Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft
File: QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft (raw, json)
Hash identifier: Dl9/YdJcJy9V9laYd6kKuT6KE6NXMmSeU+YHfoa9YWg=
Subject key identifier: FB:E8:A1:7C:66:47:F7:85:3B:40:55:D1:69:45:C1:45:97:35:F6:AA
Authority key identifier: 42:B1:AF:96:44:C6:7B:56:89:FC:0C:A4:6A:AE:D1:69:2C:48:E6:CC
Certificate issuer: /CN=42b1af9644c67b5689fc0ca46aaed1692c48e6cc
Certificate serial: 019F8EA28D2FBAF04C3E5D0297424828D81E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft
Manifest number: 017B
Signing time: Thu 23 Jul 2026 11:00:45 +0000
Manifest this update: Thu 23 Jul 2026 11:00:45 +0000
Manifest next update: Fri 24 Jul 2026 11:00:45 +0000
Files and hashes: 1: IZkDUCigInWdeV2VhafZmgrDhxk.asa (hash: fVSaR3R0qI7sWBf1eA/UjYaOluP3hVc1HKfEAv11/p0=)
2: QrGvlkTGe1aJ_Aykaq7RaSxI5sw.crl (hash: vlJyViUxxAT2EYMyGjnn0e/64Vy9bQ3HNmtcGdpDc+o=)
3: rhdyAw8cgf05vzajT2FBLQ9vMv4.roa (hash: BXOL4wyuX+9APrFFUb6u0yh2z5n++kBGSbyspApqvFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:8d:2f:ba:f0:4c:3e:5d:02:97:42:48:28:d8:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42b1af9644c67b5689fc0ca46aaed1692c48e6cc
Validity
Not Before: Jul 23 11:00:45 2026 GMT
Not After : Jul 24 11:00:45 2026 GMT
Subject: CN=fbe8a17c6647f7853b4055d16945c1459735f6aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:35:07:fd:ef:f4:53:20:34:83:c4:a8:b3:9a:
86:1f:d8:eb:0d:93:16:17:39:6f:fb:42:07:9d:16:
c2:3e:a7:71:a7:79:96:aa:c2:02:92:10:28:3c:41:
22:88:4f:38:46:cd:f6:99:c0:4b:25:f3:e6:6f:48:
68:54:98:2b:18:b1:a2:87:fd:dd:0a:c7:a1:52:3b:
7a:53:00:96:7f:9a:7c:06:d9:b1:42:e4:79:71:47:
be:13:7d:45:87:f4:06:47:48:a4:88:49:75:71:a3:
e1:bd:2e:32:67:28:85:27:e7:ec:63:a3:8d:eb:f3:
70:eb:0e:58:f2:b7:19:fb:a6:20:3e:91:74:28:0b:
f8:d2:40:5a:c7:d0:5b:ac:5e:54:20:84:83:8d:84:
0f:fe:13:de:2e:1b:55:39:bf:3c:12:43:54:21:08:
83:8f:c2:51:e2:09:bd:74:ad:1f:c2:ac:2d:49:98:
b7:ea:dc:57:47:08:f6:ca:71:dc:58:40:2a:35:ac:
24:84:4e:24:8d:49:d4:aa:25:9b:f7:05:98:c5:e3:
8c:23:4e:81:02:ce:e4:b5:c2:51:6a:48:56:4c:51:
c8:48:ae:2d:da:97:ad:03:6c:c7:a5:6a:ec:c5:a6:
66:29:c2:17:dd:6e:b8:a4:56:45:5d:d9:66:4c:3a:
be:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E8:A1:7C:66:47:F7:85:3B:40:55:D1:69:45:C1:45:97:35:F6:AA
X509v3 Authority Key Identifier:
keyid:42:B1:AF:96:44:C6:7B:56:89:FC:0C:A4:6A:AE:D1:69:2C:48:E6:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e0:4c:54:5b:d8:42:58:45:76:31:9a:e9:cd:a3:96:b1:a3:
53:06:13:f5:b9:c2:f9:5a:85:9c:ec:71:10:68:cc:fc:d6:1c:
9b:6b:bf:3e:59:81:dc:27:9c:d3:c5:78:0b:e4:8b:ef:b3:c1:
85:71:63:b3:bc:b4:8c:49:43:4a:f1:6e:0e:e6:9c:f4:5c:e8:
fe:f0:0c:f5:3a:c8:d2:d1:ff:ae:4f:44:bd:e2:24:c0:ab:e0:
0d:1c:ab:a3:91:5d:4f:52:9a:15:b8:bc:0f:7c:02:cd:a9:9f:
c4:e8:75:20:ae:85:52:8c:78:60:68:7d:df:36:a7:3e:7e:95:
78:04:2d:da:e8:16:9d:40:d2:b2:f5:85:fe:8e:c8:31:00:86:
f4:db:c5:5b:18:71:24:53:b4:f9:43:b0:19:41:cb:28:5e:1f:
bb:14:f6:74:fb:35:ae:53:f9:fd:91:c5:3d:6c:8e:3e:1d:f1:
2b:97:b3:6e:a1:e7:6b:0c:aa:41:f8:eb:8c:ca:df:ea:dc:3a:
ad:c1:63:3c:e1:a2:5e:fd:24:c1:ee:a9:ac:ae:c6:19:0b:06:
18:f4:4b:24:a1:4d:00:84:07:f0:da:06:f1:06:b1:70:db:ff:
2c:1f:50:51:36:0f:86:c1:59:38:72:d0:b2:9b:74:3e:e1:2b:
22:50:36:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:23 2026 by rpki-client