Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
File: QtT25CKV9UA7hFtSu6lnl2HYhNg.mft (raw, json)
Hash identifier: QjP+cegpubfJIfTwyiHxjMf0ZtbrkXxMkQT99cJtk6I=
Subject key identifier: F1:CE:BD:FD:4A:94:50:EE:3A:B6:4C:84:C9:31:8A:08:5F:E5:ED:77
Authority key identifier: 42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
Certificate issuer: /CN=42d4f6e42295f5403b845b52bba9679761d884d8
Certificate serial: 019F93C965E7BA284F596BEFAB6E11BA2D12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
Manifest number: 0DC3
Signing time: Fri 24 Jul 2026 11:01:17 +0000
Manifest this update: Fri 24 Jul 2026 11:01:17 +0000
Manifest next update: Sat 25 Jul 2026 11:01:17 +0000
Files and hashes: 1: CZes9ucne-93ugwSp9Uj8QRuyUI.roa (hash: SmIb+DlDVr+RAK+c6/UM+iCQn51gq6QKyPu2qNkBKg8=)
2: QtT25CKV9UA7hFtSu6lnl2HYhNg.crl (hash: ngMxnlIQgs7Q0Fp1bmLwtbcr7dMngpt5CJHids+Ns+k=)
3: mdvmy6IQAdVPllVNujJTmgLBeMk.roa (hash: 8bJ+OELFjDn0Z1urqhVSsIZSC0xHEOIJenSspzmy9DY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:65:e7:ba:28:4f:59:6b:ef:ab:6e:11:ba:2d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42d4f6e42295f5403b845b52bba9679761d884d8
Validity
Not Before: Jul 24 11:01:17 2026 GMT
Not After : Jul 25 11:01:17 2026 GMT
Subject: CN=f1cebdfd4a9450ee3ab64c84c9318a085fe5ed77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:74:80:39:48:b7:7f:90:a9:ab:08:0d:90:93:
d0:12:26:cf:75:3f:46:59:a0:ec:9d:91:d2:aa:79:
08:c3:4f:67:ba:99:5e:d9:97:17:e0:11:7d:4f:a5:
ae:c8:47:e1:f4:a2:76:be:b2:59:8e:20:87:4d:9e:
8e:e1:c2:46:70:73:be:f2:33:9d:d4:ff:88:db:9d:
c5:36:6d:4c:ca:05:ea:d9:e9:71:10:1b:9a:5f:28:
7e:56:c7:80:5e:56:dc:b9:3d:38:79:54:1b:51:4e:
75:df:ea:7c:e5:6f:c4:2b:3c:cd:e4:e2:03:dc:d3:
86:21:bb:b3:4d:3c:df:6e:5f:5f:cd:e3:bf:b6:85:
1d:8b:cf:2d:d5:6c:da:7c:f1:fb:c0:c4:15:49:b3:
1d:49:5c:ff:09:51:4d:a3:5d:43:94:60:7f:c5:aa:
b9:b0:29:c6:c1:f0:17:ce:cb:d1:26:26:8c:93:7b:
9e:ba:c9:55:17:cb:b1:27:ef:a1:e2:8d:ca:09:74:
ec:09:5d:de:46:e7:de:e7:63:ea:42:87:42:cd:bd:
1b:19:f5:f1:ba:fb:00:eb:95:5c:fb:d2:79:f2:85:
06:c4:d0:72:20:12:aa:9b:ac:4f:ce:2f:29:ec:d5:
10:e9:f6:35:ff:63:d7:72:21:51:55:9e:6b:2a:32:
ec:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CE:BD:FD:4A:94:50:EE:3A:B6:4C:84:C9:31:8A:08:5F:E5:ED:77
X509v3 Authority Key Identifier:
keyid:42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c9:00:ea:27:db:8e:f7:5d:65:de:d7:ed:d2:ac:68:da:cd:
9d:71:f5:f9:5b:5e:5a:dc:fb:6a:4e:96:f8:39:b7:19:3d:90:
8c:ea:89:3a:36:f6:e1:e2:a1:c9:e4:8f:a3:74:d3:93:ab:c1:
30:21:12:29:23:9b:b7:de:2a:51:c5:14:63:b5:ed:10:2e:55:
a2:66:00:88:e8:42:53:a7:28:79:47:e8:6b:de:41:6a:f5:b4:
2f:ef:ef:1b:62:5c:43:6b:b3:f2:e5:bb:a7:21:37:4f:7f:73:
c6:da:06:5c:03:d1:50:45:d5:75:c0:9a:3d:0e:95:56:58:c3:
b6:10:0f:97:31:f0:f7:d6:bf:82:1d:1c:98:a2:70:b0:08:00:
41:74:ac:33:5e:83:91:f2:e2:5a:fa:0e:a1:c0:24:58:c0:e6:
99:1b:7b:e0:56:68:07:43:9c:ae:ed:68:37:ed:66:6f:17:97:
2f:c8:ea:8c:cf:7e:fb:6c:7e:53:34:11:d6:aa:20:b8:74:e0:
7e:b1:c1:06:44:de:12:da:86:7c:d7:52:bf:e1:a5:f1:2c:aa:
7d:cc:d5:aa:e8:fa:12:e0:29:9c:67:fe:b4:be:d4:50:84:ff:
aa:ff:00:6b:0e:f7:ca:b9:ea:c6:18:55:e8:aa:5c:09:cd:12:
d6:5e:77:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:13:23 2026 by rpki-client