Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
File: qfxWMNV7GXHzolbtbZg6-tayjXU.mft (raw, json)
Hash identifier: LQDAsYw34jfCcl4q5JyNs5vqG5tvrONOWDXeB4DotJU=
Subject key identifier: BB:24:89:E3:3A:45:69:1C:D5:DD:A0:4F:E8:5B:13:B4:6D:20:23:4A
Authority key identifier: A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
Certificate issuer: /CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Certificate serial: 019F9211358B383F1887107A01B2504758BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 03:00:29 +0000
Manifest this update: Fri 24 Jul 2026 03:00:29 +0000
Manifest next update: Sat 25 Jul 2026 03:00:29 +0000
Files and hashes: 1: KIREq3B_mRi_ruYLjq_b_qaPiMU.roa (hash: XxQhGm3arKEfc0Jix82KOHGdF1oeChWiOIWCuWRPrpg=)
2: RLTq3d76GisC1LZTNSb9nCNxxt8.roa (hash: x4c1QBZG0KpP+BhZ849r1Wv8Cus10ftjdq8hO7xYuIU=)
3: qfxWMNV7GXHzolbtbZg6-tayjXU.crl (hash: 67r2wokNPJEuq1AIAvjcRrmRLEIJ3RmIHvWKXYi0Tv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:35:8b:38:3f:18:87:10:7a:01:b2:50:47:58:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Validity
Not Before: Jul 24 03:00:29 2026 GMT
Not After : Jul 25 03:00:29 2026 GMT
Subject: CN=bb2489e33a45691cd5dda04fe85b13b46d20234a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e4:9b:87:e6:bf:93:0c:74:c7:6b:0c:05:8a:
25:4c:a6:05:f1:56:78:23:b3:a5:c3:fe:88:24:d3:
8b:24:83:19:cb:1e:a0:92:62:c6:1e:a5:13:74:f6:
7c:ba:fd:8b:ce:4f:c3:be:eb:28:a5:f7:d5:9b:d1:
db:ba:c9:d0:ca:3c:c9:be:4a:c9:9f:63:ac:ee:65:
0e:3c:ce:10:fc:82:3a:1c:30:18:20:3c:f4:6b:65:
c4:fa:87:5e:c4:db:a5:ec:1e:26:e8:eb:73:64:10:
05:88:aa:8a:ea:d0:51:26:5e:df:09:a1:94:65:34:
9f:35:d3:e0:c8:6b:c9:45:7a:d7:ee:c7:3a:43:7e:
66:4b:f3:be:56:4a:bd:32:99:05:1c:ae:c6:b1:b0:
02:ac:55:e3:35:5a:8b:0e:75:5e:6d:46:e6:76:f4:
81:14:5b:86:1d:8c:14:b8:85:39:b2:ac:72:d5:c2:
4e:55:05:91:3c:ae:b6:74:54:ec:48:73:77:9e:9f:
89:a5:61:33:11:df:d9:71:a1:74:fd:76:60:e6:93:
94:92:24:08:dd:f8:7a:6e:69:b3:74:dc:ed:1e:06:
8c:3e:8c:7e:37:95:a8:fa:f2:6a:ee:e7:da:94:0a:
0c:1c:17:a4:78:3c:7c:03:9e:ec:7d:06:d7:d5:a0:
76:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:24:89:E3:3A:45:69:1C:D5:DD:A0:4F:E8:5B:13:B4:6D:20:23:4A
X509v3 Authority Key Identifier:
keyid:A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d8:3c:05:4f:42:30:42:8f:09:bb:90:56:7f:c5:7b:b3:e5:
de:35:ea:3b:fe:49:38:41:a2:62:72:60:0b:4f:22:12:e6:0f:
1c:0b:47:d4:49:b1:70:99:42:1a:ab:49:ee:19:1b:cf:8b:56:
00:b2:77:e6:8e:ce:9b:43:a8:9a:ed:aa:13:49:1b:b7:a8:18:
01:72:7d:43:cc:84:d5:b1:62:f7:b4:7c:bb:93:9a:90:84:ad:
ae:5f:7c:7e:1b:6a:d8:ea:e0:fb:6a:05:4c:fb:34:ff:00:e4:
25:78:7c:81:27:ed:a7:07:f1:de:b2:7e:fe:fe:ad:f2:cc:6a:
cb:81:8d:c4:e6:df:ba:ff:2e:02:b0:bc:83:95:65:64:49:7d:
c8:f7:a5:ce:18:33:96:43:88:ed:b5:76:d1:2f:29:e2:92:9f:
bc:73:56:2a:d8:8d:ea:92:1e:a3:1c:f7:98:7d:0a:66:66:90:
20:ef:75:ca:9e:98:37:db:9b:b0:81:6d:99:8f:0e:dd:09:f1:
4d:0b:9d:87:e0:6c:89:09:98:7f:4f:33:f5:ee:be:ef:5b:5c:
14:56:18:7a:cc:6e:03:2a:20:8f:66:19:d6:ca:78:a7:a1:c1:
a4:4e:e2:2b:9c:91:48:3c:da:0e:2a:dc:98:a0:e6:51:b5:0a:
87:8c:51:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:19:38 2026 by rpki-client