Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
File: QJgXTbRR2f797sFfm5x5KdqumYA.mft (raw, json)
Hash identifier: vbjXt8YyBl/AQX2YpxYhBYu1dNk/yjDMxQsRRtFRlVo=
Subject key identifier: 2D:2F:87:FF:69:4F:1C:C9:8B:F3:96:9F:A0:67:BD:9C:80:08:29:E2
Authority key identifier: 40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80
Certificate issuer: /CN=4098174db451d9fefdeec15f9b9c7929daae9980
Certificate serial: 019F95B79D07DA6445F0105B8456CC521DFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 20:01:06 +0000
Manifest this update: Fri 24 Jul 2026 20:01:06 +0000
Manifest next update: Sat 25 Jul 2026 20:01:06 +0000
Files and hashes: 1: DTDpNUgnOeJ9l5YOOdGNUwDVEvA.roa (hash: uICgvpXBQ+aCzp7MGjB6t2q89M73IWkNxCB/z30mwEo=)
2: QJgXTbRR2f797sFfm5x5KdqumYA.crl (hash: gWGlrAUvfPpcG8A+PlW8xkVNmTbvtU8wS4SP/afKIsA=)
3: iC7WaXQaT3hCBP5tL58TvtgL4Pw.roa (hash: BJAnQ5jNp3+56VdM7I1DNZ4kS+Cwof8rsea2EH0Jkf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:9d:07:da:64:45:f0:10:5b:84:56:cc:52:1d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4098174db451d9fefdeec15f9b9c7929daae9980
Validity
Not Before: Jul 24 20:01:06 2026 GMT
Not After : Jul 25 20:01:06 2026 GMT
Subject: CN=2d2f87ff694f1cc98bf3969fa067bd9c800829e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ba:93:da:a4:0a:50:f9:fa:1b:9a:05:22:47:
b8:9b:ae:e0:43:17:62:8f:cd:21:c4:23:26:d9:04:
a7:db:31:01:02:92:76:50:ab:e0:72:50:59:77:24:
e1:8e:0e:0d:95:e6:e4:2a:13:ef:42:d6:91:cf:1b:
4d:2b:86:01:e1:49:ce:ae:75:f6:0f:d4:38:84:11:
b8:fa:f1:87:53:f3:76:25:47:05:ad:73:3f:37:47:
21:e7:53:48:43:7f:ad:a9:16:51:52:6b:e5:d9:72:
bb:9e:7b:05:7e:f7:ff:28:6b:19:ba:83:ad:8d:77:
4f:5d:2b:7b:73:26:4f:a7:14:e7:ac:97:9b:63:38:
45:ff:67:ec:40:9a:9a:67:b5:e0:96:e8:9c:27:b2:
57:a9:0b:69:b5:eb:75:ed:f8:07:3a:f2:5a:4a:cd:
04:77:fd:6a:56:fc:26:ea:b2:cc:d6:71:fe:a5:5d:
90:9a:68:91:40:5f:0b:6f:58:84:b0:32:76:85:db:
b7:c4:91:d9:d5:07:e6:9a:80:13:c6:ad:56:57:78:
54:67:73:08:ee:fb:27:c2:cb:b4:1c:0d:b4:9c:be:
69:f6:4e:95:a7:3d:39:b1:97:a6:a0:c3:f9:1a:de:
b0:10:dd:93:6f:50:70:60:32:55:bc:7a:7c:d0:14:
30:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2F:87:FF:69:4F:1C:C9:8B:F3:96:9F:A0:67:BD:9C:80:08:29:E2
X509v3 Authority Key Identifier:
keyid:40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:22:13:a2:95:51:04:29:55:70:e1:41:4a:c8:73:bc:14:fc:
87:ff:ef:6f:f7:1b:e7:4c:46:f3:ac:c2:14:79:c7:f7:b8:69:
9c:f0:54:78:c6:b8:08:93:4d:7f:3f:46:6e:42:cd:21:5c:04:
60:77:c4:d5:a0:5d:ad:8d:c4:56:c6:62:a5:2b:1b:82:68:33:
91:05:ca:6a:53:d3:ce:d6:1e:00:1a:48:df:ad:b2:02:e9:db:
2c:2f:91:6f:81:44:eb:e4:c7:9f:ca:15:55:88:f6:3b:db:84:
0d:6a:b0:fa:11:4b:99:10:a9:7c:fc:a8:7f:a8:6a:ad:ac:f2:
e9:22:0f:e2:59:d8:38:73:a0:f2:b9:ca:88:9f:44:f8:09:bc:
7e:46:cf:36:ff:7d:dd:72:97:df:47:86:65:c7:72:8c:51:30:
a0:05:f4:b8:4c:8f:24:64:e9:7d:32:e5:ef:f7:5c:de:2e:d5:
f6:fa:bb:37:95:22:88:6e:06:4e:b3:6e:af:fa:f6:76:bc:eb:
92:86:ec:37:33:c4:ec:08:25:4f:7b:1e:74:84:76:46:1f:41:
9e:a7:0e:17:a4:93:dc:a8:8f:d1:80:e3:15:66:68:c1:dd:40:
71:aa:58:ac:e6:38:83:95:42:e8:c4:09:08:b3:f6:94:e7:f3:
14:68:00:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:13:14 2026 by rpki-client