Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
File: qYB_bVDZfZcdzy4uUGTpuQets-w.mft (raw, json)
Hash identifier: SdfvfG+cKLIrEHOK0VZLnanmazzcPo5znkxGN7YM4qo=
Subject key identifier: 9E:04:23:75:81:16:B5:CA:26:0F:9C:68:76:C4:15:F4:14:AD:37:8A
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial: 019F916DCC9C2B72742E5987076AEF9CEB55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
Manifest number: 19F3
Signing time: Fri 24 Jul 2026 00:01:59 +0000
Manifest this update: Fri 24 Jul 2026 00:01:59 +0000
Manifest next update: Sat 25 Jul 2026 00:01:59 +0000
Files and hashes: 1: MUooZ1Ov9expLMpavng4DbjsbpE.roa (hash: eswDXNZ/AXtbqsm+yzDr7T0oqWysTnskZK6VmBCDemc=)
2: qYB_bVDZfZcdzy4uUGTpuQets-w.crl (hash: NqGcPOesBz+2DjQO+NB/CaSy68vznSlT0PhQ5okMNFM=)
3: rX1Ss2CK_g4_GFrLEnzxw6wGXIU.roa (hash: cw+3g+tlflCYhhvX9gDsDKPmWsCROnLpk0xinhWv2AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:cc:9c:2b:72:74:2e:59:87:07:6a:ef:9c:eb:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Validity
Not Before: Jul 24 00:01:59 2026 GMT
Not After : Jul 25 00:01:59 2026 GMT
Subject: CN=9e0423758116b5ca260f9c6876c415f414ad378a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:66:01:19:86:96:7e:75:18:61:0a:1f:9a:c4:
c8:25:c2:ea:06:70:53:78:b3:d3:5b:91:dc:57:0c:
35:1f:da:90:da:28:b6:44:5a:bd:7a:84:de:06:9d:
dd:9d:83:7f:c0:31:eb:ec:6c:0f:d0:6b:c8:fb:b8:
32:9d:1a:1d:b5:69:26:4f:52:cc:ae:24:ff:8a:86:
55:3f:f5:17:ab:e6:b3:dd:f6:50:ec:15:92:c4:1d:
4d:7a:6e:0c:24:c0:aa:48:82:5a:b2:92:ef:96:8a:
38:26:ac:94:d2:9e:5e:06:ae:f8:44:6b:76:55:f3:
3c:05:8c:b5:91:dd:bd:30:38:93:31:a8:b9:08:96:
dc:27:e7:c0:79:3a:be:83:20:b0:fd:a1:b5:cb:53:
dc:4a:18:33:fc:84:91:d5:b1:77:a2:61:10:d3:e7:
e2:40:8c:09:2c:d7:93:ed:0e:46:bd:5f:59:77:b5:
30:b1:b9:14:b4:fd:2d:cf:20:e0:b2:c1:a5:d0:1d:
57:8a:42:b2:2a:28:2a:b3:a2:9e:a0:d8:6d:e5:88:
ac:c7:99:6b:20:68:ce:0a:7f:5d:bd:35:d8:fa:aa:
ef:90:7a:0f:f8:3a:7d:67:7a:db:ee:a5:d9:87:4b:
17:bd:11:ad:9a:7e:5d:ca:05:ba:1e:dd:d1:24:e8:
e5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:04:23:75:81:16:B5:CA:26:0F:9C:68:76:C4:15:F4:14:AD:37:8A
X509v3 Authority Key Identifier:
keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:96:65:94:87:91:5e:73:07:41:57:e9:ee:c4:8c:14:69:0c:
d7:92:dc:43:f1:ee:47:5c:c0:b5:68:12:b7:2f:cc:c6:14:6a:
aa:49:07:3d:8a:6c:05:c9:74:4a:4b:9b:91:f2:79:da:f5:4c:
40:b4:07:be:8c:4f:fa:23:f7:2e:67:01:82:a4:92:97:d9:7d:
14:d1:cd:d6:16:f2:80:f2:f0:d8:1b:62:7b:39:07:01:00:53:
61:e9:4e:f2:46:ee:fd:06:ea:90:de:44:30:90:a9:e7:19:39:
88:af:6e:40:b3:f3:f8:75:1c:eb:ac:47:9d:74:90:aa:7e:34:
b0:1e:47:b1:3d:5c:ff:81:c2:3c:52:39:2f:51:62:a3:59:b2:
94:8e:8b:3c:7a:21:64:f7:f5:55:be:14:74:ec:a7:8a:d0:9c:
13:be:8a:65:05:3e:7e:9c:a0:2e:19:40:af:39:11:aa:4a:5c:
71:07:ad:10:78:a8:72:56:54:d1:8a:64:39:a6:02:54:a1:6b:
ed:d4:00:24:3c:c3:fc:87:ac:dc:bc:bc:d4:91:78:74:f7:e7:
e8:de:3b:09:09:fb:d1:f8:24:d7:1a:0b:2d:63:9c:57:db:bb:
4b:2f:5f:fd:4d:31:95:e2:ed:a3:40:fe:b2:b4:ee:96:35:d1:
6e:9e:6c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:41:21 2026 by rpki-client