Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
File: QtvPm46wNgQ7t_e40zhrziTV3W4.mft (raw, json)
Hash identifier: pEDRGK8PJmoCMI27a7E8WovR1kz72SDGlCWAb5MXnVg=
Subject key identifier: 1F:B2:72:F4:32:53:83:FE:75:52:91:F8:DE:14:A4:47:CF:99:AB:A8
Authority key identifier: 42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E
Certificate issuer: /CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e
Certificate serial: 019F97382F8D8A5975EA6BA22BB80D66A72B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
Manifest number: 0CAB
Signing time: Sat 25 Jul 2026 03:01:09 +0000
Manifest this update: Sat 25 Jul 2026 03:01:09 +0000
Manifest next update: Sun 26 Jul 2026 03:01:09 +0000
Files and hashes: 1: QtvPm46wNgQ7t_e40zhrziTV3W4.crl (hash: 4r4vd6vEnSI9Ayeb6xUbosq3UnTXS8uxi/Npa4w414A=)
2: jS-v8sE_nNDS2wE29fkwjQ61v88.roa (hash: Flk+FfCfxIzDWzTQRWNpdyzzfWx1artWupYvhrPXQYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:97:38:2f:8d:8a:59:75:ea:6b:a2:2b:b8:0d:66:a7:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e
Validity
Not Before: Jul 25 03:01:09 2026 GMT
Not After : Jul 26 03:01:09 2026 GMT
Subject: CN=1fb272f4325383fe755291f8de14a447cf99aba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1f:96:32:c8:0b:86:e8:68:e7:32:1c:b8:15:
76:d3:8b:47:de:f5:55:9f:a0:3b:b3:ff:50:70:3f:
09:84:7f:27:a0:48:cf:a1:58:68:c3:51:69:f6:8b:
80:ae:02:cf:8e:50:39:b5:ae:f5:c3:b5:08:5e:46:
49:c4:a5:c1:96:ae:48:30:b6:e5:27:fe:17:ea:b6:
f1:0b:3e:85:a5:44:2f:89:73:ad:96:13:e1:4b:fe:
31:6c:7d:42:17:bf:08:88:1d:37:e0:7e:9c:29:22:
0d:f7:36:7a:26:de:c9:c9:dc:45:ac:db:b1:61:b3:
f0:33:41:c6:18:5a:c6:11:cf:dd:06:3e:ab:6d:b6:
ce:44:d4:b9:b3:f3:5d:1f:78:0b:2e:e3:ff:b9:10:
87:a5:54:50:93:c6:d3:6c:b3:36:45:25:8b:ce:77:
3c:3c:5d:56:0b:4c:b9:8e:5d:d1:bf:03:f3:a7:9e:
c6:88:d9:25:bc:31:b1:ba:f8:3f:c1:ff:0a:c0:38:
f1:61:42:f3:96:b7:fc:db:dd:37:1a:43:7b:b1:a6:
2e:b9:f4:8b:fd:f9:df:15:0d:ac:e4:b8:48:cb:d0:
05:e0:43:fc:89:3f:b6:fe:01:fb:1a:f8:cb:b7:b9:
c3:77:98:dc:84:78:3a:c6:ae:19:0b:c1:3c:e4:cc:
ae:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B2:72:F4:32:53:83:FE:75:52:91:F8:DE:14:A4:47:CF:99:AB:A8
X509v3 Authority Key Identifier:
keyid:42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:de:ff:64:51:a9:04:20:0b:d2:a2:19:2e:92:60:1b:02:97:
ca:d4:ea:e8:46:81:0d:47:4b:d4:44:a5:44:26:95:f3:e3:dd:
2a:a4:7b:59:be:fc:17:64:51:b1:2c:b7:f5:18:3c:b0:62:1c:
5d:6d:60:b8:66:b7:e9:70:75:e4:5d:b4:e5:b0:af:ad:37:44:
9e:cd:73:e6:e8:01:e5:76:60:ac:4f:9a:c4:f8:75:21:f7:ed:
af:de:a0:ef:a1:58:24:09:6c:fc:d9:02:8e:2c:e5:cc:e8:45:
ca:c8:fc:b4:a9:ba:14:91:f8:1a:67:5e:cf:ac:b0:b6:39:5a:
46:d6:9e:05:c3:48:da:65:0f:a8:1e:15:6b:b4:8b:81:43:14:
32:60:bf:7d:d3:ec:a0:27:b6:89:56:1a:91:07:4a:0d:e6:46:
6a:96:dd:39:e0:62:f8:5f:39:0b:3c:20:01:5e:75:29:22:5f:
aa:6b:37:c1:5d:4c:f1:c8:b6:74:13:dc:6a:ae:83:20:f7:b9:
31:9b:14:00:0f:92:a7:10:eb:1a:dc:59:64:75:2b:12:5f:c7:
9f:92:a1:8c:22:98:f6:b8:37:f3:b1:a1:72:be:c5:f1:78:96:
90:38:c2:72:05:b9:23:ef:dd:fe:35:c3:a6:e1:28:62:b1:dd:
dd:7f:d0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 11:45:37 2026 by rpki-client