Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
File: QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft (raw, json)
Hash identifier: GHEqjpGYu+vV5Tx6C08HvEbmlopGj8PjanIHM88lg6c=
Subject key identifier: EC:5A:4D:24:A1:BE:C5:71:DF:3A:9B:6C:6E:0F:E7:CF:65:80:21:58
Authority key identifier: 40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87
Certificate issuer: /CN=407c7083460e1a4c72c4bc4276313d3a85944a87
Certificate serial: 019F927EF0BFA6B68D477F2F23EB948F8105
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
Manifest number: 1159
Signing time: Fri 24 Jul 2026 05:00:20 +0000
Manifest this update: Fri 24 Jul 2026 05:00:20 +0000
Manifest next update: Sat 25 Jul 2026 05:00:20 +0000
Files and hashes: 1: 9l35f4vtEnwERy91rSIzMefrFvk.roa (hash: o4NZxjI3TjEffFvPCpSdso698d9KA9gU7jcbU25ovX4=)
2: QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl (hash: EcknpYtTJKCEjrYd3s7LxyDRV6f6feo3YBWSM1zpxdk=)
3: _DMWomZ-zw9r2w8AsNSptLxDmfA.roa (hash: 5DRqqMVL9GM/PG8SfYwPRoOqjNYLEPPU5+fO2uX+eWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7e:f0:bf:a6:b6:8d:47:7f:2f:23:eb:94:8f:81:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407c7083460e1a4c72c4bc4276313d3a85944a87
Validity
Not Before: Jul 24 05:00:20 2026 GMT
Not After : Jul 25 05:00:20 2026 GMT
Subject: CN=ec5a4d24a1bec571df3a9b6c6e0fe7cf65802158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:03:ce:da:c2:82:21:fb:ba:63:cd:9d:be:be:
2f:d7:80:5f:d4:43:29:06:1e:6c:6b:41:34:5b:f2:
fe:ed:2a:60:76:29:20:53:60:bd:72:e9:84:5b:c9:
4b:e8:b8:84:9b:b3:dc:b1:db:46:ec:74:68:8c:4b:
71:7f:6e:d7:ea:80:a2:67:7f:16:62:ff:b4:7b:f8:
8b:9b:ac:02:e4:4d:fc:88:23:6f:96:f6:d9:34:f8:
07:2e:0e:cb:1d:74:3e:9a:d2:c2:a6:de:7e:b8:02:
36:b0:96:5b:c8:fd:c5:9a:2b:9b:6c:2c:49:59:4e:
f6:5b:0a:e6:34:1a:77:7d:5a:61:77:d2:38:50:7b:
8d:d1:8d:43:27:e7:9d:1c:b1:78:8a:3d:44:94:5a:
fb:59:2a:ef:c1:82:60:b0:94:12:95:ef:c6:ce:94:
db:17:1f:eb:cf:50:5d:c0:ee:07:f0:87:90:19:83:
32:3c:fb:b6:06:93:9e:03:8d:b1:cc:2c:f9:1b:9b:
1d:0a:db:fe:f7:29:0d:72:6d:e0:92:04:bd:3e:10:
e0:9e:85:e8:51:e9:3b:0b:23:d0:c3:ae:10:20:6a:
18:b4:f2:6e:77:da:46:56:24:cb:c8:ea:0b:37:64:
e3:bc:e9:9d:67:a6:d4:76:d6:12:99:71:fa:ab:5f:
13:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5A:4D:24:A1:BE:C5:71:DF:3A:9B:6C:6E:0F:E7:CF:65:80:21:58
X509v3 Authority Key Identifier:
keyid:40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:30:e9:ff:4c:bb:c3:64:fc:a6:38:9d:10:1a:52:6e:09:8b:
c6:75:b5:58:6d:bf:62:69:ad:cb:b9:0d:5f:49:7a:f7:61:81:
23:20:bc:88:85:3f:bc:c9:dd:a1:af:53:e8:51:f9:10:23:7f:
96:09:04:92:d1:d6:d4:44:e3:47:e8:1a:d5:81:a3:8b:73:75:
31:7f:44:14:04:56:61:07:49:18:8d:94:58:f7:6c:92:0f:80:
05:0e:ca:43:4a:4e:5a:46:0a:b0:16:50:fe:b4:8a:e5:22:e4:
df:35:05:6e:e1:67:30:da:6f:6f:0f:8d:60:70:d7:c9:9a:0a:
3e:6b:67:8e:72:4e:15:10:ca:68:07:29:94:5a:64:cc:0d:af:
ca:81:d2:96:40:cf:dc:64:03:6b:a2:64:cc:16:5c:bf:0a:d8:
a8:51:c9:a6:01:bd:38:7e:9d:e0:44:a4:eb:52:22:a9:40:7f:
d2:83:d2:1e:da:b3:33:f3:64:8e:94:95:68:64:cc:90:e4:0d:
7c:26:52:97:aa:4a:9e:6e:c6:ab:61:20:39:fc:0e:ca:07:40:
3e:bc:50:ac:af:bb:8b:b6:0a:76:2e:ad:04:25:f4:49:ce:7a:
75:61:74:3d:f2:50:8e:98:06:c0:bc:12:da:ad:73:1e:c2:8b:
22:5a:ee:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:32:46 2026 by rpki-client