Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
File: Q0llhOXPObVodN6Nx3qjpv-eih4.mft (raw, json)
Hash identifier: oLRo3M13B3kr7JpF46y2qsSb1EOp7Yx2x7q44zOBhbo=
Subject key identifier: 6F:D7:51:8F:94:4C:95:85:D1:7E:D8:48:50:CD:61:BE:83:B3:C0:30
Authority key identifier: 43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
Certificate issuer: /CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Certificate serial: 019F3AF3BFA308FB89997CE28211EC365D6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
Manifest number: 1639
Signing time: Tue 07 Jul 2026 05:01:20 +0000
Manifest this update: Tue 07 Jul 2026 05:01:20 +0000
Manifest next update: Wed 08 Jul 2026 05:01:20 +0000
Files and hashes: 1: Q0llhOXPObVodN6Nx3qjpv-eih4.crl (hash: dHPTDwhKjoC+B8ZuMyW/++KIq+Yc6f+ct8zs9tZkGA0=)
2: eTNkVC7XWRHBzuyFVu3pxnwq3z4.roa (hash: b8ZbPv94PI8PSCuaUsrniKkw7cN6jjfuOqQWfIOj1qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 05:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3a:f3:bf:a3:08:fb:89:99:7c:e2:82:11:ec:36:5d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Validity
Not Before: Jul 7 05:01:20 2026 GMT
Not After : Jul 8 05:01:20 2026 GMT
Subject: CN=6fd7518f944c9585d17ed84850cd61be83b3c030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:43:8a:92:18:80:7d:2a:af:b4:46:34:8b:de:
22:b7:50:c5:db:ad:86:f7:0b:b3:18:e7:3d:f7:9f:
1c:c4:23:c0:df:d0:49:fc:95:cd:50:10:65:f4:84:
55:3b:7e:4d:e9:48:ba:f9:5b:09:25:ac:bf:1c:1b:
2f:e3:32:22:3e:06:9e:55:71:7b:71:a4:7e:5c:93:
5c:76:33:8f:6f:24:53:88:c0:4c:c3:72:64:df:03:
23:7f:98:a1:1c:38:8b:e7:7a:81:ef:f5:30:35:a7:
f2:42:2d:49:a0:3d:b9:92:93:8b:4a:27:cf:ef:dc:
cb:2e:a9:91:13:77:fe:31:fc:e0:6f:e5:d8:95:37:
b3:e5:bc:1b:2e:8a:71:e2:bc:7b:9b:88:3e:4b:4c:
78:91:19:d8:8a:06:84:d4:50:f4:dc:3b:5f:ee:29:
35:65:5a:75:32:dd:4b:5b:37:b2:c6:49:78:88:03:
48:04:d7:35:35:5d:d1:01:16:23:a3:0b:23:8d:78:
b6:e7:77:fa:68:c2:e4:db:90:f3:02:b4:53:e8:6a:
d1:09:8e:f0:52:d7:1e:09:4b:ba:1f:b7:0d:56:1f:
40:a3:1d:45:e0:36:3e:a3:d4:13:a1:86:78:ac:20:
d0:17:a3:ef:dd:a3:03:72:7f:d5:84:54:56:9f:c1:
b4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D7:51:8F:94:4C:95:85:D1:7E:D8:48:50:CD:61:BE:83:B3:C0:30
X509v3 Authority Key Identifier:
keyid:43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:b9:93:c4:fc:26:21:3c:e3:3e:06:01:7f:d3:e9:17:28:7d:
02:9e:80:87:58:59:eb:2d:b2:ec:6d:e3:c4:fe:92:3b:c0:55:
a3:4f:20:66:44:bb:cd:95:ee:cb:bc:5d:85:49:ac:15:ff:93:
65:f6:09:77:6f:87:cd:91:1a:3c:63:37:1e:8b:7d:08:35:0c:
59:58:40:0b:48:64:6a:9e:83:bf:18:71:34:ef:38:b2:88:73:
1a:b3:e0:3b:a4:2f:df:94:41:00:82:e6:28:b8:31:0a:54:b4:
e0:58:19:03:6e:67:3e:c6:90:99:07:cf:fa:61:32:05:17:96:
0f:9b:ee:d4:64:39:1c:9d:34:26:01:38:27:1c:96:d2:d1:e1:
56:76:f2:4d:72:be:db:b6:3f:7c:b5:83:f7:62:1b:ec:ef:a2:
ae:3b:b7:51:6c:94:4e:60:46:d5:49:70:f5:31:7a:2a:61:33:
a0:45:ec:26:6f:3e:a8:c2:37:bc:03:8f:24:28:b0:9e:a7:26:
9c:b4:0f:dc:74:15:77:b5:c8:60:c1:15:37:67:f1:b9:2b:89:
9a:27:24:2e:bb:2f:7d:6e:7f:c9:10:2f:8e:df:5e:50:fa:82:
3d:63:15:6e:f4:30:5a:28:a4:42:fe:34:52:bd:f1:dc:77:81:
70:ea:ee:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 10:42:53 2026 by rpki-client