Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
File: QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft (raw, json)
Hash identifier: Om9sfos/lwEFkSpNgkrV9wUa24h4eSsVN9HSPqHRTEo=
Subject key identifier: 20:D3:B8:20:34:70:6A:8D:4F:BE:95:32:5A:F0:73:9A:1B:E4:36:BA
Authority key identifier: 42:43:2A:31:9F:54:B0:58:37:2F:D3:25:28:EA:E5:1F:C9:0C:15:B2
Certificate issuer: /CN=42432a319f54b058372fd32528eae51fc90c15b2
Certificate serial: 019FA0720BEDB04624C40827F97B7E494449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
Manifest number: 067E
Signing time: Sun 26 Jul 2026 22:00:56 +0000
Manifest this update: Sun 26 Jul 2026 22:00:56 +0000
Manifest next update: Mon 27 Jul 2026 22:00:56 +0000
Files and hashes: 1: 1V2N8PP3W6pg2dn86MMXMCFavbg.roa (hash: 6GyZmIlJdg5hYdJcaopJTcDcXE9f3YbiakWtgZ82HCg=)
2: QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl (hash: d0omgo3BhdXFYeKIlN3qAfjYVeEUKXUct+qeKlyqQvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:72:0b:ed:b0:46:24:c4:08:27:f9:7b:7e:49:44:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42432a319f54b058372fd32528eae51fc90c15b2
Validity
Not Before: Jul 26 22:00:56 2026 GMT
Not After : Jul 27 22:00:56 2026 GMT
Subject: CN=20d3b82034706a8d4fbe95325af0739a1be436ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:80:fb:db:d8:69:f8:49:9a:55:eb:9a:88:dc:
00:c7:46:7f:a6:a1:e5:d9:28:eb:73:ee:87:dd:f5:
32:9a:4f:e4:27:6e:0d:35:c7:be:80:67:8b:16:1a:
28:8d:b2:e8:1d:c2:0c:c4:ff:53:b9:45:68:01:8a:
51:8a:fd:c3:65:08:03:28:ec:1a:1a:74:3c:03:d6:
6c:df:4a:96:83:9e:2e:b7:a6:0e:d4:3c:73:5b:91:
21:81:3a:44:64:63:79:3d:6d:ed:53:cf:5b:7a:c2:
16:11:9c:57:d2:18:e5:22:a9:3c:c8:fa:ee:92:42:
26:fc:50:fd:f7:8d:b7:c6:ed:e2:1c:df:c4:73:65:
7b:da:c9:67:15:0b:07:bd:45:f3:f1:10:1f:83:d0:
27:d7:e2:9d:5d:86:84:e8:cb:a9:f8:85:b7:af:c8:
82:7e:d8:93:73:af:ea:f0:8d:b8:0f:50:d8:6a:97:
80:c0:bd:a8:7d:32:f8:18:ce:63:1a:66:3f:55:99:
01:09:3a:61:bf:46:ef:b4:ef:44:4d:58:94:4b:9d:
04:3d:2d:1d:ee:8d:3a:ee:72:51:67:d0:18:e3:42:
3b:c4:28:bf:ed:1d:6d:ef:79:b4:be:f5:ba:fa:bb:
fa:62:8c:99:19:29:28:85:e1:a1:8f:0c:02:21:e0:
fc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D3:B8:20:34:70:6A:8D:4F:BE:95:32:5A:F0:73:9A:1B:E4:36:BA
X509v3 Authority Key Identifier:
keyid:42:43:2A:31:9F:54:B0:58:37:2F:D3:25:28:EA:E5:1F:C9:0C:15:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:29:0c:85:7c:fd:4a:8e:74:00:53:b2:0b:30:72:37:e9:9c:
c6:dd:e4:7c:90:6a:2a:f4:77:cb:4d:ab:7f:6e:8b:6d:ea:40:
d9:68:d3:16:24:a5:b5:4c:06:e9:26:13:ed:5b:e0:0a:39:24:
cc:02:7f:2b:d1:3c:6f:f2:94:f0:85:f1:da:21:62:12:3a:c8:
bb:08:ee:cc:fb:a4:09:14:fd:02:02:60:96:4f:76:d6:f3:7d:
e9:b1:38:70:d1:2a:1c:3f:67:b6:10:3e:44:66:e5:39:19:39:
92:b8:9b:2f:0f:b5:8f:54:56:fa:1e:df:9f:56:8f:6b:86:16:
8a:4a:8b:5b:f6:e5:97:96:3d:27:db:16:c2:0c:c9:2a:4c:b3:
d0:ad:7f:db:eb:ee:e4:b0:8a:0d:f7:ad:a2:f7:33:63:ad:9d:
ee:0d:da:5a:ce:97:42:f1:e0:46:11:4e:6a:02:9c:dc:df:5d:
c9:f3:b1:c8:90:56:cd:44:05:9d:86:d3:b1:14:d2:25:64:58:
d5:af:3c:a8:ad:37:70:ea:c1:a4:32:be:b0:27:b0:f6:bb:74:
dc:b5:1a:22:32:b0:de:f2:2a:05:de:a4:e0:25:9e:b9:0e:ee:
c8:59:e3:f4:95:91:e2:2a:0a:47:8e:6c:e5:46:8c:06:12:22:
4d:7d:2a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:06:46 2026 by rpki-client