Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
File: qd_ImBI0BQeiouHnTRGCTe-BPzk.mft (raw, json)
Hash identifier: jIAwV4OgX+VJawr1vlyLZAimoqnU/Z1wCB+RdWgHEBY=
Subject key identifier: F3:DC:65:E7:19:2F:6E:35:93:7E:84:92:41:6D:F7:4F:FC:DD:1A:49
Authority key identifier: A9:DF:C8:98:12:34:05:07:A2:A2:E1:E7:4D:11:82:4D:EF:81:3F:39
Certificate issuer: /CN=a9dfc89812340507a2a2e1e74d11824def813f39
Certificate serial: 019F9323FD4069B55358ED9A5165BFD31677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
Manifest number: 195A
Signing time: Fri 24 Jul 2026 08:00:37 +0000
Manifest this update: Fri 24 Jul 2026 08:00:37 +0000
Manifest next update: Sat 25 Jul 2026 08:00:37 +0000
Files and hashes: 1: VyKqzxZ8-5ygWJNcg4AE05d6_mE.roa (hash: eTq1Nu+al+6xzFG/LttgMYk2x81Ow2Yalg2eI2MZJbI=)
2: qd_ImBI0BQeiouHnTRGCTe-BPzk.crl (hash: +U8J3N7aQZERHSTflNG/KVsVqDVVUDvPLGkvuAyuTqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:fd:40:69:b5:53:58:ed:9a:51:65:bf:d3:16:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9dfc89812340507a2a2e1e74d11824def813f39
Validity
Not Before: Jul 24 08:00:37 2026 GMT
Not After : Jul 25 08:00:37 2026 GMT
Subject: CN=f3dc65e7192f6e35937e8492416df74ffcdd1a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8e:4d:c4:d7:44:4a:3d:1e:aa:e8:ec:f6:6c:
bb:e3:b6:7b:f5:4c:53:73:b4:92:e2:36:b8:aa:d4:
4e:0c:dd:c9:c8:ec:1b:13:d9:1c:74:34:38:e0:07:
a2:ef:fe:47:fb:af:3b:c8:6e:55:ab:e3:f4:02:47:
26:08:3d:c9:a8:88:fe:27:67:17:53:bd:8e:95:d9:
12:49:49:0b:dc:70:15:06:0d:17:4b:24:3f:83:6f:
b2:5d:65:76:f0:38:cd:6d:bf:6f:28:05:8e:26:68:
3a:d1:4e:96:d8:3e:09:a7:ed:5a:52:99:1e:39:22:
68:6a:25:7d:f7:7e:e2:e1:ef:77:42:33:10:86:15:
54:1c:d5:8d:7e:db:f1:df:d4:00:55:2a:e7:f6:d0:
95:ad:ac:2d:7a:2a:55:8c:e9:2c:86:b9:82:13:e3:
a1:3b:b8:41:83:e9:64:a6:25:5d:83:73:98:05:7e:
8c:2c:d6:11:89:4a:27:99:32:61:f6:fd:d7:a7:2b:
3a:01:d5:67:da:d4:3a:ab:68:a9:24:35:56:c9:a6:
f8:90:90:99:40:34:51:c5:f0:96:49:7f:26:b8:8e:
83:f8:f2:10:73:01:1c:96:1f:2f:18:64:d1:2a:86:
cb:f8:30:56:4c:3b:52:0d:29:e8:61:1b:fb:fe:0d:
f6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DC:65:E7:19:2F:6E:35:93:7E:84:92:41:6D:F7:4F:FC:DD:1A:49
X509v3 Authority Key Identifier:
keyid:A9:DF:C8:98:12:34:05:07:A2:A2:E1:E7:4D:11:82:4D:EF:81:3F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e3:91:6c:f1:e2:24:2c:9d:8c:24:36:35:e0:7a:26:1d:d6:
7b:21:8a:23:d0:2f:70:12:64:18:14:a9:4c:77:85:75:03:96:
eb:39:0c:c0:e2:32:e7:f7:41:ba:49:a8:b2:f0:28:9a:eb:8c:
08:03:69:37:73:da:41:1a:3b:97:f9:ff:f5:22:83:52:59:a1:
47:08:07:2e:97:fd:39:1b:5f:7a:78:85:e4:a8:19:62:c7:ba:
7f:37:e2:9e:b9:9e:b3:c1:4a:13:62:37:2f:2c:6c:4c:4e:fe:
b1:26:4c:91:e4:48:2b:bf:c1:3d:d1:53:86:2d:6a:91:aa:43:
bf:a5:2a:49:75:e4:14:80:95:7e:ef:ef:bd:4f:8e:5f:69:09:
7a:16:25:1a:cd:83:09:6f:55:2a:06:75:63:55:be:58:bb:be:
49:48:4c:8f:88:3d:bf:12:12:8b:db:e8:a2:3c:6b:9f:68:e1:
4a:20:17:91:ff:03:20:ca:f8:89:02:6f:88:0d:a0:0b:98:5c:
a1:d3:53:16:97:fd:ba:50:33:55:00:a4:5d:06:ac:86:f1:e0:
6d:20:f7:55:56:e0:19:f4:84:aa:ee:76:5a:d7:de:31:b4:18:
38:74:14:72:ea:1e:2e:70:ba:bb:ae:99:12:96:80:21:b7:38:
25:ba:3e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:21:54 2026 by rpki-client