Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/371f11-6457-43e0-941f-e7661637eebd/1/QG7xj1j1rRgE6bbFrvbiMsy4oeI.mft
File: QG7xj1j1rRgE6bbFrvbiMsy4oeI.mft (raw, json)
Hash identifier: Q38FDSsx076rZeu5ejXdjYdUVJ7YXt4a74DOWN6ORco=
Subject key identifier: 70:76:CE:27:97:92:45:DE:94:42:FE:49:1F:DB:E1:27:81:24:38:E0
Authority key identifier: 40:6E:F1:8F:58:F5:AD:18:04:E9:B6:C5:AE:F6:E2:32:CC:B8:A1:E2
Certificate issuer: /CN=406ef18f58f5ad1804e9b6c5aef6e232ccb8a1e2
Certificate serial: 019F93FFC1C3A80214C73831A6BB3EB7AFEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QG7xj1j1rRgE6bbFrvbiMsy4oeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/371f11-6457-43e0-941f-e7661637eebd/1/QG7xj1j1rRgE6bbFrvbiMsy4oeI.mft
Manifest number: 011D
Signing time: Fri 24 Jul 2026 12:00:39 +0000
Manifest this update: Fri 24 Jul 2026 12:00:39 +0000
Manifest next update: Sat 25 Jul 2026 12:00:39 +0000
Files and hashes: 1: QG7xj1j1rRgE6bbFrvbiMsy4oeI.crl (hash: 5T0OMedROiHGjsD+O8GE+472P0CZ+Ez7crEFDiOCBFM=)
2: bc_rDqdFLWG9EqOE3XpdCbzci7A.roa (hash: QX2e7Tpj37ujdBJf37YYj5ilDYHQsrFIORHYzhmx2Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/371f11-6457-43e0-941f-e7661637eebd/1/QG7xj1j1rRgE6bbFrvbiMsy4oeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/371f11-6457-43e0-941f-e7661637eebd/1/QG7xj1j1rRgE6bbFrvbiMsy4oeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QG7xj1j1rRgE6bbFrvbiMsy4oeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:c1:c3:a8:02:14:c7:38:31:a6:bb:3e:b7:af:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406ef18f58f5ad1804e9b6c5aef6e232ccb8a1e2
Validity
Not Before: Jul 24 12:00:39 2026 GMT
Not After : Jul 25 12:00:39 2026 GMT
Subject: CN=7076ce27979245de9442fe491fdbe127812438e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:49:a2:6a:a7:5c:57:e6:43:8b:3c:4c:c2:fa:
19:5c:1f:fb:c4:ee:8c:64:20:1b:89:9e:4e:8c:9d:
3c:67:ac:cd:74:b6:c6:f6:26:f0:72:04:70:a1:92:
3c:11:ec:e7:7c:15:94:1a:b0:c9:02:53:eb:82:12:
11:e5:08:11:c9:86:f4:d8:31:69:af:fd:1c:50:63:
b1:4f:49:41:31:cf:33:8d:e6:f1:f8:ae:30:46:ae:
b8:93:9a:8d:43:1f:bd:18:00:d7:bf:18:04:c7:4c:
ad:95:56:2d:26:f1:8a:71:39:75:b9:42:3a:f4:c6:
bb:e3:d2:12:5b:63:37:bb:66:a7:d8:6f:ea:5a:d0:
1a:d6:02:92:08:e7:6b:66:23:29:0c:42:c2:3b:a8:
94:35:40:89:67:5b:06:09:78:af:7b:07:92:be:33:
2f:9d:b5:c1:0f:92:8c:6c:21:e5:ac:41:82:0f:e7:
5c:ae:f2:0c:a7:68:95:8f:c4:91:5e:f1:05:45:04:
99:37:2e:f7:e6:a4:2b:f8:e8:a2:8c:1e:fb:0d:f9:
e0:cf:0a:a7:a3:ee:1e:a1:59:35:81:ae:09:4d:56:
05:54:95:66:43:a2:0f:9a:fc:aa:2c:34:1b:3f:57:
3d:75:e7:e3:b2:dc:74:00:36:6e:53:0e:cb:45:a5:
2b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:76:CE:27:97:92:45:DE:94:42:FE:49:1F:DB:E1:27:81:24:38:E0
X509v3 Authority Key Identifier:
keyid:40:6E:F1:8F:58:F5:AD:18:04:E9:B6:C5:AE:F6:E2:32:CC:B8:A1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QG7xj1j1rRgE6bbFrvbiMsy4oeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/371f11-6457-43e0-941f-e7661637eebd/1/QG7xj1j1rRgE6bbFrvbiMsy4oeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/371f11-6457-43e0-941f-e7661637eebd/1/QG7xj1j1rRgE6bbFrvbiMsy4oeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:79:af:93:97:da:28:4a:99:92:7a:38:69:52:14:66:4e:37:
3e:09:2f:11:fb:63:3b:f2:69:66:1e:0b:dc:6a:d2:c4:87:9a:
6f:20:33:5d:46:d0:2a:2e:e7:18:df:14:54:5e:49:0a:a2:63:
6b:8d:5f:42:bf:a9:e1:87:78:17:b7:88:e1:16:5c:4d:6b:d5:
b5:82:e0:23:9a:01:d3:b4:77:04:f6:63:d5:25:70:fc:f2:e4:
dc:41:a0:db:04:df:12:c7:8e:d0:5e:4b:c4:ce:8c:bb:9e:e4:
5d:f7:60:0a:b1:51:d5:c6:41:eb:31:c3:ec:0d:e5:8e:46:b7:
19:86:b7:c0:3d:95:6f:0c:a9:0b:c7:ba:5b:56:88:30:b4:cb:
98:1d:53:00:a1:ff:fc:24:fa:7d:92:f8:8b:0d:f3:82:b1:52:
e6:20:cd:44:28:19:e7:46:78:1f:8f:bb:e8:a0:93:76:3d:76:
dd:55:6b:f1:5f:d3:98:17:0d:bf:3e:4c:dd:5f:1c:a6:20:f8:
68:13:0a:fe:6f:59:46:59:ae:88:7e:4c:e6:e1:1f:d4:3a:29:
cc:b6:ed:76:f7:2f:e3:8a:78:94:26:dd:31:92:22:3e:a3:f8:
76:3d:48:8b:bc:83:bc:a1:bc:f4:e9:3d:f0:8d:de:9e:0b:9f:
7a:4e:1f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:18:53 2026 by rpki-client