Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
File: QpNhzRgdhu9U6-L8kagOxTTOrHg.mft (raw, json)
Hash identifier: 3Uo5tJ8X+VCcj/7dU2EcUOovaTQcsHVSK4mQdEPblL0=
Subject key identifier: 2C:D8:08:AF:90:07:65:38:67:B7:24:8A:E4:E5:95:F3:F3:1B:14:8A
Authority key identifier: 42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
Certificate issuer: /CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Certificate serial: 019F9D708DB629C1D09CD1D9AEDAAA4F4187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
Manifest number: 0DFE
Signing time: Sun 26 Jul 2026 08:00:26 +0000
Manifest this update: Sun 26 Jul 2026 08:00:26 +0000
Manifest next update: Mon 27 Jul 2026 08:00:26 +0000
Files and hashes: 1: 9pGoDb8m8-uHunZG0g4IpC_J3W8.roa (hash: j9T9+HzYFR2vUjj6NG2JWZokXgG77nlwhtywobwQLLE=)
2: QpNhzRgdhu9U6-L8kagOxTTOrHg.crl (hash: vfCVgdzQmBUzB8qqJRJJzMJqo2Kd6HeuWbAsRL34Jao=)
3: yJnPYZA1yZSCQgYd_0lPnb8sfL4.roa (hash: ee1f7M50/x8p9bLR5E0wEJgtc9ejznbk546kHlNn9qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9d:70:8d:b6:29:c1:d0:9c:d1:d9:ae:da:aa:4f:41:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Validity
Not Before: Jul 26 08:00:26 2026 GMT
Not After : Jul 27 08:00:26 2026 GMT
Subject: CN=2cd808af9007653867b7248ae4e595f3f31b148a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b9:67:9a:50:ca:af:f7:02:19:5f:09:97:84:
8b:be:5d:ca:bf:4b:ee:04:90:82:66:28:2c:dc:3b:
25:95:0f:c8:3a:d1:7d:82:f3:43:ce:6c:5e:c5:77:
13:79:58:9b:11:a4:73:00:c0:98:35:79:dd:71:46:
0a:21:c2:e9:c0:33:f5:63:d7:f6:e1:e7:2c:e8:82:
57:8b:77:56:ea:da:d8:5b:fa:2a:91:21:63:51:a7:
e6:cc:aa:33:75:80:6c:a8:80:cb:43:22:7a:60:e2:
28:62:c1:86:1f:32:e5:4e:2f:80:21:01:65:0b:2d:
66:d0:d5:f4:47:53:68:95:df:d1:59:6a:12:3b:61:
b7:52:ed:55:12:96:85:55:77:1c:ad:4e:70:54:55:
eb:1e:a3:fe:ce:2c:4a:cd:c5:12:c9:22:f3:93:4d:
5a:7c:46:c9:20:99:da:27:ab:6c:92:2c:5b:00:08:
a3:ef:2d:f2:af:88:34:05:3e:3c:3a:c3:80:5f:1b:
ce:db:1b:4c:ea:9a:e2:cb:c7:65:3e:b3:0a:6b:05:
3d:09:12:81:ee:ae:41:e3:c9:83:94:46:19:39:a7:
58:99:da:a3:e6:be:3d:d8:5d:4f:f7:d8:26:a2:2d:
f3:32:55:41:d4:86:75:ca:b1:89:1d:36:cd:42:3f:
b1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D8:08:AF:90:07:65:38:67:B7:24:8A:E4:E5:95:F3:F3:1B:14:8A
X509v3 Authority Key Identifier:
keyid:42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:7f:b3:79:46:9e:05:42:78:08:8a:f2:a8:2b:18:9c:41:a4:
f1:24:26:54:10:9a:19:88:03:b9:0d:52:bf:92:2c:37:c5:e4:
e8:c7:66:ee:6b:8d:d1:23:41:11:bb:98:21:00:0d:17:82:d3:
35:de:86:c2:a9:a3:43:ef:0c:c4:c5:0c:f4:4f:45:8a:fc:da:
65:3a:a1:aa:74:b9:b6:92:d9:f7:4b:21:30:31:50:e8:6c:97:
d2:39:d6:f6:82:e0:42:98:f3:2f:ad:5d:cc:4a:82:00:bf:16:
fe:78:dd:08:31:16:84:96:ab:13:c3:d9:17:c5:62:49:9e:2b:
aa:fc:93:32:f7:c7:69:9b:d0:38:5d:39:06:a1:82:21:fb:83:
34:8e:d5:c4:63:79:7a:7f:2f:69:c8:1c:41:d1:9b:db:f3:73:
c1:be:17:49:df:51:30:ec:30:c5:da:cd:f7:1b:5d:cf:25:1b:
ef:e5:2d:15:43:a0:e2:4e:4b:0f:d4:f9:d9:63:0f:49:74:58:
62:cf:a9:42:de:ef:d7:6d:dc:e6:69:c4:0e:ff:4a:e7:f5:40:
50:2e:d0:a9:d2:fd:e9:fd:95:44:f0:17:94:ec:a2:d1:38:12:
16:dc:6a:a6:fe:81:dd:2f:c5:46:25:f1:9d:57:17:6d:23:8c:
c2:95:5e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 15:52:42 2026 by rpki-client