Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
File: Qy_nD0zvEDdoNhUvOOTghTLMe58.mft (raw, json)
Hash identifier: ddZ761+07atWiLJdDX6iewvrUarTXSxtucbMmezQ4Pg=
Subject key identifier: 5B:9F:34:3E:80:ED:E0:E4:22:DC:71:66:D8:40:D3:02:57:6D:EA:85
Authority key identifier: 43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
Certificate issuer: /CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Certificate serial: 019F932405D86C78EA63FD2F6BC22D4EEA2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
Manifest number: 0871
Signing time: Fri 24 Jul 2026 08:00:39 +0000
Manifest this update: Fri 24 Jul 2026 08:00:39 +0000
Manifest next update: Sat 25 Jul 2026 08:00:39 +0000
Files and hashes: 1: A9KPkngUXWXwoXMeh9I603GmeJg.roa (hash: dKQV+T7YqY4RYKx4LLE6fQsZ703AeKW3tQVyd7Sv7c8=)
2: Qy_nD0zvEDdoNhUvOOTghTLMe58.crl (hash: HsztN1XVOYPxsjb56SvRMUlBxefva66ZrtAx2Mm25fY=)
3: sKDKorvVElJgqwc1YL9x1RhoYEM.roa (hash: SXIrFPkLP5e0Dojj65FY1WNGEqYxxlyXHUyw6TzDiOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:05:d8:6c:78:ea:63:fd:2f:6b:c2:2d:4e:ea:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Validity
Not Before: Jul 24 08:00:39 2026 GMT
Not After : Jul 25 08:00:39 2026 GMT
Subject: CN=5b9f343e80ede0e422dc7166d840d302576dea85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:dd:83:14:c6:2b:80:ec:64:bf:45:13:45:2b:
69:70:de:bb:2d:29:f5:fb:69:75:5b:fa:9a:a1:c0:
a1:41:80:4b:15:c7:f1:4c:70:72:7a:32:83:97:ba:
f1:d0:e6:1b:79:3b:1c:e5:b2:dc:b3:b8:51:ff:df:
bd:c2:2f:34:40:bc:47:62:c1:cb:4d:4e:5a:a9:41:
8a:80:58:1b:ff:df:1f:43:30:e1:81:e7:3f:72:4d:
79:e7:bc:f0:cb:a9:a4:37:6d:ab:fb:1b:dd:c3:bc:
cd:5c:e9:5d:27:52:c6:3c:92:7b:83:72:f3:c0:84:
66:2a:07:28:bc:99:13:db:a1:fc:4f:a6:7b:48:69:
8a:df:24:b0:b1:98:d9:2d:28:47:a0:a0:20:24:a7:
d9:02:d7:de:24:c0:77:74:92:5f:d5:92:c6:3a:d5:
c6:f3:eb:f5:66:d8:ac:c4:4c:f8:60:18:17:a3:19:
81:77:d9:d1:f5:bf:55:55:40:b3:9e:55:68:21:2d:
e0:68:69:93:72:9c:78:82:3b:3a:1c:76:c2:fc:ac:
ee:24:c3:b4:b5:7f:5d:50:c0:1c:87:dc:a4:99:9a:
03:3b:73:a5:f4:af:cf:31:bf:22:4e:73:f7:a8:d7:
9f:24:f9:f9:20:b7:19:53:07:54:53:13:ba:bb:61:
98:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9F:34:3E:80:ED:E0:E4:22:DC:71:66:D8:40:D3:02:57:6D:EA:85
X509v3 Authority Key Identifier:
keyid:43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:d4:79:31:43:3e:73:ba:62:3d:bb:ff:85:01:f3:eb:1f:b2:
c7:0a:fe:2f:7a:f1:28:59:b4:49:ee:16:9a:bb:7f:36:31:97:
4d:f5:e7:f2:62:d1:a1:90:9b:bd:29:ad:83:89:0c:58:78:8f:
07:d5:be:e4:b5:f9:65:d4:cc:a6:bc:17:45:8b:3c:65:97:43:
bf:1a:6c:44:3e:e9:c4:da:d3:06:86:44:d5:ab:3b:ed:84:9a:
d1:a9:16:6f:7b:2e:a9:16:f9:32:f5:c6:66:86:ec:8a:8e:68:
b8:4d:7d:b7:b7:00:b1:51:19:8d:61:70:bf:c3:dd:45:57:90:
1c:4d:0a:9e:95:02:9b:ef:08:54:d9:0b:01:0f:09:0d:0f:b6:
5b:32:11:00:8c:cb:df:90:48:88:97:13:81:31:1b:f7:59:cf:
55:cd:df:fa:b8:98:c8:13:8f:cb:6c:e8:36:f7:c4:85:63:dd:
b5:43:0d:54:fb:ba:09:9b:0a:2e:6f:36:b1:2b:ab:e1:8f:5c:
fc:08:4f:4e:89:22:fd:05:77:7a:3e:0e:8b:18:54:56:bd:49:
2b:5d:95:08:28:2b:09:dc:74:fb:b6:b6:21:f2:74:1b:d2:0c:
c4:35:ad:d9:2c:b4:da:05:e0:8a:35:e0:4a:53:e9:b2:3d:55:
0d:c8:f2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:57:55 2026 by rpki-client