Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft
File: qltGOxeiXraN6recsPmJ79fkihU.mft (raw, json)
Hash identifier: LCtkkKnPe4q/XwbxQ34eMdEdE36tfxwgk11gacZ8JNM=
Subject key identifier: D9:F5:EB:EC:85:E2:5B:9E:81:88:8F:FE:64:C7:88:4F:E4:B6:46:85
Authority key identifier: AA:5B:46:3B:17:A2:5E:B6:8D:EA:B7:9C:B0:F9:89:EF:D7:E4:8A:15
Certificate issuer: /CN=aa5b463b17a25eb68deab79cb0f989efd7e48a15
Certificate serial: 019F8EA25A5F3F470D1D876E1CE99D806A38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qltGOxeiXraN6recsPmJ79fkihU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft
Manifest number: 0272
Signing time: Thu 23 Jul 2026 11:00:32 +0000
Manifest this update: Thu 23 Jul 2026 11:00:32 +0000
Manifest next update: Fri 24 Jul 2026 11:00:32 +0000
Files and hashes: 1: bN_JbzQj2A8IvSsLV68QsClGiQY.asa (hash: xolsuAJOBeuMvNRpodvDEbIRMgGi/Im1/gCqvItApmY=)
2: qltGOxeiXraN6recsPmJ79fkihU.crl (hash: ZGJEfpItkRFXsnfy5bGDKsDKT7nNenNyY5/vhcCX50k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qltGOxeiXraN6recsPmJ79fkihU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:5a:5f:3f:47:0d:1d:87:6e:1c:e9:9d:80:6a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa5b463b17a25eb68deab79cb0f989efd7e48a15
Validity
Not Before: Jul 23 11:00:32 2026 GMT
Not After : Jul 24 11:00:32 2026 GMT
Subject: CN=d9f5ebec85e25b9e81888ffe64c7884fe4b64685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a7:ce:61:09:c8:45:84:95:d0:18:5b:be:60:
c5:90:fa:0e:fa:7c:a2:2a:68:92:dd:07:71:f4:9b:
ab:7d:5e:87:46:ed:f0:f6:76:75:6a:4c:e8:a3:9f:
7f:15:e2:e9:96:be:ca:5e:1f:02:10:2a:23:9b:cb:
01:1a:58:c8:d1:ed:76:9e:b6:92:ab:4f:2e:7e:25:
5c:b7:f0:ac:e7:4b:80:46:f6:d3:01:69:e8:38:ff:
29:99:be:91:e0:37:48:ff:f7:57:fa:bb:ce:6c:8a:
7b:3d:00:65:f4:94:03:ad:d5:78:c7:46:27:df:26:
02:0c:1a:13:e0:5e:c5:1e:0d:31:aa:a7:fa:a7:17:
1c:d3:04:f4:8d:0f:01:93:e9:83:6c:d6:0d:b0:5c:
ab:95:79:f8:c1:a4:6a:c4:4e:18:e9:ab:4f:b3:f5:
23:44:b5:cf:70:cc:f0:a6:15:ea:28:b5:57:a8:e5:
76:3e:88:75:45:37:c6:8b:80:2a:20:dc:1c:4c:66:
6d:cc:6a:c0:ba:fa:cd:b8:3d:b1:4c:96:db:a2:3f:
6c:d0:4e:ee:d1:7e:8d:72:16:02:62:08:eb:96:83:
18:2e:92:21:06:72:3f:02:25:fd:69:18:60:e3:61:
62:a6:4a:44:6e:39:eb:40:e9:6a:f6:4b:46:48:db:
f8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F5:EB:EC:85:E2:5B:9E:81:88:8F:FE:64:C7:88:4F:E4:B6:46:85
X509v3 Authority Key Identifier:
keyid:AA:5B:46:3B:17:A2:5E:B6:8D:EA:B7:9C:B0:F9:89:EF:D7:E4:8A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qltGOxeiXraN6recsPmJ79fkihU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:3a:46:9c:54:39:e7:4b:07:89:be:a0:fe:8e:87:81:48:80:
a3:b1:84:a6:d2:53:26:69:67:10:1b:81:9c:2c:60:20:a3:09:
ae:ae:40:2d:07:93:e7:70:a6:f7:90:8f:ce:34:54:04:a9:a0:
3e:c8:db:22:2f:6c:44:b8:00:f1:87:12:2a:3f:40:cd:5a:61:
43:b5:51:b1:c6:c9:cf:62:1e:49:81:1b:2d:d8:e1:59:6a:76:
95:d4:96:e9:b6:d5:84:71:7a:6c:6d:58:c3:a5:4e:5e:61:ae:
0c:e6:7e:80:11:17:05:32:50:90:c5:0a:30:a0:8a:20:97:1a:
b8:b2:3e:ed:f2:c3:4d:2a:a1:f8:62:59:5c:78:bc:ef:36:74:
0a:e4:ae:36:30:78:2d:99:85:92:f3:73:0b:9e:40:a6:85:8c:
c3:f6:2b:77:aa:2b:64:ed:be:b0:a1:71:a6:b5:f6:a8:1d:c7:
95:7a:08:04:d7:96:b6:46:6d:49:6c:32:5f:81:4b:ed:f2:10:
57:59:c1:8c:08:52:6d:8b:76:e0:ce:8f:9d:30:94:7a:f0:d3:
07:2f:3b:27:5f:06:ac:34:37:b5:49:0f:90:90:81:dd:4b:0c:
88:ad:c9:5e:1d:1f:b5:bd:12:f9:af:11:b2:35:65:76:ce:7e:
97:28:6f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:02:51 2026 by rpki-client