ce:11:32:f1:ca:2b:66:38:79:a7:74:6d:63:0e:30:
4e:1c:da:ed:c0:0d:e7:a2:6a:da:ba:3a:d1:9b:81:d7:62:2d:
5d:30:5c:fe:92:72:e2:27:1c:ac:93:c6:34:28:b7:87:a5:a2:
ae:4d:b7:11:fe:db:ba:36:d7:7e:fd:52:cd:da:96:da:27:9b:
72:15:cb:8d:9e:fc:04:88:05:7c:4c:7d:6c:eb:66:1c:1f:ef:
7a:1a:8b:c4:93:48:ee:49:9a:e8:80:5a:33:b7:90:e6:56:00:
89:27:17:41:f4:e0:d7:ab:bb:37:e8:4a:21:81:60:d5:e2:8c:
ca:e9:46:6d:dd:9b:ec:7e:49:c5:8e:a5:70:6c:13:63:26:71:
b2:68:89:f9:28:11:9b:94:f6:14:54:6d:12:81:23:33:e6:d2:
9f:a0:2c:e3:c5:e1:83:e6:7c:08:30:b7:67:70:1d:bb:79:9a:
57:fd:0a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 07:21:00 2026 by rpki-client