Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
File: QCHf817fDObkKNav_CEsRxdnnuE.mft (raw, json)
Hash identifier: HjEThjgJ2jYtYWMP6rZ3vHor211zXQy61jKALUavLnY=
Subject key identifier: D4:A0:48:E4:BF:41:84:BC:E0:24:49:92:93:79:17:9A:5F:7A:C5:E6
Authority key identifier: 40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
Certificate issuer: /CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Certificate serial: 019F8E6B8E17CA2368C5C08F890AD5921F58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
Manifest number: 19C6
Signing time: Thu 23 Jul 2026 10:00:41 +0000
Manifest this update: Thu 23 Jul 2026 10:00:41 +0000
Manifest next update: Fri 24 Jul 2026 10:00:41 +0000
Files and hashes: 1: 5aiPK-AjdStx2wVba_jLR8yEmJE.asa (hash: 0IErVbdaESGxXE+QIywfXtfH1IshFTMGY+X2vmTVMAE=)
2: QCHf817fDObkKNav_CEsRxdnnuE.crl (hash: sZKDF9+8s7yYnsvahQgg6bbWAapmyMhPQnCauQTcwKg=)
3: oH1r4igjZpHu8rKsfXxiqzBUl84.roa (hash: X0wT9e0aq2sCh5h0E8HXfviT92xXoJ7QSCDrREimpr8=)
4: r8t0mnOfuf-XZlUByZSmwxL5C8U.roa (hash: NIHY9VYRcz1i7SUH3PrDl1wZP8mWVi3+Xuf3Zc+uw+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:6b:8e:17:ca:23:68:c5:c0:8f:89:0a:d5:92:1f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Validity
Not Before: Jul 23 10:00:41 2026 GMT
Not After : Jul 24 10:00:41 2026 GMT
Subject: CN=d4a048e4bf4184bce02449929379179a5f7ac5e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8e:c7:a3:dc:a9:23:69:a3:3a:95:f9:02:f4:
4b:34:b2:31:b4:ad:80:3a:d4:a6:e7:a9:e6:0c:c9:
c8:c2:89:77:8b:9e:8f:ce:a2:c2:59:d4:77:74:a4:
55:2d:94:6a:b8:b0:3c:62:bd:66:c3:72:90:8a:cb:
33:2a:6e:61:26:4c:3c:e1:2c:44:93:76:19:73:11:
0b:59:8b:6b:c2:c2:8e:bc:d2:49:ec:6d:9f:fa:f9:
0b:14:39:65:54:b9:af:a5:a4:86:24:cf:f6:d5:09:
64:1a:04:20:bd:a0:8f:91:8e:6c:a0:ae:1f:c9:9f:
3d:4f:4b:b6:64:0c:0b:35:20:d6:d0:b6:28:d7:14:
b5:62:1b:59:6a:a9:4a:91:eb:bd:b2:c8:70:c1:d5:
5f:49:eb:16:58:fb:e9:39:d4:73:ec:aa:83:52:c7:
1c:cb:76:06:0f:e5:f9:19:56:a9:0b:3b:78:bd:cf:
73:78:df:86:08:3a:63:61:24:ed:e2:74:83:d9:bf:
08:92:0b:8e:cf:25:3b:b1:ff:f3:10:c6:56:f5:8f:
99:fa:82:a3:39:e7:2f:dc:7c:4f:e1:d8:0f:67:32:
e1:e7:da:34:d5:c3:19:4e:a1:f6:c4:7c:ef:9c:45:
51:01:93:30:de:60:9f:45:d7:7a:d7:5e:69:30:22:
eb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A0:48:E4:BF:41:84:BC:E0:24:49:92:93:79:17:9A:5F:7A:C5:E6
X509v3 Authority Key Identifier:
keyid:40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:75:9e:04:84:bf:37:b8:42:2d:21:9d:32:ec:09:48:12:10:
a9:4e:b8:96:f5:0b:ca:e8:a7:eb:de:4d:c1:5d:0a:39:38:06:
5e:95:15:26:7c:ec:03:ae:25:2f:f3:6c:14:bb:01:8f:5d:78:
fe:7d:42:e8:3c:8d:ae:1d:dc:98:e8:76:83:f7:c4:a8:52:fa:
8f:66:df:33:d8:57:91:84:a6:d2:73:f0:7c:53:02:38:4e:c9:
a0:5a:26:bb:5c:9c:6c:d8:56:6c:58:9c:2e:96:65:42:c8:74:
b8:23:a5:d3:72:4e:f9:94:ed:13:f4:79:d2:1e:9d:ac:ee:db:
fc:e6:be:a3:2d:c4:75:9e:e5:a1:04:72:ba:04:ae:c8:20:f4:
f4:74:b3:a4:7b:61:ad:5a:98:d7:98:cc:77:ce:b5:27:78:9b:
30:b6:c0:0e:7e:3c:bb:bd:32:62:5c:e7:48:e1:0b:f6:09:35:
e7:59:00:e7:54:44:dd:e5:fe:62:53:f1:4c:1e:51:97:19:36:
67:15:36:b2:96:2d:a4:21:72:5b:ca:75:b7:0a:6b:1c:16:63:
93:b6:c2:9f:29:fc:8c:20:2e:d9:ca:21:e2:a2:98:2a:91:4f:
15:2a:9b:28:a0:40:02:7c:f7:ec:bb:22:d7:03:30:12:09:65:
db:4e:c7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:10:22 2026 by rpki-client