Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
File: QNTjO-cdM587wMxtrmXoeS_01dw.mft (raw, json)
Hash identifier: 36WKQPf803PoOeCMYCziL7tzMvDWmptTPe8fJihQp/8=
Subject key identifier: B6:B0:9C:66:73:68:7D:B4:A2:CA:24:0C:FB:C1:48:7F:C6:36:F9:AC
Authority key identifier: 40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC
Certificate issuer: /CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc
Certificate serial: 019F8F470E5DE42B576DC7629E97B4C2904B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 14:00:26 +0000
Manifest this update: Thu 23 Jul 2026 14:00:26 +0000
Manifest next update: Fri 24 Jul 2026 14:00:26 +0000
Files and hashes: 1: QNTjO-cdM587wMxtrmXoeS_01dw.crl (hash: 5Jh/fHRlPgMGWYTZS6ekJjBby52bqsAXtdnfyb1x97s=)
2: Ynb6_GOJr5BWsmssnmCiWT1fn7w.asa (hash: 1LS6QFZFhpfMUxXS4QP7dupHPq2LjjbAwscSCeUJDT8=)
3: uI_1KbkZIzvy3UFDfb5otHjxgXg.roa (hash: UQMNIvWBKb3xfqjEuaI3AXKNpWm9JLUIJVsw2I/E4EI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:0e:5d:e4:2b:57:6d:c7:62:9e:97:b4:c2:90:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc
Validity
Not Before: Jul 23 14:00:26 2026 GMT
Not After : Jul 24 14:00:26 2026 GMT
Subject: CN=b6b09c6673687db4a2ca240cfbc1487fc636f9ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8d:d5:07:a5:95:48:75:d9:97:91:7c:9b:31:
97:19:c5:60:c0:3a:3b:c1:14:a2:6a:6f:5a:ea:66:
59:1a:cb:8b:fd:2f:a5:e8:80:c8:2d:73:a5:db:7c:
a9:7f:38:f1:96:5b:ff:07:d2:2f:de:7d:b8:21:be:
7c:2b:b0:fb:db:9c:c6:30:ac:d1:0b:36:92:e5:33:
63:b9:3a:bf:44:61:d3:b7:a0:77:de:d3:1d:5f:96:
35:55:2a:93:a0:08:5a:7d:8d:b9:53:da:57:d0:6c:
fd:99:1f:23:ae:c3:8c:d7:0a:c8:3b:50:28:e3:b2:
67:75:40:fe:16:f8:fe:71:e6:fa:dd:a0:0a:f9:24:
af:71:e4:fb:12:a6:b4:20:fe:2d:2a:89:22:83:90:
af:57:e0:c3:5a:4c:b8:35:8e:72:f3:d9:e4:db:a6:
35:57:6c:ac:60:c3:c6:7d:cc:fd:a5:02:f9:8f:e9:
93:01:64:0c:fe:e6:2b:e5:ec:4f:66:c8:31:41:c6:
65:a6:ca:d1:5d:d5:c0:ce:7f:5e:ee:6c:c6:23:e3:
17:d6:f8:10:5d:90:19:64:e9:fd:1a:45:d5:8e:92:
66:04:19:4a:8e:0b:5b:2c:d2:44:a1:72:4a:b3:c5:
f9:19:7b:07:85:9c:f6:50:16:0c:72:fd:b1:b6:a5:
1b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B0:9C:66:73:68:7D:B4:A2:CA:24:0C:FB:C1:48:7F:C6:36:F9:AC
X509v3 Authority Key Identifier:
keyid:40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:3b:5f:7f:90:98:6a:34:23:17:fb:06:76:a4:db:63:e0:dd:
08:bb:cf:91:63:9d:94:98:ea:22:62:8b:ef:e2:28:4a:0b:f7:
12:86:11:9e:3e:c5:04:b0:d1:3a:83:fb:df:6a:46:e2:d0:6a:
b8:39:62:8e:6e:28:ce:77:c5:bb:66:bc:79:60:13:fd:f3:3a:
57:ae:52:3e:91:5a:a8:87:8d:d9:13:bb:46:69:f8:83:8b:85:
bd:c3:84:a7:69:cb:ee:3b:2b:96:9a:aa:e9:29:ce:cc:d1:73:
b8:84:b4:63:ae:c4:73:10:e6:11:2d:9b:67:01:8b:1b:83:eb:
83:cb:0e:00:4a:a5:45:6c:67:84:17:f2:1d:08:bf:33:9f:ae:
3d:53:fe:6e:ab:56:56:48:11:f1:af:45:1a:56:71:8d:36:2c:
7d:d8:0e:53:46:70:b6:b2:a9:b3:92:b9:2d:64:d5:6c:30:9e:
7f:e5:1e:30:26:91:ed:47:5d:68:30:f1:7a:b8:d5:fc:02:90:
4e:52:be:c3:53:ee:51:7f:e0:8e:0e:da:d8:38:7f:3a:cf:ff:
3a:3d:42:c6:da:f2:b0:11:55:41:59:a7:64:69:5d:8a:73:4a:
b5:bc:e6:2e:72:49:88:2a:bc:a8:39:20:5c:2d:44:5f:48:f1:
23:cb:95:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:07:42 2026 by rpki-client