Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/QbiIzsBviqWb7MzHs6lwGKu3PQs.mft
File: QbiIzsBviqWb7MzHs6lwGKu3PQs.mft (raw, json)
Hash identifier: cC05xLjQITAxquiZMxbgS2VVmDzj0dp6ZZfg384LDH4=
Subject key identifier: A3:10:82:40:67:0D:39:BC:1F:69:62:8F:CF:16:BE:14:D1:87:38:2E
Authority key identifier: 41:B8:88:CE:C0:6F:8A:A5:9B:EC:CC:C7:B3:A9:70:18:AB:B7:3D:0B
Certificate issuer: /CN=41b888cec06f8aa59becccc7b3a97018abb73d0b
Certificate serial: 019F935B98221BBA618DA915C365317EF067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbiIzsBviqWb7MzHs6lwGKu3PQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/QbiIzsBviqWb7MzHs6lwGKu3PQs.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:01:21 +0000
Manifest this update: Fri 24 Jul 2026 09:01:21 +0000
Manifest next update: Sat 25 Jul 2026 09:01:21 +0000
Files and hashes: 1: QbiIzsBviqWb7MzHs6lwGKu3PQs.crl (hash: 5Ty4fCOmmdCPdOK4KRMnz7SgwI5fc45YamsAXUUjG/M=)
2: _QiQmroF9P3WbIwXaXOwVu2gju0.roa (hash: 9+ii97HZuPAGD+TGVcgVZZlv5SLZbzjKViVe7ESoXRc=)
3: kOQCx-Wt3RfUtND4HBeOaf-__Ao.roa (hash: 6wtyOlYKb3vdJIPgCwFvXGUrxNL2Wzr22WnpzvrLq54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/QbiIzsBviqWb7MzHs6lwGKu3PQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/QbiIzsBviqWb7MzHs6lwGKu3PQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbiIzsBviqWb7MzHs6lwGKu3PQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:98:22:1b:ba:61:8d:a9:15:c3:65:31:7e:f0:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b888cec06f8aa59becccc7b3a97018abb73d0b
Validity
Not Before: Jul 24 09:01:21 2026 GMT
Not After : Jul 25 09:01:21 2026 GMT
Subject: CN=a3108240670d39bc1f69628fcf16be14d187382e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b2:f8:f0:b9:e8:d5:8a:01:31:55:80:e9:da:
f6:d0:9a:f6:16:22:a2:6f:d3:6b:eb:f5:86:fe:56:
a8:77:fd:db:44:1e:b7:4c:a1:e1:2f:b8:51:a6:b9:
e9:02:24:6d:2f:05:41:f6:fb:cd:3e:7d:33:47:43:
c8:6f:86:5d:d6:9f:cf:4e:68:64:c2:39:54:4b:cf:
4c:97:c6:f1:30:e8:6e:c5:d1:30:43:17:f0:39:85:
05:bc:74:30:db:67:91:ec:b3:a5:f7:c9:e5:5d:bb:
e2:c6:79:2e:c5:a9:12:e3:1f:66:d2:d0:28:11:86:
26:37:30:57:66:55:42:fc:f3:0f:4e:48:0c:0c:ec:
2b:4a:36:54:1b:ba:9d:69:8f:5b:a6:8f:b3:c4:bb:
9e:c2:3a:83:59:01:df:2a:6c:d4:d6:5e:b5:3d:66:
47:45:a5:b6:20:5b:68:07:49:ee:be:b6:6a:16:05:
52:b0:d8:99:e0:3e:6b:13:ed:32:7c:1a:bc:36:b1:
31:2f:1b:63:41:63:3b:51:83:5e:0f:58:65:3c:fb:
f3:74:e0:55:0c:1d:47:16:b6:92:ad:9d:aa:45:3e:
bd:64:b0:ae:50:75:90:62:27:aa:ab:67:b9:0b:57:
ef:71:18:cf:46:dd:d3:68:ef:8e:ba:65:a3:a4:16:
4f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:10:82:40:67:0D:39:BC:1F:69:62:8F:CF:16:BE:14:D1:87:38:2E
X509v3 Authority Key Identifier:
keyid:41:B8:88:CE:C0:6F:8A:A5:9B:EC:CC:C7:B3:A9:70:18:AB:B7:3D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbiIzsBviqWb7MzHs6lwGKu3PQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/QbiIzsBviqWb7MzHs6lwGKu3PQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/QbiIzsBviqWb7MzHs6lwGKu3PQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:72:45:b4:7a:1b:fc:03:46:ad:8b:a8:8d:19:14:3c:ea:61:
4d:6f:a6:86:fc:90:fc:43:18:2f:d3:c5:00:1f:f1:12:3c:74:
b8:b1:21:b5:db:0d:6e:c1:48:b0:1a:9b:94:1f:30:e6:d9:0d:
4b:73:31:81:0a:5d:66:00:62:e2:08:b6:1c:45:98:ca:91:e2:
87:29:87:bc:9d:5a:2b:e4:6d:e8:0e:70:2b:1c:06:52:9a:2a:
a4:2a:67:06:36:1e:53:f3:19:eb:0c:69:5e:f0:aa:69:74:c6:
cf:ec:93:06:0e:a6:53:b4:a5:97:8c:ed:6c:61:66:38:c2:09:
55:d1:5e:9b:4a:f7:5a:4c:f7:c5:ac:0b:39:9f:b4:f0:c1:3f:
ac:74:d7:9e:5b:3a:1c:12:bd:07:2d:d3:ea:5f:8d:63:eb:28:
19:22:37:77:ab:64:75:db:18:67:a2:5b:6c:f9:47:d3:0c:8e:
21:bf:2a:af:00:71:f9:d3:ad:0d:96:00:e7:87:4c:ad:bc:fc:
7a:12:49:1a:40:3f:dd:53:10:d5:eb:6c:b5:35:1b:8f:76:73:
8f:7d:fe:b8:9b:62:d7:16:63:af:61:44:89:c4:97:e8:7b:89:
5f:9c:85:e5:99:da:fe:b1:3d:e0:a2:79:74:51:aa:f6:e5:f6:
2b:07:51:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:32:17 2026 by rpki-client