Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.mft
File: QbA1V5NRFBbxRwW15pV14JEgMcE.mft (raw, json)
Hash identifier: C2rcxKIcB/+C1YwlGrrU/rul8O8ANN/G3ryGsb5XDiI=
Subject key identifier: 44:90:E7:18:5F:EB:2F:55:81:39:25:5C:AD:81:0A:39:99:EB:44:19
Authority key identifier: 41:B0:35:57:93:51:14:16:F1:47:05:B5:E6:95:75:E0:91:20:31:C1
Certificate issuer: /CN=41b0355793511416f14705b5e69575e0912031c1
Certificate serial: 019F93C9272B07F2E1B49CD5312A0F231C1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbA1V5NRFBbxRwW15pV14JEgMcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.mft
Manifest number: 025C
Signing time: Fri 24 Jul 2026 11:01:01 +0000
Manifest this update: Fri 24 Jul 2026 11:01:01 +0000
Manifest next update: Sat 25 Jul 2026 11:01:01 +0000
Files and hashes: 1: QbA1V5NRFBbxRwW15pV14JEgMcE.crl (hash: Y2PcNJ+fIvEleqY+t8Xmzb5uW16XG2E+qOZn6sCX8XQ=)
2: jDh_e5jFCb4SZSQr89DNuyR1GmA.roa (hash: OOgQec1GLUpiwLdlG2tPvtCo/oWMRbASwbpSjxC/PqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbA1V5NRFBbxRwW15pV14JEgMcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:27:2b:07:f2:e1:b4:9c:d5:31:2a:0f:23:1c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b0355793511416f14705b5e69575e0912031c1
Validity
Not Before: Jul 24 11:01:01 2026 GMT
Not After : Jul 25 11:01:01 2026 GMT
Subject: CN=4490e7185feb2f558139255cad810a3999eb4419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:70:c3:d6:b1:a3:dd:5f:d6:5b:8f:c3:0e:8b:
b8:d2:0d:c9:a4:aa:56:14:46:b0:5b:17:c9:55:ab:
0d:a6:a1:3a:40:32:72:49:36:a6:bd:18:c6:50:28:
f2:df:8b:85:8f:9a:7a:b6:5b:89:82:bb:c6:6c:15:
c4:53:f3:bd:2e:f1:89:68:28:a9:65:3f:f2:30:bf:
2c:c1:9b:63:32:bd:d9:30:f8:91:93:8e:0b:c7:7b:
b1:c4:15:2a:ab:c3:62:23:a7:9b:95:46:5e:ed:4f:
7d:ea:18:44:2a:b6:41:f7:cb:6a:80:a6:99:b4:fe:
ba:66:9c:37:e8:14:86:ad:85:c8:59:a2:13:75:1b:
b1:02:0f:56:37:4a:ee:c5:4a:3c:c9:29:74:c4:85:
09:c9:54:12:0b:71:32:8b:f4:34:81:6c:a6:4b:c6:
a6:da:6e:38:7e:db:ff:e3:62:89:e6:db:96:de:77:
eb:19:55:c5:85:aa:cc:3d:e3:66:5b:14:fe:87:b9:
79:e8:ac:c2:4d:7a:3d:c3:80:f4:b5:5a:28:46:49:
a0:66:3f:15:95:8a:58:66:c7:62:99:69:6f:0e:a6:
ed:05:b6:4c:94:f1:c7:df:ea:89:69:5c:25:2b:2f:
65:73:a0:43:5f:55:fb:60:b4:ca:ae:87:aa:78:c4:
97:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:90:E7:18:5F:EB:2F:55:81:39:25:5C:AD:81:0A:39:99:EB:44:19
X509v3 Authority Key Identifier:
keyid:41:B0:35:57:93:51:14:16:F1:47:05:B5:E6:95:75:E0:91:20:31:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbA1V5NRFBbxRwW15pV14JEgMcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:be:1d:77:e5:25:b2:41:88:8e:10:26:ca:ea:52:06:d0:c2:
cb:de:2b:53:81:a9:6b:76:3c:82:22:23:cc:e0:5f:19:22:a1:
c0:19:7e:4d:ad:f1:c3:ba:4d:cf:f6:40:90:b4:c0:6f:4e:16:
c5:06:12:7c:d6:2d:b9:ad:02:0d:d7:45:2b:75:1e:23:35:e9:
cf:66:c0:ab:8a:f9:b9:4d:3d:ee:5e:3a:51:f9:7a:7e:cd:7e:
93:3a:24:59:57:c3:df:07:c9:25:c1:87:5c:09:48:9d:2d:a0:
97:5b:91:c7:87:b4:77:3d:2c:3d:6c:ad:9a:99:aa:70:b3:d4:
3b:66:aa:26:bb:9a:42:0a:7d:58:b3:67:cb:03:b2:6c:11:e5:
b3:45:0e:1a:5d:36:1f:bc:2c:88:ab:ea:3c:9f:77:fa:61:48:
ce:df:00:6b:8e:41:10:04:c7:ec:72:de:d1:2b:68:bc:d3:ef:
0d:06:66:a3:77:e9:ae:00:52:f5:ee:ce:8b:27:fb:4e:b4:cc:
a8:fc:dc:05:af:f6:cf:75:d7:88:b7:ce:3d:ac:db:4d:b3:91:
28:ce:6b:6d:7f:4c:25:c0:b2:7d:76:25:39:b8:36:62:82:f7:
e1:9d:0f:b6:16:12:ff:6b:66:02:b7:fd:98:70:0a:84:59:cb:
6d:fa:c7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:07:35 2026 by rpki-client