Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
File: QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft (raw, json)
Hash identifier: Qvb2pOokFlRXwepT/sOW1QHm/jS0xsaDL9vQaCOfMh0=
Subject key identifier: 3C:9E:E0:D4:EA:AF:3E:06:22:7E:C9:79:32:07:68:D7:7C:82:CB:64
Authority key identifier: 40:FA:C6:A3:2F:E4:BA:A7:D8:9B:91:EC:51:65:A3:D9:66:88:E1:44
Certificate issuer: /CN=40fac6a32fe4baa7d89b91ec5165a3d96688e144
Certificate serial: 019F916C7874F89C7901C715CAD2C4DF6A0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
Manifest number: 120D
Signing time: Fri 24 Jul 2026 00:00:32 +0000
Manifest this update: Fri 24 Jul 2026 00:00:32 +0000
Manifest next update: Sat 25 Jul 2026 00:00:32 +0000
Files and hashes: 1: 2R98f3LcbdjJTK1zEivNVdv9lT4.roa (hash: wn+9EbMSH6lI4fh4eFap7qXQCiZwpo0SPOjzWLLKAfo=)
2: JNIABgZFmaWxjr_C6leE2KJ6tTA.roa (hash: U+MKLIrsfWPb0hJeiOLmKOB38yCKlAGbLyA4d1nN0Hs=)
3: QPrGoy_kuqfYm5HsUWWj2WaI4UQ.crl (hash: lQVqJIsNMqe4K2+k4ZEIEm66S0iw8MdsHVS4fktdlv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:78:74:f8:9c:79:01:c7:15:ca:d2:c4:df:6a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40fac6a32fe4baa7d89b91ec5165a3d96688e144
Validity
Not Before: Jul 24 00:00:32 2026 GMT
Not After : Jul 25 00:00:32 2026 GMT
Subject: CN=3c9ee0d4eaaf3e06227ec979320768d77c82cb64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f4:44:e6:c8:57:72:7f:36:17:eb:08:4b:6e:
b1:82:ff:f4:02:d9:9d:46:fc:6d:97:2c:7e:57:ab:
3b:26:26:13:1b:f4:dd:a2:94:9f:f2:64:c0:43:60:
5c:a9:58:1e:5a:08:44:0b:8b:07:fa:37:26:f5:30:
75:e0:51:5d:5a:a4:2c:2d:6f:bf:0f:a9:6d:43:42:
d4:ca:cc:97:b8:ea:96:b9:e0:4a:aa:7b:65:d8:bc:
bb:88:6b:34:ec:bf:82:61:b7:e5:1d:6b:32:d9:73:
a0:cf:b9:74:4a:2e:45:01:6d:d3:0a:03:73:b2:bb:
4b:64:60:7d:f1:a9:d0:cc:59:a1:cc:11:22:c8:31:
3d:81:da:81:af:a4:52:e5:19:02:9a:07:51:67:3e:
82:77:d1:88:72:0f:66:8c:8f:36:8a:ec:41:99:f8:
e2:d5:a4:4c:bc:b6:87:fe:81:90:c2:4f:44:7d:0b:
29:e4:c6:ce:eb:f3:b3:51:80:46:08:7d:12:d5:de:
52:c8:b5:18:b7:4b:6a:37:1d:47:02:41:05:0e:74:
37:3c:c8:0a:13:09:9b:59:85:ae:14:38:cb:de:a6:
13:44:fe:29:eb:cb:c9:c8:42:6e:ac:33:bb:50:c4:
85:20:29:4a:fe:68:af:b0:c9:8f:17:3c:a9:bc:a5:
34:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9E:E0:D4:EA:AF:3E:06:22:7E:C9:79:32:07:68:D7:7C:82:CB:64
X509v3 Authority Key Identifier:
keyid:40:FA:C6:A3:2F:E4:BA:A7:D8:9B:91:EC:51:65:A3:D9:66:88:E1:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:67:1a:04:fe:54:b0:84:87:e2:a0:7f:1a:ce:df:12:e0:bf:
23:d0:dc:63:07:23:02:03:f6:b4:aa:33:1c:91:3b:23:4f:32:
c0:cd:1f:05:ee:08:3f:ec:b4:b9:ba:ce:e9:e0:35:b3:e7:ad:
45:b2:f9:75:fc:07:06:c5:2a:bf:d8:8f:1b:27:35:be:fa:78:
f4:72:96:38:b4:a8:14:7c:97:7e:6d:49:8e:74:89:45:2f:10:
28:f3:c3:ea:a9:e4:29:b8:24:c7:7d:d6:70:11:05:81:dc:1a:
fd:1a:06:22:50:65:08:cd:4c:c0:d6:eb:aa:7d:0b:5e:0a:c0:
07:5b:27:d5:2e:20:67:fc:94:ba:26:2d:1d:7c:f9:fd:23:fe:
05:3b:53:2d:02:d1:bc:ca:0b:9d:73:94:b0:d2:87:36:ea:ac:
98:fe:49:d5:32:c7:46:e0:8a:98:d6:97:f4:de:7b:3d:85:7b:
9c:1a:8e:42:4b:d5:f5:ab:81:20:b1:0c:4c:a3:96:0a:11:3e:
af:f6:d9:c6:c7:1d:97:71:e9:db:6c:f2:74:a7:e4:d4:2b:c5:
c1:1e:5c:d4:9b:4e:14:d4:56:90:fb:f9:53:34:25:89:84:00:
aa:ec:72:d1:fe:69:df:55:41:a5:fe:4e:df:78:b5:53:bf:58:
ae:1f:d8:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbHh0+Jx5AccVytLE32oNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZmFjNmEzMmZlNGJhYTdkODliOTFlYzUxNjVhM2Q5NjY4
OGUxNDQwHhcNMjYwNzI0MDAwMDMyWhcNMjYwNzI1MDAwMDMyWjAzMTEwLwYDVQQD
EygzYzllZTBkNGVhYWYzZTA2MjI3ZWM5NzkzMjA3NjhkNzdjODJjYjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvRE5shXcn82F+sIS26xgv/0Atmd
Rvxtlyx+V6s7JiYTG/TdopSf8mTAQ2BcqVgeWghEC4sH+jcm9TB14FFdWqQsLW+/
D6ltQ0LUysyXuOqWueBKqntl2Ly7iGs07L+CYbflHWsy2XOgz7l0Si5FAW3TCgNz
srtLZGB98anQzFmhzBEiyDE9gdqBr6RS5RkCmgdRZz6Cd9GIcg9mjI82iuxBmfji
1aRMvLaH/oGQwk9EfQsp5MbO6/OzUYBGCH0S1d5SyLUYt0tqNx1HAkEFDnQ3PMgK
EwmbWYWuFDjL3qYTRP4p68vJyEJurDO7UMSFIClK/mivsMmPFzypvKU0+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDye4NTqrz4GIn7JeTIHaNd8gstkMB8GA1UdIwQY
MBaAFED6xqMv5Lqn2JuR7FFlo9lmiOFEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVByR295X2t1cWZZbTVIc1VXV2oyV2FJNFVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy82MjljYjItMmI0ZC00NzQ4LWJiMTEt
YzlmZTBiYTI4NjQ3LzEvUVByR295X2t1cWZZbTVIc1VXV2oyV2FJNFVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy82MjljYjItMmI0ZC00NzQ4LWJiMTEtYzlmZTBiYTI4NjQ3
LzEvUVByR295X2t1cWZZbTVIc1VXV2oyV2FJNFVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKWcaBP5U
sISH4qB/Gs7fEuC/I9DcYwcjAgP2tKozHJE7I08ywM0fBe4IP+y0ubrO6eA1s+et
RbL5dfwHBsUqv9iPGyc1vvp49HKWOLSoFHyXfm1JjnSJRS8QKPPD6qnkKbgkx33W
cBEFgdwa/RoGIlBlCM1MwNbrqn0LXgrAB1sn1S4gZ/yUuiYtHXz5/SP+BTtTLQLR
vMoLnXOUsNKHNuqsmP5J1TLHRuCKmNaX9N57PYV7nBqOQkvV9auBILEMTKOWChE+
r/bZxscdl3Hp22zydKfk1CvFwR5c1JtOFNRWkPv5UzQliYQAquxy0f5p31VBpf5O
33i1U79Yrh/YDw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:44:38 2026 by rpki-client