Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
File: QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft (raw, json)
Hash identifier: 0qhltZR3DKbPhYJcz1y2aB1l84GrvYTiZSZT7q0OaAQ=
Subject key identifier: AE:D9:51:48:C2:43:6A:69:DF:7A:82:CD:27:AE:A2:C4:CA:F1:F6:6F
Authority key identifier: 42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
Certificate issuer: /CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Certificate serial: 019F85D6DC1E9DDA6AFBAE713C6BA4FA3534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
Manifest number: 1755
Signing time: Tue 21 Jul 2026 18:01:18 +0000
Manifest this update: Tue 21 Jul 2026 18:01:18 +0000
Manifest next update: Wed 22 Jul 2026 18:01:18 +0000
Files and hashes: 1: LR4OEFuXJFG601CBDAdGi2eJuDA.roa (hash: NMogK1dWSLWZg8KRXWYMDcVAVexU5Hc8nklyuTVzNTg=)
2: QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl (hash: bLZIWX0qa1bREp40q5Wg9GLm4N6Dx+EKcOzR9khMDb0=)
3: yLjJ3nLSiELitR79aZqorJ0E2nc.roa (hash: xtAiyE7KLrMeKdwMrZXmwAda9WUSSp0xD353CtNzkqA=)
4: zmI7itrZiL_gDQE-LI8VX6mhi3M.roa (hash: oaucdw8kxMg4EQDLP4CSccRXkWAvO6YKuvgDiVYtKOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:dc:1e:9d:da:6a:fb:ae:71:3c:6b:a4:fa:35:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Validity
Not Before: Jul 21 18:01:18 2026 GMT
Not After : Jul 22 18:01:18 2026 GMT
Subject: CN=aed95148c2436a69df7a82cd27aea2c4caf1f66f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4a:e4:d3:63:ef:55:9d:c7:85:06:82:cf:9c:
57:46:3c:68:92:8e:99:e9:8c:05:34:f3:7b:4e:f5:
7a:2a:f7:fe:bd:d5:12:b2:6d:3a:3b:04:0f:97:7e:
9c:c1:b7:dd:b8:f5:b5:d8:85:7e:c3:35:6c:d6:59:
01:8f:e3:8f:76:d4:1c:07:03:8f:c3:dd:c2:75:d6:
dc:f1:71:34:a1:82:2e:4d:b0:f7:b7:94:8e:0d:c8:
96:04:1e:a7:1d:bd:64:90:69:57:9f:8d:75:fd:6a:
15:e8:59:fe:f0:37:27:40:1c:ab:78:c3:8c:f0:a6:
60:1d:1b:0f:78:47:38:29:51:f9:83:4e:13:ed:90:
dc:63:5a:b3:73:b9:5d:b6:06:6a:0f:56:73:4c:54:
09:30:1e:df:e2:5d:2a:e2:fc:31:1e:d4:26:2c:40:
e4:6c:90:bd:12:90:eb:11:00:26:0e:46:3d:f4:15:
79:7f:5e:3c:39:44:b5:c6:94:5e:33:af:6c:08:1c:
b9:8b:a9:db:42:1c:14:9c:e7:ed:8e:b0:95:6a:88:
69:4c:70:89:e3:3b:72:79:d1:97:16:91:66:69:5d:
e5:33:44:f1:0c:66:f6:d1:21:aa:38:40:d3:bb:5d:
06:4a:ac:45:96:91:3a:5a:73:88:dd:14:48:d2:fc:
59:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D9:51:48:C2:43:6A:69:DF:7A:82:CD:27:AE:A2:C4:CA:F1:F6:6F
X509v3 Authority Key Identifier:
keyid:42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:7b:85:50:45:aa:92:e7:eb:2c:b9:81:7f:0f:2d:e4:9e:e8:
e4:c2:b6:1e:5b:e4:55:bc:0c:7e:68:94:67:0a:c9:bc:2a:dc:
90:2f:11:5f:55:92:f5:60:64:6f:04:f2:0c:6c:a5:5d:84:24:
07:03:42:00:04:f6:a0:cf:4a:a4:e6:e9:97:e5:38:6b:fd:e9:
7c:99:79:46:19:f3:59:db:c5:9b:e1:2e:8c:0a:f5:db:3c:57:
e9:48:aa:7c:9c:19:24:99:18:b7:c0:84:6a:e7:ce:a2:62:33:
40:37:ad:0f:0f:40:9b:c3:aa:f6:41:84:ce:de:79:fc:b5:0f:
2d:f2:87:22:9b:27:7d:33:67:82:d9:67:39:c5:10:45:34:f1:
ad:f0:7d:80:d2:df:2f:93:59:18:4a:89:ef:be:3a:e1:53:45:
73:5b:e8:bd:fc:2b:25:d1:fa:d7:67:4f:24:43:c0:ee:81:5f:
9e:1c:85:48:54:85:23:f2:2f:e8:f6:81:84:70:c6:d2:7d:bc:
9b:47:65:d0:23:d1:74:7f:ec:53:35:7b:2c:59:40:c4:7a:49:
b3:3c:fe:a1:fd:50:81:11:6d:cc:df:5f:09:0f:ad:68:10:cb:
74:79:25:8c:18:26:b6:06:23:cf:80:c5:5a:6d:36:95:28:0c:
61:e8:99:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:43:44 2026 by rpki-client