Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
File: QGYnM7yHPRPh-fZujf91yCDV0vc.mft (raw, json)
Hash identifier: nZlWmXfnvOH/u7iIOppfmgEsAjRNnZXzbBYj0CpV+WM=
Subject key identifier: 9C:7A:3E:2B:D4:33:11:66:CF:94:E3:B5:6A:21:75:59:A4:F0:BD:01
Authority key identifier: 40:66:27:33:BC:87:3D:13:E1:F9:F6:6E:8D:FF:75:C8:20:D5:D2:F7
Certificate issuer: /CN=40662733bc873d13e1f9f66e8dff75c820d5d2f7
Certificate serial: 019F8F46F3236081047CCDABC54BED71D973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
Manifest number: 11CB
Signing time: Thu 23 Jul 2026 14:00:19 +0000
Manifest this update: Thu 23 Jul 2026 14:00:19 +0000
Manifest next update: Fri 24 Jul 2026 14:00:19 +0000
Files and hashes: 1: 41UHcYawFZ6dwCf_FfKVxB6pAyA.roa (hash: mxz0vZfXkFbrjS45D2R+Mi2lF9MSSxAbkahXO8KfBYc=)
2: QGYnM7yHPRPh-fZujf91yCDV0vc.crl (hash: a7JG1S+yc3Hwncpw/TPyhvqhx3U0qMb18KoRTiIO2Fk=)
3: gDO3yGlii3vGStP0g8IXSinnODc.asa (hash: 4GKXfRU/6q53CGfLh+IE//Y0yEXtQGF8Ot458LYjOwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:46:f3:23:60:81:04:7c:cd:ab:c5:4b:ed:71:d9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40662733bc873d13e1f9f66e8dff75c820d5d2f7
Validity
Not Before: Jul 23 14:00:19 2026 GMT
Not After : Jul 24 14:00:19 2026 GMT
Subject: CN=9c7a3e2bd4331166cf94e3b56a217559a4f0bd01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2d:6f:fa:75:9b:4c:e7:a9:4f:d6:94:7f:64:
54:e4:c2:20:b3:66:28:78:e0:8d:46:87:b3:84:83:
9d:9e:3d:48:9a:12:ea:33:b6:56:28:c9:5b:7b:31:
6a:cc:bf:ec:8a:4a:a9:0d:bd:e1:72:03:52:84:aa:
dd:26:22:e7:b6:1c:34:93:87:28:3c:e1:32:c5:09:
53:de:e8:22:ed:ec:cd:2b:7b:9f:0d:a3:29:76:02:
3b:32:40:fc:6b:d7:dc:e0:3f:a0:73:2c:ce:9a:77:
7f:b3:43:34:d8:37:18:2f:db:8a:d7:11:4a:7f:21:
09:ad:c4:2d:05:af:4a:62:4f:54:55:7a:cb:84:f0:
63:b4:c8:71:4f:8a:de:d5:58:b2:38:6b:44:23:19:
88:97:86:d2:f6:19:7c:de:b0:18:87:d7:f3:a3:0e:
88:25:8d:cb:5c:5a:54:ee:86:c0:86:08:28:8e:c7:
f9:76:89:24:a6:69:e6:c5:72:0c:8f:db:1d:85:a6:
7e:5f:27:8f:91:4b:49:13:b4:24:08:4a:a9:c6:6d:
5d:9e:10:81:3a:e9:6b:db:b0:06:7d:31:14:93:37:
74:4b:7f:54:4b:f6:c1:26:f2:17:87:6d:3a:85:c8:
de:b5:ba:c0:1a:5a:29:0f:20:be:3f:f1:b5:30:77:
92:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:7A:3E:2B:D4:33:11:66:CF:94:E3:B5:6A:21:75:59:A4:F0:BD:01
X509v3 Authority Key Identifier:
keyid:40:66:27:33:BC:87:3D:13:E1:F9:F6:6E:8D:FF:75:C8:20:D5:D2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ae:f2:73:98:ee:2d:7e:35:0c:46:08:37:13:d2:65:df:f9:
6c:1b:01:21:99:1e:e5:6f:c2:84:30:49:c2:d2:11:4e:ec:d5:
11:9d:a3:31:f3:c8:9c:8b:d4:37:1e:c6:30:6e:48:11:f7:5e:
51:44:97:c9:0c:55:d1:9c:ff:bb:62:ee:c4:08:6f:d4:b6:59:
24:62:2b:f8:c7:f8:bc:e2:f2:6f:4c:ae:1d:3b:e1:74:e9:52:
56:d3:ac:18:1e:c3:4b:24:4c:ac:81:77:f4:1a:1a:ec:08:a7:
29:9b:b1:7e:d2:9e:e0:9d:b8:a6:f7:99:97:e8:67:70:9b:29:
a6:5a:dd:0f:b0:89:6d:87:cc:e6:fc:78:9b:ca:31:aa:50:b7:
40:66:0d:3d:4e:14:f3:77:35:6e:ff:bb:0b:7f:24:60:6b:97:
c4:18:42:45:b5:c1:36:42:ed:cb:c0:c7:b6:3f:2c:e2:98:c0:
84:af:0d:12:33:83:0c:01:c0:bc:a4:2a:cd:1b:57:a0:76:3b:
9a:a4:f6:52:d5:cf:0a:a8:e4:74:5a:82:b1:7f:a4:b0:08:c9:
ef:77:0d:f5:f6:19:2b:f0:ed:bd:c4:e5:53:8d:db:2a:e9:25:
a8:a7:d9:54:d9:52:81:5c:e7:66:4d:5d:0f:83:5f:4f:1f:d4:
f7:2c:92:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:14:36 2026 by rpki-client