Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
File: QSasSvr9JpiBwQrS7KL03vjtvSE.mft (raw, json)
Hash identifier: OqO9ncn+PCmXNtfNt+1bB9+qh358GfTy0O28iz2WIW0=
Subject key identifier: 20:FA:92:71:1B:0D:40:40:C2:C9:9F:C7:D5:3F:59:F5:9E:C6:52:47
Authority key identifier: 41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
Certificate issuer: /CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Certificate serial: 019F85D68FF2D1665C01D35BDED71E4E5745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
Manifest number: 19C3
Signing time: Tue 21 Jul 2026 18:00:58 +0000
Manifest this update: Tue 21 Jul 2026 18:00:58 +0000
Manifest next update: Wed 22 Jul 2026 18:00:58 +0000
Files and hashes: 1: QSasSvr9JpiBwQrS7KL03vjtvSE.crl (hash: BnotIDLMisPxV+qt1WlxDsq71xXowb1rGsWzLeFhYpY=)
2: WWEiiRclZJiJc4Yp9PYYvoQpmSA.roa (hash: hrQ5qgVNUSC0WxamoxJ9EGRyxZYAj1wkc81Qc600uiM=)
3: zXqwVcwlXpQqAoueTVMdXtH7SG0.roa (hash: jcregEqkWYaC2zgOmhpk2TEJDFYrMRRaV054ziFvW/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 18:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:8f:f2:d1:66:5c:01:d3:5b:de:d7:1e:4e:57:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Validity
Not Before: Jul 21 18:00:58 2026 GMT
Not After : Jul 22 18:00:58 2026 GMT
Subject: CN=20fa92711b0d4040c2c99fc7d53f59f59ec65247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c3:a5:8e:11:48:2f:9f:a9:4d:f3:e7:b7:b3:
64:fd:15:08:02:17:74:ee:b9:5d:c0:4a:0f:0f:f5:
0b:d6:22:67:c6:74:0c:ef:fe:f1:4b:91:b0:f5:c9:
02:6b:4b:d1:90:17:17:75:c3:b2:57:c7:ad:ac:d8:
2b:0c:5a:91:76:55:1e:94:c9:d5:3c:c9:aa:1a:18:
ea:51:ff:58:68:b4:05:4f:12:68:3f:48:6c:e4:2b:
1a:55:2c:1e:38:7c:87:79:49:bd:03:63:3d:97:5b:
a6:b2:44:2b:2b:6e:83:7f:27:58:54:4b:4a:a0:1c:
22:a7:b2:88:a0:21:77:b3:f7:0e:5e:4a:6d:4b:a1:
98:50:ac:d3:d4:65:f8:bb:fc:87:e1:9e:d7:19:c1:
12:9d:db:6b:2b:70:46:d4:db:12:e3:f7:87:a6:0b:
f9:b3:80:ac:c8:76:dc:7a:b6:c8:09:c1:2b:77:4b:
30:d2:1a:27:b9:fd:5e:e9:83:a1:56:9c:77:47:cb:
d5:c5:80:22:4b:05:89:93:ef:7f:dc:6f:34:1e:1f:
0c:5b:d6:1d:fc:09:75:3f:d4:d4:40:b0:af:fa:3a:
d9:63:69:85:4a:49:a7:4e:58:25:6c:02:21:a4:c6:
86:05:81:97:bf:f1:24:24:3a:8e:11:20:83:7c:02:
b6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FA:92:71:1B:0D:40:40:C2:C9:9F:C7:D5:3F:59:F5:9E:C6:52:47
X509v3 Authority Key Identifier:
keyid:41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ff:22:10:22:80:88:d5:42:4c:a3:73:6f:14:79:45:6c:d7:
3a:e9:ad:e6:2f:11:b9:c2:bc:8c:88:5b:55:e1:90:ad:db:c4:
14:77:e5:95:e1:51:d2:25:5a:1b:cb:0f:61:30:11:1a:00:9e:
e9:4b:b0:2c:d5:e5:77:6a:ed:dd:62:2d:b4:64:d7:cb:b5:97:
6c:36:10:e3:52:b0:14:e4:33:88:d0:36:78:19:51:44:ae:5f:
64:f5:83:24:80:8b:13:09:51:88:56:bc:2e:9f:bc:66:97:2a:
41:b9:e6:a3:db:0a:c2:c0:e1:0e:16:02:22:6f:96:1c:7f:cd:
65:93:df:75:d9:ea:48:64:87:97:6c:09:c9:92:4f:d2:a7:b4:
c1:69:f7:3c:97:df:c3:c1:bc:dd:1e:cb:a7:a5:1c:b5:56:8e:
17:47:21:38:2a:f1:4d:4f:d7:c8:79:8b:3e:35:db:a5:d5:18:
07:77:cc:9f:a9:69:95:5c:e4:78:e7:2d:ac:22:2d:68:54:e7:
f6:85:05:c3:6f:40:c9:75:e7:e6:5e:25:37:08:fe:91:45:09:
ad:de:f9:ae:3e:78:e0:ef:a3:fc:5a:c3:dd:5e:ae:40:73:62:
b2:de:c3:14:c5:cc:7e:78:d1:f2:85:57:c3:04:85:13:28:b3:
d4:35:83:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:11:41 2026 by rpki-client