
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft
File: QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft (raw, json)
Hash identifier: zbxkEK5nDpeCwam+p3azVayAj2F3HY/mJScZ/5tfKG4=
Subject key identifier: E1:1A:46:AB:D0:0B:F7:23:35:3B:D5:00:E4:26:76:91:41:A2:93:7D
Authority key identifier: 42:D9:EC:5E:22:8B:4A:F7:F0:3C:34:5B:C3:96:7F:51:D6:FF:8A:09
Certificate issuer: /CN=42d9ec5e228b4af7f03c345bc3967f51d6ff8a09
Certificate serial: 019F939216DF025B8EBCD7ADC1742062347E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtnsXiKLSvfwPDRbw5Z_Udb_igk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft
Manifest number: 0252
Signing time: Fri 24 Jul 2026 10:00:52 +0000
Manifest this update: Fri 24 Jul 2026 10:00:52 +0000
Manifest next update: Sat 25 Jul 2026 10:00:52 +0000
Files and hashes: 1: QtnsXiKLSvfwPDRbw5Z_Udb_igk.crl (hash: OIwCiFaPG8PjyljRYIDJ39eBtQMs/SBl2yT94Bj/uZw=)
2: t7k_beV3qkNWRdLGwtpfAS6V7HA.roa (hash: vZai5iXmOI1X+EFyUMtGKdKYCWdym2JXQnnjYc/fJOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtnsXiKLSvfwPDRbw5Z_Udb_igk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:16:df:02:5b:8e:bc:d7:ad:c1:74:20:62:34:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42d9ec5e228b4af7f03c345bc3967f51d6ff8a09
Validity
Not Before: Jul 24 10:00:52 2026 GMT
Not After : Jul 25 10:00:52 2026 GMT
Subject: CN=e11a46abd00bf723353bd500e426769141a2937d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:79:05:48:b9:2a:f0:f0:7f:38:53:5f:d8:f3:
44:a6:75:c8:28:1a:26:9d:2d:50:3a:1d:e0:f4:ca:
1d:b8:5b:c0:fb:be:f7:20:2c:16:4f:29:dc:78:90:
bf:a8:4b:88:45:1c:6c:f1:1b:7f:c9:4d:80:1f:23:
6e:ce:14:55:96:fc:f8:ea:c7:cc:f4:a4:96:08:33:
a8:1e:60:57:e3:52:bc:17:c8:f1:ca:14:90:9f:5d:
25:74:55:55:ce:7f:96:58:d0:d7:fb:af:ed:f8:eb:
a4:46:85:7f:02:ec:4f:29:de:aa:85:33:a5:21:bb:
56:9d:48:b4:22:8f:2c:05:6a:0c:cb:78:d3:07:3e:
4e:2b:3b:09:c0:72:54:15:92:2f:39:53:de:86:fd:
e9:c5:98:46:4f:b5:66:e7:38:bf:f1:4c:43:99:ca:
28:5f:94:85:97:6f:be:4f:fc:ef:a0:9b:0b:f5:07:
a7:64:e8:26:fd:b9:78:9e:53:15:b4:bc:56:53:48:
a9:76:2d:2e:4d:7d:34:40:5b:b5:20:a5:41:69:49:
f5:50:47:56:38:9b:9e:77:7e:e3:2f:1b:6e:d8:cc:
4f:e9:8b:77:bd:11:58:4c:c7:12:ff:ee:8e:67:03:
3b:4a:39:de:8e:3c:85:7e:82:86:65:9b:ca:21:35:
82:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1A:46:AB:D0:0B:F7:23:35:3B:D5:00:E4:26:76:91:41:A2:93:7D
X509v3 Authority Key Identifier:
keyid:42:D9:EC:5E:22:8B:4A:F7:F0:3C:34:5B:C3:96:7F:51:D6:FF:8A:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtnsXiKLSvfwPDRbw5Z_Udb_igk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c8:51:86:ff:f2:60:17:0d:74:15:15:3d:33:d7:27:89:3c:
ef:7a:7b:cd:4a:30:ae:70:84:40:14:88:51:d3:67:9e:53:e1:
4f:99:cc:b1:c3:97:e0:c6:53:9c:a1:d6:f7:2a:68:13:88:ec:
dc:46:eb:74:3f:7f:a1:84:1d:cd:86:03:d3:5d:91:c0:69:df:
17:4a:67:46:9d:cd:48:de:9d:73:d0:6f:81:2f:27:c2:07:48:
08:b1:20:f0:c5:e9:47:de:27:2c:c1:2f:d0:f9:21:b0:a1:92:
c7:da:72:3a:ea:3b:cd:84:a3:78:a1:37:0a:8c:2a:9c:ce:ac:
7d:4d:0e:7c:9b:42:7d:f6:b4:d7:01:2c:b2:89:f0:67:3f:ec:
39:cd:62:01:26:85:ca:7c:e1:1d:ab:23:dd:fd:7c:e9:ca:1a:
8f:31:d4:e5:d2:68:f5:41:79:56:14:d3:6b:2f:fc:89:f5:2b:
29:af:6b:d9:53:29:aa:2d:cf:79:e5:fa:5a:12:38:18:ef:fa:
99:b8:25:5a:9f:b4:ea:d7:29:20:62:fa:5c:37:f8:6b:d0:6b:
5c:ed:cb:50:5d:69:05:87:de:df:9d:2f:01:61:2c:54:24:1b:
c7:de:5d:a4:7c:6f:9d:68:9e:61:06:fb:39:4c:df:8e:27:74:
9f:71:42:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:35:43 2026 by rpki-client