Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
File: QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft (raw, json)
Hash identifier: sEpMHo4XV++CWneaLr9+u53/Om1pu8K/71putdxi5FE=
Subject key identifier: D5:24:98:7F:AA:6B:A5:5D:02:E6:91:BE:07:9C:29:8C:0E:E7:19:65
Authority key identifier: 40:CB:59:A4:18:EA:DF:A5:DC:86:9F:56:F1:84:7F:B2:5D:98:7F:C6
Certificate issuer: /CN=40cb59a418eadfa5dc869f56f1847fb25d987fc6
Certificate serial: 019F93FFAE9A31002750E77435CE9BBB957E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
Manifest number: 191B
Signing time: Fri 24 Jul 2026 12:00:34 +0000
Manifest this update: Fri 24 Jul 2026 12:00:34 +0000
Manifest next update: Sat 25 Jul 2026 12:00:34 +0000
Files and hashes: 1: 3tPs-hmvMWYpJTDa0LrNchR-BRU.roa (hash: P08I5J8BvFgxh/ROUQBVKnGBWnHnTyxFTFLzZS6Bx/Y=)
2: QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl (hash: OFPtwlzpMlpF+kErxJZLfVzvIQngi1RSmdbkecbShhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:ae:9a:31:00:27:50:e7:74:35:ce:9b:bb:95:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cb59a418eadfa5dc869f56f1847fb25d987fc6
Validity
Not Before: Jul 24 12:00:34 2026 GMT
Not After : Jul 25 12:00:34 2026 GMT
Subject: CN=d524987faa6ba55d02e691be079c298c0ee71965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a3:cc:11:c7:62:22:ae:b5:cc:2d:74:74:e9:
98:43:6f:7e:dc:68:fd:e4:3e:66:9b:17:9a:47:47:
53:b6:5f:d7:1f:49:9a:dd:57:25:02:c5:90:b0:e7:
15:14:90:41:ad:cc:56:9a:c0:8c:74:fd:d3:d4:fd:
f4:07:16:26:6b:38:19:a9:8b:05:ea:e1:cb:ce:a3:
8d:ce:33:6a:33:47:e7:7f:73:28:dd:d9:28:59:74:
be:7b:bf:19:ad:23:77:af:02:ac:81:5d:ce:6e:6c:
6b:68:46:45:f8:6d:04:85:fb:6a:84:b6:0e:b5:18:
01:45:a7:d9:70:0f:18:63:7a:fc:e6:d7:c2:ed:d3:
a8:06:82:84:c5:a2:f7:25:6d:ca:57:73:0b:a1:8e:
9d:8b:59:93:7c:66:9f:9e:46:98:61:23:32:fd:23:
b7:55:54:25:f1:99:35:b6:51:87:fa:c8:96:a9:7b:
54:48:1d:bc:f7:84:91:e2:38:78:14:67:39:1c:7f:
91:6c:40:ae:1e:bb:4a:83:2c:fd:82:b0:5b:a2:79:
48:49:76:0e:ee:7c:b6:fe:74:a7:93:e8:c6:4f:2f:
30:82:59:bc:42:14:d8:f4:a8:b5:71:1e:64:ee:6d:
5d:80:aa:88:56:4b:40:52:49:ab:ae:e0:7a:31:60:
df:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:24:98:7F:AA:6B:A5:5D:02:E6:91:BE:07:9C:29:8C:0E:E7:19:65
X509v3 Authority Key Identifier:
keyid:40:CB:59:A4:18:EA:DF:A5:DC:86:9F:56:F1:84:7F:B2:5D:98:7F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b0:8a:0a:27:25:3f:ab:2b:78:1a:00:4b:25:4e:39:f8:39:
45:7e:94:1c:23:42:be:31:68:55:c3:76:e1:85:8d:72:4e:cd:
22:32:f3:36:3e:fc:de:10:77:01:4f:de:ef:79:81:f4:b1:07:
9d:d4:3c:48:78:22:0b:83:6c:db:36:4e:55:99:f2:77:5e:63:
df:79:19:54:eb:74:3b:23:da:5d:60:b4:2e:d1:8c:d2:dc:c6:
76:c8:61:58:0f:b2:1b:03:8c:2a:42:3c:d3:e4:77:78:04:16:
61:c2:ff:3b:9f:5c:8a:e9:f9:ff:a1:04:57:85:34:03:c4:94:
8f:16:8d:a0:d6:6a:e8:c4:ed:f1:b0:e3:29:f8:ab:f3:a9:b5:
fb:ff:71:40:ac:54:3c:a7:e1:1b:72:b8:08:c6:55:a6:16:47:
71:cc:ad:9c:7e:c0:98:2d:af:00:e0:4d:2f:58:14:c1:9f:e3:
2f:ca:0b:ac:c6:6d:a1:f8:dd:9a:b8:65:1f:48:9c:32:f2:99:
eb:1c:2a:e9:c4:a0:dc:03:6d:e9:ed:13:29:57:0f:e6:92:ec:
e5:f2:42:a0:82:06:fe:77:65:99:1e:a1:93:b7:18:8e:ea:5a:
de:8c:84:85:7f:7b:a7:13:82:e8:67:f9:1a:b5:8d:f8:5c:53:
0c:e5:09:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:01:33 2026 by rpki-client