Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
File: QhFndK-17RrJkmsLwtV_i4BYs-c.mft (raw, json)
Hash identifier: NUn+llC530nNegyMg86Bj7NMoXIC15kdptYUQI++R5I=
Subject key identifier: E8:CF:F7:5D:6B:32:EB:E2:18:6D:C7:D1:5C:94:A5:BC:40:20:52:E9
Authority key identifier: 42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
Certificate issuer: /CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Certificate serial: 019F93C8F9A5CB6385889005692C6303813F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
Manifest number: 1617
Signing time: Fri 24 Jul 2026 11:00:49 +0000
Manifest this update: Fri 24 Jul 2026 11:00:49 +0000
Manifest next update: Sat 25 Jul 2026 11:00:49 +0000
Files and hashes: 1: QhFndK-17RrJkmsLwtV_i4BYs-c.crl (hash: 0uL4r7uDaFp8Q859s8wcR7dMRT5l6j1PHIh9f6VxZww=)
2: wCCdFB7UjGfQwzVORHDutY8coC4.roa (hash: RxA0lc40X0LY4oOXiXSm0idHQPBonp6ohq0AD8dBwtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:f9:a5:cb:63:85:88:90:05:69:2c:63:03:81:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Validity
Not Before: Jul 24 11:00:49 2026 GMT
Not After : Jul 25 11:00:49 2026 GMT
Subject: CN=e8cff75d6b32ebe2186dc7d15c94a5bc402052e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:74:5f:22:38:9a:a5:c2:49:61:d0:ee:b8:4f:
b7:fa:de:8f:ab:a9:39:a8:40:4b:6e:8b:ef:89:f0:
3e:6f:33:fa:f0:92:fd:d5:e2:cd:8b:02:77:fc:78:
55:52:86:8d:ce:3f:ab:e4:95:b1:f5:81:68:58:e9:
2d:82:20:47:8e:82:79:d3:5e:45:21:bf:9e:66:85:
fe:69:b2:e1:ec:c3:75:4b:fb:70:e6:8a:e9:d8:27:
97:fb:8c:ff:84:61:d5:da:2e:46:83:55:52:50:c2:
89:14:2b:8a:d4:a4:b9:78:a9:df:99:f6:70:77:c3:
64:db:90:f8:65:aa:d5:f8:24:be:c2:5a:10:db:3f:
8e:17:33:82:f7:c9:37:64:63:d3:8f:33:d4:43:83:
49:bb:85:6b:c4:42:99:e4:63:30:f9:f8:5f:72:f8:
6e:03:85:76:8f:57:3b:88:76:75:f4:1a:c9:71:2d:
16:cd:5c:00:46:5f:46:af:3a:bd:82:1c:b3:65:7f:
fe:79:72:d6:c5:de:44:25:90:20:93:ec:7d:12:8b:
cc:c5:28:6e:5f:09:de:9c:54:ba:64:44:7e:38:9a:
e9:22:2b:da:5a:74:02:12:0b:0a:a2:c9:72:6e:4f:
ea:ef:83:3c:d4:f3:4a:21:e1:bb:ff:f7:5a:d6:71:
a2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CF:F7:5D:6B:32:EB:E2:18:6D:C7:D1:5C:94:A5:BC:40:20:52:E9
X509v3 Authority Key Identifier:
keyid:42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:0b:d8:c2:78:33:d0:ac:87:71:3f:6e:55:4a:ba:1a:13:62:
0b:9e:58:3d:32:de:b2:f6:78:28:a2:3b:03:94:03:26:a7:a2:
e2:3c:ca:1e:dd:f0:da:ef:43:ae:94:43:b7:d1:be:04:f2:8f:
aa:15:a7:42:9f:50:f4:7f:ff:30:b2:8f:73:b0:30:53:c1:a9:
19:5b:52:6c:ef:9a:0a:84:d2:a9:77:cc:8b:da:5d:85:d8:9f:
3a:21:1b:16:13:f2:f9:73:da:38:ae:f3:e8:0e:4e:2d:bb:3e:
71:d8:ee:cd:2c:44:bd:47:ec:3c:2a:62:55:d3:2d:85:20:94:
04:72:8d:91:78:b8:3f:e3:f3:7e:38:d9:7b:b7:74:1c:8f:67:
4b:f5:9c:07:e1:0e:cf:46:c4:9a:a5:5d:24:07:e5:65:71:9f:
95:cb:fc:9b:c8:cd:93:32:ea:06:57:73:aa:e4:75:7c:58:b0:
bc:76:4b:06:c3:bd:bc:1d:08:d0:ec:ea:e8:20:ee:6e:f7:d1:
a7:0a:8e:ba:23:38:34:8a:c8:1f:f8:6e:11:23:ec:38:41:bc:
08:17:ca:cd:c6:72:23:eb:81:9e:40:13:93:34:09:a4:e6:e0:
d6:5a:c1:a9:03:8b:8c:f3:f7:65:8c:48:b7:ae:64:dd:5b:f6:
19:0f:56:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:07:00 2026 by rpki-client