Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
File: QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft (raw, json)
Hash identifier: c9Sup6g1Y/B4T5et8RrILtWQ4T43APfqUlI+3cUrTwI=
Subject key identifier: 2A:65:5D:1D:B8:A9:C5:1C:34:80:AB:E3:1F:4A:E2:DB:54:D8:D2:2B
Authority key identifier: 41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4
Certificate issuer: /CN=4137af08f19aa15bed3f41be62b36303dcc7dcf4
Certificate serial: 019F93C9683679B0C8C34FB6C6B0AFAD6D1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
Manifest number: 04DF
Signing time: Fri 24 Jul 2026 11:01:17 +0000
Manifest this update: Fri 24 Jul 2026 11:01:17 +0000
Manifest next update: Sat 25 Jul 2026 11:01:17 +0000
Files and hashes: 1: QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl (hash: sV/UY4Y6NxWrKnAiCCvW/4kPHMWexXWmjr5dbZ/CDmI=)
2: fg1dJ5KT1fZ2mElPDebHpNVgR8U.roa (hash: Q8kFLKZwqJa3BTNxu/acXdMWWvmB0nDo3x9ALn3COiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:68:36:79:b0:c8:c3:4f:b6:c6:b0:af:ad:6d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4137af08f19aa15bed3f41be62b36303dcc7dcf4
Validity
Not Before: Jul 24 11:01:17 2026 GMT
Not After : Jul 25 11:01:17 2026 GMT
Subject: CN=2a655d1db8a9c51c3480abe31f4ae2db54d8d22b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:29:b5:2c:88:db:51:cd:a1:42:ea:25:dc:0d:
3d:db:95:6b:e5:1b:1e:a7:01:73:63:bb:cf:38:86:
d9:fe:b3:97:a7:b9:f2:e0:0c:95:ee:00:0d:a2:b0:
33:3f:d0:91:ad:87:2b:f6:38:51:dc:b9:72:14:38:
90:82:cf:12:1c:8a:40:a0:f6:4a:a0:76:96:a1:91:
ec:16:36:56:c4:de:7b:db:ea:e8:a8:05:4a:8e:96:
07:38:9f:de:f1:84:39:9a:08:22:95:0c:2c:b6:f9:
f8:9c:64:af:c3:a1:2c:bd:eb:1a:0c:c4:7b:b3:31:
93:1b:3a:ed:c6:d1:ee:61:c0:d8:e3:c4:34:54:da:
94:93:15:72:a1:a4:cf:7d:dd:87:51:7e:69:34:20:
e6:94:c6:d1:69:43:67:b1:b4:06:01:4e:18:fb:0f:
d9:f7:a6:a4:bf:16:f3:d8:11:0b:66:a9:30:16:18:
6e:c2:f4:34:67:9d:7e:e8:de:5d:9c:df:cf:63:8e:
c2:28:16:1d:45:8b:37:07:1a:1f:9c:8c:85:a4:b9:
8c:0c:1c:e1:20:7f:7f:0d:45:1e:0e:c3:a4:18:01:
78:90:75:5e:30:cb:82:51:1c:66:ce:e6:28:0a:f2:
ed:81:a6:06:1d:90:45:66:ed:fc:b9:3e:0e:30:7a:
9c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:65:5D:1D:B8:A9:C5:1C:34:80:AB:E3:1F:4A:E2:DB:54:D8:D2:2B
X509v3 Authority Key Identifier:
keyid:41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:75:de:5b:03:ca:5d:c0:d4:fa:30:3f:8b:56:f1:d5:92:e6:
c3:bb:bf:7b:29:81:db:6d:88:70:25:e4:f7:95:c8:57:fd:d8:
b4:a6:0e:16:26:15:bb:c5:4c:58:b9:6f:2b:85:89:94:e3:65:
f7:7a:8e:28:3a:30:43:1e:4d:8e:e0:ac:4d:d8:3e:f5:8d:68:
63:af:8f:53:0f:af:36:51:07:94:48:50:8b:ad:0b:b7:dd:03:
10:14:d2:1d:48:8b:89:20:c5:85:fb:b4:d5:42:93:fb:66:47:
5d:76:ac:f6:04:93:bc:92:6f:b3:6f:94:84:02:ee:56:c8:9b:
fb:ab:a6:2b:09:83:e8:f3:a4:b1:d2:60:bc:0e:b3:3e:62:42:
4e:f1:79:f4:60:91:0c:4b:30:d8:1d:54:aa:65:6c:08:a3:2b:
f7:f1:22:39:98:17:dd:57:e1:ed:47:4a:86:42:c5:45:0b:0c:
9d:76:30:17:78:e4:06:e8:21:b2:f8:4c:65:88:de:92:09:de:
c5:f8:d8:ed:39:8e:a4:0c:50:99:99:21:2c:c2:e4:e9:90:21:
fe:9d:17:bb:c5:41:89:ef:4a:90:46:ce:f9:b8:08:e6:e9:7c:
0a:a3:9d:84:de:8f:e8:26:92:dd:14:9a:a7:90:1a:e4:e7:66:
7a:da:75:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:32:43 2026 by rpki-client