Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
File: QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft (raw, json)
Hash identifier: yUpHAeVNqsDrBqXKqKkgz0VkkV9IOd6gr+pMI/Jo43o=
Subject key identifier: 5D:A7:7F:0E:DF:3C:D9:D3:C9:FE:E9:B4:D7:36:38:F5:A3:FD:3A:60
Authority key identifier: 42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2
Certificate issuer: /CN=4214088c77bd12687fd4ba9fe3159ea805888ed2
Certificate serial: 019F9210FFF1C64306AA037FFEA007289DA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 03:00:15 +0000
Manifest this update: Fri 24 Jul 2026 03:00:15 +0000
Manifest next update: Sat 25 Jul 2026 03:00:15 +0000
Files and hashes: 1: QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl (hash: 3VwcmS8343kgb6CH/l+dZM9W4r6EudlfKN2egcYKWqM=)
2: Qx55ZZjEUo3STaLz-yeXRfFXd6U.roa (hash: H6SY2nIdu7L2TEJH4MdS8DA2eloYCGNuqXlJqZac4sw=)
3: vuIHlCo4UFDYBSAD5tytHEhhhAY.roa (hash: hMc0m1Zi/iK2n4XsoGvD9oSD37NqfaVTNmYIxARhpew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:10:ff:f1:c6:43:06:aa:03:7f:fe:a0:07:28:9d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4214088c77bd12687fd4ba9fe3159ea805888ed2
Validity
Not Before: Jul 24 03:00:15 2026 GMT
Not After : Jul 25 03:00:15 2026 GMT
Subject: CN=5da77f0edf3cd9d3c9fee9b4d73638f5a3fd3a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:85:9c:1d:d1:c7:0f:d8:66:9b:0a:6f:61:48:
59:e7:22:fa:df:0e:aa:9b:f1:e3:07:fc:e2:6a:83:
0a:dd:e1:fd:08:26:1d:1f:4b:e4:ce:2e:16:79:72:
ee:9a:1a:78:e5:ac:7b:ef:ab:1f:6d:26:e5:a9:5e:
e1:bc:93:50:3a:16:dc:2f:ea:13:4e:b6:71:62:6f:
ac:ee:9d:d1:9c:25:b7:d2:9a:db:d6:9a:07:1e:65:
af:36:96:f3:4a:8f:ea:b8:9e:9e:0d:79:c5:31:5d:
96:c2:10:18:15:6d:56:88:67:6a:54:38:27:16:ff:
fb:a3:04:56:70:a2:a8:2a:cc:d5:92:ff:bd:32:b6:
41:b9:1f:ce:ba:c3:aa:df:6c:76:7b:59:b9:84:c7:
9a:16:d7:17:c4:da:e2:1d:d7:e0:67:ac:a7:9a:8c:
ee:11:64:18:4e:5a:e3:3b:ac:cf:98:67:9d:2c:89:
67:d0:87:ca:02:64:2a:65:c0:8a:7f:b4:57:21:fb:
a2:75:7a:6e:b2:1e:b9:f2:5c:65:9c:6f:a6:d1:26:
90:9e:1c:68:d5:57:52:ee:37:a5:f6:ab:ce:22:8f:
74:e5:6a:91:96:a1:cf:26:98:8a:56:88:c1:42:43:
4e:d5:42:e7:58:58:cc:7b:65:62:d7:87:f6:4b:06:
cb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A7:7F:0E:DF:3C:D9:D3:C9:FE:E9:B4:D7:36:38:F5:A3:FD:3A:60
X509v3 Authority Key Identifier:
keyid:42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:73:67:8c:6a:78:c7:92:cd:1c:7f:35:f6:d0:ea:64:c0:76:
bc:17:89:cc:46:d4:cc:fa:a6:af:80:f9:68:53:69:19:27:b2:
61:44:77:d3:df:15:07:aa:a7:bc:f3:e5:d9:a9:bf:6c:3e:49:
94:4d:5d:ab:9f:9c:82:ed:03:05:1d:f2:40:e0:34:1b:0e:8a:
90:ee:06:64:d3:4b:7c:cd:83:4c:cb:70:04:68:bc:35:d9:db:
b3:55:56:2a:a1:05:5e:5b:22:78:2a:ca:d3:4e:f5:f2:c4:2e:
e9:af:16:34:c7:d8:bd:53:16:84:4f:73:3f:ce:da:b9:12:ad:
8e:b8:1d:4b:e1:cd:cd:b4:f6:7e:98:41:45:a9:11:1c:98:aa:
b3:18:92:75:4e:68:fa:37:c1:90:58:cd:ef:8a:5d:34:85:aa:
35:79:c9:ae:1a:c7:f6:e1:a4:5e:59:8a:b0:9d:4f:b8:3e:ce:
a3:d4:6b:b0:38:41:aa:4d:67:0c:c8:34:76:fa:ed:ab:b4:41:
52:83:8f:71:2a:91:f3:24:6d:00:ef:23:96:81:56:33:73:64:
37:69:5f:5e:38:b7:17:39:74:cd:00:a5:8c:d0:93:73:84:fe:
22:11:e6:77:1a:bf:9d:ef:d5:a7:b6:f2:ad:e2:50:fc:79:9d:
79:61:39:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:21:32 2026 by rpki-client