Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
File: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft (raw, json)
Hash identifier: 5Bq1h2Rt23F2BYmrizfKNCdQXYYncqIPOymNNrPa8Zo=
Subject key identifier: 95:C5:19:B9:AF:0E:CA:B4:81:9D:1E:CE:ED:08:16:53:7F:77:5C:A1
Authority key identifier: 40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
Certificate issuer: /CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Certificate serial: 019F9323DC745CEFEA0E11CE6E12D7647D4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
Manifest number: 129F
Signing time: Fri 24 Jul 2026 08:00:28 +0000
Manifest this update: Fri 24 Jul 2026 08:00:28 +0000
Manifest next update: Sat 25 Jul 2026 08:00:28 +0000
Files and hashes: 1: 4ryD7ofmQrN3Mqeu7FPqqWRiYsE.roa (hash: q+5ychHqPBM+eMaL8WGUlpDBY/rhlRPXMm2CsfC21Bk=)
2: ORhpsoGrJDtd4dSX8wo8j8MueNc.roa (hash: Ea9U9BiaJTwEkaiRq8X+h6S8mcjyQT3ldp1ldkiJibY=)
3: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl (hash: HaJk1LS3D8kJ35mNcULK08iYYz7U8+2aScjlmvS9Lg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:dc:74:5c:ef:ea:0e:11:ce:6e:12:d7:64:7d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Validity
Not Before: Jul 24 08:00:28 2026 GMT
Not After : Jul 25 08:00:28 2026 GMT
Subject: CN=95c519b9af0ecab4819d1eceed0816537f775ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c3:e5:b5:99:9b:5d:a3:64:52:9e:99:75:0f:
28:51:c9:d0:e6:69:cd:5b:05:09:05:d9:ba:8b:d7:
71:4b:2e:35:ca:0c:dc:41:36:a4:36:a2:56:ed:b4:
bc:b0:e3:02:c3:2e:80:43:03:7a:b4:7d:8e:d1:7d:
37:f4:16:d1:79:a4:b4:6a:06:a4:6d:ef:0c:cb:73:
74:4d:4d:69:47:56:68:1b:bf:46:3d:6b:3b:ee:79:
94:c8:18:30:37:79:0a:97:9f:05:bb:11:9b:87:d4:
6a:df:4b:b5:c9:77:c0:91:89:b7:80:be:35:55:84:
90:0e:3b:39:26:13:5a:08:d0:aa:be:59:29:3d:5c:
cf:07:51:22:a2:88:bd:2e:5c:5a:d8:60:86:af:f4:
52:d2:25:13:43:d7:9d:0c:97:b1:ba:e1:e9:2c:6c:
6e:f8:21:50:6d:c5:6f:c2:06:01:09:50:89:6a:58:
b6:4d:98:ef:fc:38:5b:23:81:43:85:e7:dd:b7:40:
26:15:7e:d9:55:83:f1:7a:b5:6d:d5:d0:30:62:9b:
79:09:07:39:cc:ef:af:db:cb:a5:18:f2:a2:49:56:
ec:c8:ba:72:3a:76:3e:ad:f4:4b:e6:c9:43:05:71:
99:ad:8f:c8:ce:6f:34:8c:e0:12:09:6d:ec:77:a9:
8d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C5:19:B9:AF:0E:CA:B4:81:9D:1E:CE:ED:08:16:53:7F:77:5C:A1
X509v3 Authority Key Identifier:
keyid:40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:42:0a:50:62:c6:ec:3e:47:6f:5c:02:3e:3c:a0:2b:8b:4e:
97:9b:3b:3b:9d:8c:5a:db:d5:31:c6:d7:6f:a9:8c:b5:3f:73:
31:14:c8:42:75:d6:70:65:93:1f:ac:eb:3f:03:b5:a1:d1:6f:
da:57:b1:e1:49:00:b4:06:41:93:18:d7:07:67:85:12:55:15:
79:9d:88:0b:d6:3e:2b:c1:7a:dc:39:32:26:79:75:88:23:86:
d0:47:df:9a:a0:98:15:be:1b:d5:45:ff:33:81:65:cf:56:ba:
aa:4f:ce:f4:9d:3a:cf:8e:f0:e3:60:0a:c8:5f:68:75:cd:aa:
76:68:8a:73:65:fe:dd:51:1e:e3:c8:f8:b3:e1:ec:18:1f:ee:
53:8f:26:11:a3:c3:cd:91:bf:a5:d4:3f:32:89:40:94:11:1a:
0a:6b:b3:f5:fd:11:97:26:4d:5e:4a:f8:fd:1a:36:19:1b:cb:
e5:5a:34:54:0f:55:35:ca:c0:ed:36:db:bd:d1:16:e3:35:49:
26:b4:c2:65:ec:ee:48:aa:d6:a3:c9:51:b5:21:1f:b8:a9:aa:
87:a6:d5:f4:50:bd:1f:6b:ef:83:78:41:7b:94:8c:b6:10:3f:
a4:35:fc:78:3c:97:fc:4c:79:0a:96:87:fb:27:54:f3:fc:c3:
f2:41:e6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:18:41 2026 by rpki-client