Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
File: qlPNLFhKPcFiCLqTsNt0dzs_I74.mft (raw, json)
Hash identifier: Ftx+IrVvDId0SZcVTnX48OI8bFPvZVn2f+FMot38Jh4=
Subject key identifier: 60:A2:82:24:0C:88:19:01:44:4F:3D:E3:85:EE:12:5A:29:D3:D2:37
Authority key identifier: AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE
Certificate issuer: /CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be
Certificate serial: 019F9EF14EFEEEA0D49B09C68F7B47870F6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
Manifest number: 19CE
Signing time: Sun 26 Jul 2026 15:00:42 +0000
Manifest this update: Sun 26 Jul 2026 15:00:42 +0000
Manifest next update: Mon 27 Jul 2026 15:00:42 +0000
Files and hashes: 1: GkaV6j5jPz1mP-Dn9Vke0qIsBRE.roa (hash: D0faA0NAhOg5B8uJp2cs027yC0WcbwJy1xgJBQXojpc=)
2: qlPNLFhKPcFiCLqTsNt0dzs_I74.crl (hash: GWyTRLOMqRUZsF14eTWWtHb5dlzL03icd7o55oy7GZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:f1:4e:fe:ee:a0:d4:9b:09:c6:8f:7b:47:87:0f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be
Validity
Not Before: Jul 26 15:00:42 2026 GMT
Not After : Jul 27 15:00:42 2026 GMT
Subject: CN=60a282240c881901444f3de385ee125a29d3d237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:54:4e:87:7c:07:6a:20:da:2c:70:d2:ee:e3:
6c:96:36:c3:af:cc:c6:69:12:df:34:83:cd:f3:5b:
92:63:b8:50:6c:c9:02:bf:ff:46:da:bf:51:8a:e8:
85:54:34:aa:a1:1c:c3:90:d7:fc:df:6a:b4:e2:1d:
79:b4:a9:93:fd:dc:59:c7:0d:29:80:78:87:f4:a1:
38:c9:cd:2c:e7:3b:94:3e:99:59:36:1d:26:ff:48:
28:18:7c:45:4d:5f:03:68:da:f4:c3:4f:34:73:ae:
41:9a:94:1e:03:4d:57:c1:9e:26:9d:7b:4c:71:71:
e5:fe:c8:c5:a6:07:b6:dc:f9:75:97:c4:9e:3b:cb:
30:a7:79:ad:6b:5c:89:80:9a:72:01:ad:77:09:17:
ac:68:29:7d:17:ac:df:66:d6:ab:40:18:9b:03:9a:
8a:a2:ab:5f:78:70:d1:91:b9:95:ea:ce:26:6d:5b:
89:09:15:35:fa:65:06:f9:79:5b:75:9b:b8:d8:3a:
a9:7f:2e:a0:e9:ac:07:17:d6:a7:71:ef:01:6b:4b:
27:f4:d9:69:a0:25:13:30:e3:7c:3a:59:39:44:43:
6f:a4:92:41:0c:ae:f0:95:c3:b1:c7:b5:b1:45:4c:
71:ef:40:e9:a6:05:ec:ea:40:70:40:eb:f1:4e:96:
23:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A2:82:24:0C:88:19:01:44:4F:3D:E3:85:EE:12:5A:29:D3:D2:37
X509v3 Authority Key Identifier:
keyid:AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:cd:06:ba:a7:9d:a7:a4:17:15:44:72:6c:0a:3d:f1:39:43:
26:62:27:c0:3c:ac:a0:1b:43:92:9a:8d:1f:a4:9a:7a:5d:2f:
98:be:00:77:71:c7:67:85:9b:b5:1b:a0:f5:8e:a4:c9:b9:08:
e4:ed:75:60:8d:2f:db:ba:48:37:3b:0e:cd:a9:2d:ff:c3:8f:
4e:cc:58:f2:e5:52:4d:52:4a:77:e6:ee:5a:2c:f5:31:1d:8a:
c9:63:ae:bb:36:a1:39:05:d5:40:d8:38:d5:6d:b7:61:d2:46:
7b:16:bd:78:61:91:c3:62:e1:21:a7:09:11:db:68:35:e4:94:
07:55:0d:4e:c8:04:1c:90:df:b9:85:46:e0:ca:2c:ab:84:84:
11:d4:26:1e:1e:af:cc:dd:6e:eb:9f:00:be:95:6e:9b:fc:cb:
60:da:f0:de:b2:54:ed:21:ad:b7:33:c8:c9:28:f9:e0:0c:f5:
0c:5c:27:da:4d:54:55:7f:48:9b:67:e3:09:37:09:af:05:13:
7d:1c:a5:fc:48:3d:d5:75:85:0d:34:4a:31:cb:ab:73:ab:2c:
2e:af:a8:e3:b3:03:c9:b6:bd:a7:1d:81:82:e8:2d:49:da:e7:
11:6c:78:e3:86:d7:ac:d7:5a:8c:54:49:fd:58:fa:aa:1e:ef:
6f:7e:d5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:16:06 2026 by rpki-client