Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
File: QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft (raw, json)
Hash identifier: +k7pAKKEu24QWH3NHk7htIthXUp9FU7kgVCsHraUwlI=
Subject key identifier: CF:50:22:A0:86:BC:EB:00:1B:18:52:30:B7:97:56:CB:F6:52:34:FF
Authority key identifier: 41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92
Certificate issuer: /CN=41fc55ee2488fb9401c4b668abac54110ebb8092
Certificate serial: 019F848C76976F399E8870C5ED025545F085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
Manifest number: 16C6
Signing time: Tue 21 Jul 2026 12:00:25 +0000
Manifest this update: Tue 21 Jul 2026 12:00:25 +0000
Manifest next update: Wed 22 Jul 2026 12:00:25 +0000
Files and hashes: 1: 7AZcdK-2iSMlF0mV6xbUMSO3Xnw.roa (hash: G5rGJtONXIdV22l8uGfiFrqq42pAnIm3ZbpijKWWsuw=)
2: QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl (hash: QFpzc62PwrI0+3r9iyPIc7QmqY1e/4+EPHVTwxyUoFA=)
3: SED4pOneSK1Nz4GXJ8sxeamW4bA.roa (hash: rv2mx30pNaTbk2/jVNoTsekRApJk2qpOrI2G/ZbcQfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:8c:76:97:6f:39:9e:88:70:c5:ed:02:55:45:f0:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fc55ee2488fb9401c4b668abac54110ebb8092
Validity
Not Before: Jul 21 12:00:25 2026 GMT
Not After : Jul 22 12:00:25 2026 GMT
Subject: CN=cf5022a086bceb001b185230b79756cbf65234ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:19:96:33:85:48:ff:5c:a8:e7:64:14:85:56:
bc:70:c3:86:67:c9:67:8b:ac:e0:7f:3c:43:fc:09:
c2:9e:e9:f7:3f:80:22:49:61:36:40:89:e8:24:06:
07:c5:23:00:93:c7:54:6a:bd:67:5b:e9:d1:c8:0e:
15:8c:26:c4:c6:53:1e:b8:27:ad:60:97:73:4e:0b:
56:fc:be:17:76:eb:92:74:5d:2c:39:ec:e8:1a:e3:
6c:b4:cc:72:8a:9e:71:8d:fd:eb:a3:22:bf:fb:21:
f9:03:3f:3f:68:37:71:3e:f4:bb:5e:31:61:69:5a:
4b:c9:c3:5c:b8:db:92:96:48:42:5c:26:b7:04:64:
30:be:e9:48:b0:86:78:fb:1f:9a:a5:b1:ea:08:72:
a0:e7:ef:cb:77:cb:33:14:31:60:ce:7a:a9:23:10:
65:37:0c:82:de:53:56:1f:43:06:95:eb:1b:fe:28:
6d:5c:1f:64:9c:4d:a1:ae:a5:32:b7:bd:4f:f0:bf:
b1:e5:7f:72:d9:82:f6:ec:58:88:ce:51:99:3f:01:
d9:ff:04:05:f7:68:b1:fa:cc:97:08:f6:4c:73:c8:
44:d0:4e:c6:22:a2:91:23:ce:e4:21:91:4c:c7:fa:
29:6c:88:45:b2:54:fa:1b:69:08:91:aa:30:e1:24:
be:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:50:22:A0:86:BC:EB:00:1B:18:52:30:B7:97:56:CB:F6:52:34:FF
X509v3 Authority Key Identifier:
keyid:41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:0a:53:90:0c:ba:97:44:75:05:cc:ef:62:5d:d1:7b:f0:cf:
f3:e8:c5:03:61:f2:86:16:b4:2f:cf:8d:8f:8c:34:ca:a4:93:
1a:96:26:e3:15:9d:38:a0:46:70:89:81:ae:ba:79:2b:4e:79:
9e:11:3a:7d:43:ab:ad:71:c4:5c:bb:e5:de:20:01:c7:1c:11:
a9:ee:24:ec:05:a7:7b:e8:f8:6b:36:eb:57:64:8d:bb:0a:25:
b3:f5:a2:fa:e7:78:d9:0a:d0:5b:2f:34:cf:9f:df:7c:a4:91:
85:b4:6c:cf:78:fc:71:d0:0c:61:98:3b:e3:7c:0b:cf:54:39:
b2:10:8c:00:9d:7a:f7:a9:ad:78:f5:e5:4e:2f:3c:02:6c:6a:
b8:ab:f1:05:7e:a6:3a:a0:90:b5:12:5f:13:8a:98:6c:61:35:
03:ff:2a:eb:a5:9b:05:21:54:3c:c5:09:a2:21:51:05:85:34:
24:0d:82:74:83:66:6b:db:ab:47:d6:8c:1b:25:4c:d2:ad:14:
5f:40:3c:ae:a7:a6:d6:85:19:34:7c:3a:46:05:8e:93:f8:c0:
f0:21:ce:ca:56:b1:e0:86:93:b7:6d:bb:5b:fa:8c:67:77:69:
f1:cf:ed:9f:b6:bb:7b:81:7a:75:5a:40:c1:eb:2b:47:28:63:
de:81:e9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:27:47 2026 by rpki-client