Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
File: qHxnPzWntwWmtCTTORT6OS07li4.mft (raw, json)
Hash identifier: xC0GNlqY3zgqFroIULDa/LvE7ExbgU1yjxUfHUkSM4U=
Subject key identifier: 5E:48:48:A1:CA:B0:A4:9E:35:77:5B:4F:EB:44:71:D0:0C:2D:ED:AB
Authority key identifier: A8:7C:67:3F:35:A7:B7:05:A6:B4:24:D3:39:14:FA:39:2D:3B:96:2E
Certificate issuer: /CN=a87c673f35a7b705a6b424d33914fa392d3b962e
Certificate serial: 019F94DBAF399BC393C02BD4823DF87795DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHxnPzWntwWmtCTTORT6OS07li4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
Manifest number: 0C43
Signing time: Fri 24 Jul 2026 16:00:52 +0000
Manifest this update: Fri 24 Jul 2026 16:00:52 +0000
Manifest next update: Sat 25 Jul 2026 16:00:52 +0000
Files and hashes: 1: MdQ19d3eFkD78fJxuXq5iy-2rpM.roa (hash: rp9j2xxR/tRXFv1++j74kJ2PghVMO1/nSR5xC0/6LuE=)
2: qHxnPzWntwWmtCTTORT6OS07li4.crl (hash: 0nrpDESigqg0C7vSHvb0FAnCz7Xr6szxrM1eg53mYVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHxnPzWntwWmtCTTORT6OS07li4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:db:af:39:9b:c3:93:c0:2b:d4:82:3d:f8:77:95:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87c673f35a7b705a6b424d33914fa392d3b962e
Validity
Not Before: Jul 24 16:00:52 2026 GMT
Not After : Jul 25 16:00:52 2026 GMT
Subject: CN=5e4848a1cab0a49e35775b4feb4471d00c2dedab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:67:b6:e4:30:9e:81:6b:fb:c4:bf:33:3c:0f:
69:58:95:ae:1c:b2:66:76:6f:8d:5d:ee:7c:ba:1e:
c7:21:58:ba:43:a8:d4:9f:ae:8b:e3:22:bc:a4:41:
4e:e2:d3:4c:72:71:37:1a:79:ed:9b:35:cd:eb:90:
e9:5e:86:57:ff:45:8d:fb:c3:89:ce:34:05:71:01:
40:ef:af:6f:04:d4:d1:d3:a9:b4:b8:d6:7c:a9:e5:
49:e1:8a:c4:a7:23:08:fb:c9:3c:71:ff:a3:12:f7:
50:07:20:cd:dd:34:45:26:c0:1a:1c:b4:f1:a7:d5:
e3:e1:2c:a3:3b:07:5b:86:30:0d:10:cb:51:16:d3:
88:35:27:ff:1a:4d:2f:aa:dc:73:97:d7:e2:5b:a3:
85:d1:eb:42:bb:38:9b:a8:9b:3f:e9:e0:39:cc:af:
6b:b3:2a:8b:43:1f:3b:74:d5:d3:6a:c2:60:b7:ef:
25:3f:62:84:75:72:c1:d2:d6:98:a7:35:70:4f:16:
38:e2:b7:5b:8c:f0:c2:ac:f8:3f:c2:69:fa:8e:5e:
62:80:d7:a1:f6:c6:55:07:ad:55:05:c0:c1:63:da:
d7:16:34:a7:7d:29:a6:52:83:db:aa:a5:bc:41:a5:
6a:1f:f2:98:c7:18:4d:13:7d:28:fe:84:b9:1c:0f:
92:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:48:48:A1:CA:B0:A4:9E:35:77:5B:4F:EB:44:71:D0:0C:2D:ED:AB
X509v3 Authority Key Identifier:
keyid:A8:7C:67:3F:35:A7:B7:05:A6:B4:24:D3:39:14:FA:39:2D:3B:96:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHxnPzWntwWmtCTTORT6OS07li4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:7d:12:5a:9f:37:0a:de:3b:ee:9f:65:dd:69:77:e6:76:e9:
60:34:98:75:1e:de:bb:b0:7e:b4:71:35:fa:1e:59:1b:9e:04:
dd:25:07:53:ba:89:31:33:b8:7f:a9:db:ca:fd:db:62:02:04:
02:86:00:7c:12:b8:b8:11:9e:da:c2:f8:74:47:fa:dc:57:28:
f2:fd:12:36:15:a2:b6:5b:65:9c:3d:d6:e1:fc:0e:52:3b:4b:
da:34:b6:1e:c6:db:c8:f1:4e:27:f6:57:fe:89:2b:f1:9b:cb:
19:c9:a3:dc:68:1c:3c:b5:a8:cb:6d:7c:19:a5:c0:a7:b4:24:
77:cc:f2:8c:35:75:bb:fc:86:b2:6b:ad:95:36:33:6b:65:8e:
ea:ac:ec:81:d9:21:6d:9d:e7:5c:31:c1:cc:95:d1:b5:1e:d9:
1e:5f:d9:42:c0:0d:7f:dc:1b:6f:95:6d:79:4a:23:ce:df:e4:
dd:58:1d:25:ad:af:50:9a:5b:30:87:98:ad:e5:01:74:46:ce:
48:bf:d3:82:80:3e:1c:a9:44:df:7f:27:23:89:30:74:6d:ad:
ee:d8:d2:c5:a4:09:09:bc:51:33:15:cf:66:2a:9a:56:df:05:
83:f9:84:7e:5d:db:1d:75:80:76:a8:82:3b:f6:4f:cd:30:b1:
13:1d:45:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:13:54 2026 by rpki-client