Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
File: qyftHOpDIcScPKEPOv-v29rVMsI.mft (raw, json)
Hash identifier: 1XRiU/TcvXPUyfL8EQCecZfgt54Hbf/4bjl5ZVKuBLA=
Subject key identifier: CA:B5:A9:41:89:95:88:4B:AB:CC:8D:98:0A:27:7E:69:AB:84:10:33
Authority key identifier: AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
Certificate issuer: /CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Certificate serial: 019F91A446BABC32942570BC22B0E4295423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
Manifest number: 19CE
Signing time: Fri 24 Jul 2026 01:01:30 +0000
Manifest this update: Fri 24 Jul 2026 01:01:30 +0000
Manifest next update: Sat 25 Jul 2026 01:01:30 +0000
Files and hashes: 1: PdSSD1pY2R8sHhODVspC8pD1XNg.roa (hash: Hdy0mlxbyoY3S5V4w6LQ+HVJLICaMsGMYmJLwRUw9C8=)
2: gQS_1Ytr-O-IsbRGOtGTDvNNYeY.roa (hash: s9JwwcRfagDOyb+VnD4SIPFLvOjPpaDEvmlIEjUU6Jk=)
3: qyftHOpDIcScPKEPOv-v29rVMsI.crl (hash: Qct7QIxw+IbeHrxCfXhHFenOxt0FAABoOJvz4hHhPpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:46:ba:bc:32:94:25:70:bc:22:b0:e4:29:54:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Validity
Not Before: Jul 24 01:01:30 2026 GMT
Not After : Jul 25 01:01:30 2026 GMT
Subject: CN=cab5a9418995884babcc8d980a277e69ab841033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:66:bd:17:44:5d:ee:f6:88:d2:b5:ab:3b:d2:
60:7e:2f:bd:ef:e9:50:d0:41:0c:13:ac:2b:c2:bc:
ec:eb:81:26:6f:08:41:a7:90:67:8f:dc:12:a3:83:
07:4c:0c:05:03:14:2f:97:8e:8a:0e:e3:d9:ee:de:
df:00:63:b0:0b:d0:ca:13:b4:59:bd:bb:c0:ab:ea:
c6:7a:9f:cc:f3:db:0a:a1:fe:53:88:b2:7e:a2:72:
84:2d:f5:18:e3:e8:0a:87:bb:fe:ee:9c:84:66:20:
35:51:65:27:2c:d7:13:3b:1a:67:0f:6e:6a:64:6b:
bb:3d:71:cf:db:9b:69:2d:ae:52:2e:79:5f:98:d0:
b0:bf:a2:9b:41:ea:b8:53:09:42:78:a2:5d:ea:9e:
e8:29:e8:08:a5:1b:e3:1a:98:e9:8e:43:57:fa:2d:
7c:25:d9:ee:1e:56:6c:b2:b9:50:11:32:da:84:bf:
93:47:46:52:93:76:38:9a:da:86:3b:f3:81:3d:5b:
d3:1d:ad:35:25:5d:e9:80:9b:ad:98:8c:98:33:5f:
c2:19:0b:ce:3e:57:34:8c:bf:9f:e5:b7:2b:8a:6c:
cb:00:98:2f:86:b6:bc:47:0a:fa:d7:fc:e3:47:e6:
24:dc:7a:f1:2c:b3:f4:81:a6:00:49:6a:82:86:f8:
79:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B5:A9:41:89:95:88:4B:AB:CC:8D:98:0A:27:7E:69:AB:84:10:33
X509v3 Authority Key Identifier:
keyid:AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:08:d8:5a:81:c1:35:c0:ee:70:55:d0:52:0c:1e:b7:30:24:
6a:31:48:04:c8:f2:87:a8:2f:2a:18:61:d2:86:69:e5:2d:78:
ec:3f:8e:41:29:05:c6:58:bc:a7:08:7e:d8:08:70:e4:90:52:
a5:75:e8:37:f0:9d:40:28:df:81:f2:ee:70:88:1b:87:f5:39:
2c:d4:bc:4b:a7:aa:d9:ce:99:ca:a6:40:e4:da:83:96:e5:09:
d1:2d:5e:b6:98:78:02:50:05:94:a3:64:ac:cb:1e:e3:ec:1a:
3a:0b:4c:6b:15:b5:c1:b7:f1:a9:c6:03:4c:87:6a:f0:36:cf:
df:8b:01:fa:a9:d4:31:4b:2b:64:e9:29:e8:4f:8d:9d:18:7f:
bc:ce:f0:3a:0d:69:c0:fa:66:a5:53:0c:7b:d2:bd:be:1c:bd:
e5:8f:dc:35:64:d8:e3:54:33:47:a8:69:d9:27:58:a6:15:34:
eb:65:7e:b9:0e:d2:d4:3a:41:3e:03:af:9c:f0:98:22:60:c6:
32:f4:0c:26:c9:ce:fc:da:a7:58:82:74:2b:ae:f9:a6:ea:6a:
23:e2:14:2b:33:83:f8:d6:ac:c2:a6:30:5d:88:5b:f1:54:48:
16:26:b4:b7:46:03:63:e9:02:21:c4:52:75:4e:32:d5:ed:35:
e7:25:62:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:25:05 2026 by rpki-client