Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/qbfYAH71qCdsSk6cQgfQRU_xhVI.mft
File: qbfYAH71qCdsSk6cQgfQRU_xhVI.mft (raw, json)
Hash identifier: K/H+njEF76CyePkr31nHmageRtK0qQTyOS4AkntKZ5I=
Subject key identifier: B8:4A:E6:67:AD:87:9D:37:48:3B:7F:21:D4:C4:A2:D5:11:D8:C6:B7
Authority key identifier: A9:B7:D8:00:7E:F5:A8:27:6C:4A:4E:9C:42:07:D0:45:4F:F1:85:52
Certificate issuer: /CN=a9b7d8007ef5a8276c4a4e9c4207d0454ff18552
Certificate serial: 019F8F7ED14ABE6D35B827664185579D223B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbfYAH71qCdsSk6cQgfQRU_xhVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/qbfYAH71qCdsSk6cQgfQRU_xhVI.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:20 +0000
Manifest this update: Thu 23 Jul 2026 15:01:20 +0000
Manifest next update: Fri 24 Jul 2026 15:01:20 +0000
Files and hashes: 1: HQkCijMV9_xz1pxlMVTKYL1q5Lc.asa (hash: PxM/0EfV3k77iXpSKK4QS8zmHHDp3CSagYFz+PFhCsg=)
2: q9si30G3Z4SCm8CWscBg7k7qW-o.roa (hash: hQIS9g3ceAT84twsdrq5NBtYX97qQ4HwbcAX1yCehDk=)
3: qbfYAH71qCdsSk6cQgfQRU_xhVI.crl (hash: ETpzSHTwKXOSwp2g/QT2OnsqGXIKwFKvockORGrRuLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/qbfYAH71qCdsSk6cQgfQRU_xhVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/qbfYAH71qCdsSk6cQgfQRU_xhVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qbfYAH71qCdsSk6cQgfQRU_xhVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:d1:4a:be:6d:35:b8:27:66:41:85:57:9d:22:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9b7d8007ef5a8276c4a4e9c4207d0454ff18552
Validity
Not Before: Jul 23 15:01:20 2026 GMT
Not After : Jul 24 15:01:20 2026 GMT
Subject: CN=b84ae667ad879d37483b7f21d4c4a2d511d8c6b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:25:5c:8c:c2:c0:50:00:b6:9c:23:d1:aa:68:
7b:6d:f2:c9:38:b7:a1:f2:42:2b:82:03:c3:16:af:
5c:fa:38:da:cb:2e:6b:14:55:0f:60:59:9e:08:e7:
60:e9:2b:10:91:20:59:f2:1a:5b:12:0f:19:01:7d:
57:f9:58:0a:48:a1:81:dd:1c:ae:7d:62:51:f2:55:
a4:17:e4:da:ea:4f:5e:2b:77:6a:62:15:01:04:e4:
5d:e9:b2:6d:1d:62:29:4c:57:81:bd:d1:c4:75:cf:
65:b9:dc:f3:5a:de:d2:db:3e:b9:ec:e8:86:f1:15:
42:1b:bb:7f:41:6c:cb:9f:ba:70:31:d5:a9:35:84:
ad:2e:58:4c:2b:b7:4c:11:54:a1:4e:ff:7a:87:d0:
3a:91:8c:9d:7e:91:f8:2a:e0:e0:87:85:ea:df:b8:
25:11:d1:f7:97:fa:91:72:42:ed:2b:0a:12:26:e1:
da:74:d5:85:72:ac:ad:db:d3:5f:69:b0:38:a4:eb:
91:f5:ca:e8:0f:43:78:03:cd:85:c9:03:f9:ed:d6:
c3:27:2b:3c:68:06:ca:6f:db:b3:dd:ee:5f:91:55:
58:33:0f:b4:79:76:b7:90:ee:06:c9:09:77:01:01:
3c:60:aa:fc:90:a8:85:7c:c2:87:d4:17:70:55:a6:
e7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4A:E6:67:AD:87:9D:37:48:3B:7F:21:D4:C4:A2:D5:11:D8:C6:B7
X509v3 Authority Key Identifier:
keyid:A9:B7:D8:00:7E:F5:A8:27:6C:4A:4E:9C:42:07:D0:45:4F:F1:85:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbfYAH71qCdsSk6cQgfQRU_xhVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/qbfYAH71qCdsSk6cQgfQRU_xhVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/qbfYAH71qCdsSk6cQgfQRU_xhVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:76:64:3e:20:d6:af:5b:41:65:61:f0:ba:8e:0b:f0:80:af:
58:65:da:88:a1:4e:fa:d5:94:21:98:4f:4d:78:68:e2:24:fc:
35:55:34:4e:18:c1:b6:36:d1:dc:f8:b7:53:0c:1b:a7:d4:b6:
33:df:40:2a:f9:e2:63:a8:1d:a8:69:91:5e:55:22:fa:7f:03:
5f:58:cb:d4:4b:ba:fa:6a:39:03:6d:ec:ca:69:f6:7a:86:ca:
04:45:2a:df:fd:03:67:49:4a:46:2c:db:2f:09:8b:af:30:00:
a1:42:df:1c:c6:b4:fc:36:49:e5:98:34:2f:8f:e7:4d:bb:e9:
3b:49:fc:e7:0a:c7:c3:59:94:3f:57:92:74:cf:8e:d8:bf:f5:
10:f3:18:6e:fc:e4:5b:8b:93:14:c2:8f:a7:33:10:ab:4d:ec:
d7:61:ca:32:3a:fa:51:f4:25:3e:30:78:ac:c2:d4:e9:f3:bb:
82:b6:1f:ed:3d:69:f6:26:7a:9c:dc:49:9c:e5:b5:d7:82:32:
7e:c2:bd:f5:a7:9b:6a:f3:a2:e1:2d:62:ce:ea:ca:5b:41:32:
48:c6:fd:15:eb:72:80:f5:18:e0:55:ab:01:b7:65:eb:b2:c3:
e6:be:f2:d8:35:2a:8e:dc:1f:3f:a8:f9:ac:91:de:f0:61:2a:
73:b7:76:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:59:00 2026 by rpki-client