Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
File: QHznj0rDupAqDDjcAaDF8hJlGbA.mft (raw, json)
Hash identifier: 4wqysvGvhwV5xNO26QBFCVPUgV9h0T+g8wSqo4AppUY=
Subject key identifier: E6:01:65:CE:ED:E4:42:70:83:77:83:7A:EB:81:E2:37:0F:46:3E:C3
Authority key identifier: 40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0
Certificate issuer: /CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0
Certificate serial: 019F87201B135DF81D6EEA9E8A993FFE18A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
Manifest number: 0E2F
Signing time: Wed 22 Jul 2026 00:00:55 +0000
Manifest this update: Wed 22 Jul 2026 00:00:55 +0000
Manifest next update: Thu 23 Jul 2026 00:00:55 +0000
Files and hashes: 1: QHznj0rDupAqDDjcAaDF8hJlGbA.crl (hash: cIu2DD56G2HOs6MeOJcgjxqIjEj3yqIa0etR9wbzoJI=)
2: UKN4qXdB5emZZX9TzM0PF4jJuRs.roa (hash: Y842Sm+wv4FkMHDbdNeBmo19SEMhJtIByCHRBpFd6qo=)
3: qOyavHaQUzWIgFJKhwDzN8qp-NU.roa (hash: 6+GcU7ai/o4JeNdvfA796blKNzslNJ8s8dxyOTcoPxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:87:20:1b:13:5d:f8:1d:6e:ea:9e:8a:99:3f:fe:18:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0
Validity
Not Before: Jul 22 00:00:55 2026 GMT
Not After : Jul 23 00:00:55 2026 GMT
Subject: CN=e60165ceede442708377837aeb81e2370f463ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:68:b8:69:23:d1:d1:ac:98:eb:1e:7f:b7:a1:
a4:fa:af:62:ee:0b:2c:a3:42:83:a7:e9:62:c8:92:
37:41:20:ef:c5:0e:c6:ec:bf:57:5e:38:0e:5a:5c:
10:b1:f8:0a:cd:bc:fd:12:18:8b:3b:7d:4f:da:ab:
0d:da:8d:21:c4:d9:f8:97:96:b4:64:15:79:44:d6:
1b:95:b4:d5:71:55:e6:fd:13:77:42:3a:90:fd:7a:
38:00:ee:b3:e5:d0:f6:4f:ff:ea:71:9f:31:c9:2f:
06:84:f5:5d:dc:33:f9:33:e0:2e:8b:ce:b2:23:a0:
8f:c1:98:75:b0:ba:80:7b:fd:6c:dc:93:48:1c:7c:
0e:c1:ba:51:6a:bd:7e:d8:a6:20:55:c0:95:2e:cf:
e3:68:35:c5:1c:a2:8f:a5:fb:ee:4d:ab:ff:8d:fb:
94:0b:6b:ce:cd:ed:b1:0c:3c:2e:56:f4:76:63:92:
ca:fb:28:53:5c:8c:8d:24:f0:18:c5:4f:94:71:4b:
b1:8e:bb:d4:6c:76:3a:8d:c5:81:f0:57:1e:d6:ca:
95:b0:c6:a6:c7:a4:65:00:dc:08:7f:7c:9b:db:0e:
87:9c:4b:a6:f2:64:90:38:f6:ce:a3:10:25:6c:c7:
2d:8f:79:87:5f:d3:c0:ce:03:24:e9:be:bd:2b:d9:
62:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:01:65:CE:ED:E4:42:70:83:77:83:7A:EB:81:E2:37:0F:46:3E:C3
X509v3 Authority Key Identifier:
keyid:40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:9d:b9:48:db:ca:22:38:38:4a:eb:77:e0:c4:bb:10:10:4c:
c3:8b:71:e2:6c:7e:65:ae:20:9b:5d:31:74:a7:af:1c:65:95:
4c:ae:80:82:9f:13:5a:98:12:6b:f4:cf:78:51:c5:75:d7:57:
4c:38:94:57:ab:8f:e7:d8:6d:db:44:83:0d:0d:4c:d3:83:b6:
11:58:92:b8:ee:90:23:21:72:6a:ed:3d:aa:30:e1:10:50:5d:
cc:2d:aa:6b:54:74:65:21:cf:14:79:94:c2:09:d4:fa:66:ec:
d0:98:c5:9c:2e:80:42:f0:9b:2c:7d:e3:ea:68:ce:c7:68:9e:
07:22:c2:00:2e:63:66:ce:40:9a:81:6e:02:16:3c:bb:02:d0:
f2:e2:9d:b4:32:02:dc:c7:3c:f6:6f:7f:a2:b4:df:a9:df:c4:
73:31:8c:e5:ed:74:24:87:ea:27:00:60:2c:16:c8:3f:f4:9a:
68:e1:89:0f:e2:a5:8c:0c:4a:59:17:e1:02:e1:d6:91:d2:45:
ae:f4:94:5b:43:53:dc:8b:0a:ce:c3:bd:74:f6:e7:03:1c:9e:
b1:2e:07:6c:37:98:1e:d2:d3:65:b1:18:f0:2c:42:cb:20:2c:
35:39:fe:05:ae:2f:d8:ca:09:d0:2a:a8:c2:52:f1:2f:c6:1d:
33:7b:56:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 03:06:19 2026 by rpki-client