Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
File: QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft (raw, json)
Hash identifier: geMD/H1DRgFqJgdBAdMJxDm3bGRsb1jtMKvV+zs5yhM=
Subject key identifier: 67:21:BE:54:7C:58:8A:76:CA:48:16:CC:33:2D:0D:36:01:D5:5C:3F
Authority key identifier: 43:1C:57:E1:92:1D:31:A3:4A:EB:D1:2E:50:7A:13:6F:E0:45:98:C6
Certificate issuer: /CN=431c57e1921d31a34aebd12e507a136fe04598c6
Certificate serial: 019F9512C0A26A10BCA176F51FB5A8ECAEFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
Manifest number: 0785
Signing time: Fri 24 Jul 2026 17:01:01 +0000
Manifest this update: Fri 24 Jul 2026 17:01:01 +0000
Manifest next update: Sat 25 Jul 2026 17:01:01 +0000
Files and hashes: 1: QxxX4ZIdMaNK69EuUHoTb-BFmMY.crl (hash: JH6GqYacpbl1IwtHeTYAt/BM56iIkZaZZYTRSlNR7s0=)
2: mIEKfqcwzKGnUqM9s4OdPs7YrbA.roa (hash: buVxIPz10EIVfwpYwh+P1ZYqWF3K+n7bUAR0sR0jGqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:c0:a2:6a:10:bc:a1:76:f5:1f:b5:a8:ec:ae:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=431c57e1921d31a34aebd12e507a136fe04598c6
Validity
Not Before: Jul 24 17:01:01 2026 GMT
Not After : Jul 25 17:01:01 2026 GMT
Subject: CN=6721be547c588a76ca4816cc332d0d3601d55c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bf:46:b7:1a:68:f5:53:2b:19:06:8b:47:98:
b7:30:e1:46:5c:e6:be:c6:67:cb:fd:ed:44:bf:a8:
c4:32:ae:c1:95:58:25:2a:aa:b0:73:b7:b6:7d:5d:
a4:1d:65:e4:cd:ba:1f:b7:85:54:e0:0c:8b:c9:31:
c0:c9:32:98:17:84:a1:45:9a:bf:ba:56:da:cb:8d:
f1:91:29:c4:32:df:75:90:d7:1f:3c:05:67:ba:e2:
f1:23:7d:89:bb:95:b1:f2:62:ca:5a:f1:91:43:56:
48:bf:8d:e2:d1:6d:3a:23:18:15:d9:1c:90:4f:be:
78:a1:4f:4c:bd:9d:69:b4:be:08:0b:44:28:a3:bd:
18:68:09:10:ba:69:9f:b5:15:27:46:f5:f7:50:dd:
ee:10:52:f8:a8:1c:18:c6:2c:74:83:65:bc:44:e1:
db:a4:a7:69:14:46:10:6d:58:78:9a:6d:57:a7:34:
56:97:86:69:1e:f8:a7:e3:fc:68:d2:86:e3:d2:70:
98:56:f1:fa:c3:fb:2b:74:eb:cb:cf:fb:b5:db:08:
85:9a:75:ac:be:70:96:3c:5e:ca:92:4e:1e:46:8f:
2f:08:4d:44:67:3c:be:b2:7a:23:d5:6c:84:15:b5:
19:be:3a:1b:fb:b4:79:df:d7:66:83:55:15:aa:ac:
8f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:21:BE:54:7C:58:8A:76:CA:48:16:CC:33:2D:0D:36:01:D5:5C:3F
X509v3 Authority Key Identifier:
keyid:43:1C:57:E1:92:1D:31:A3:4A:EB:D1:2E:50:7A:13:6F:E0:45:98:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:06:fa:75:5d:44:0d:6a:0a:ef:bb:ee:22:79:6b:0d:fc:c0:
cd:f1:c2:f8:a6:e3:48:2d:5c:f1:5e:5e:2c:24:47:1b:a4:ce:
06:70:db:07:ac:57:9e:3a:81:72:fb:10:99:ae:57:45:d3:0c:
67:90:f8:e4:e5:f1:73:51:2f:81:c0:d6:a5:12:69:d6:26:99:
50:52:b2:be:de:d6:c5:b1:21:f4:c8:4e:69:ec:24:5b:30:92:
bb:2c:25:c5:3f:7d:48:61:98:31:65:a4:30:50:a4:19:aa:21:
02:23:7c:fa:47:43:f0:e2:ea:2f:76:cf:c8:4e:7d:ab:64:bc:
ab:80:26:40:d7:bb:8b:d3:9c:bb:5a:9b:17:1f:39:c5:a9:31:
5e:a2:79:87:ff:53:b1:af:d8:ff:08:56:63:2e:76:e0:de:2c:
88:bb:4e:58:7a:0e:76:eb:e4:5f:94:7e:2d:06:88:b6:41:e8:
5a:eb:ba:2d:a7:9e:cc:03:a1:2d:31:72:ee:d0:76:75:a8:54:
7d:70:b7:b7:a4:72:fc:16:6c:e8:bb:7c:f2:ca:a8:78:6a:3f:
94:14:09:32:ce:c6:6e:b0:35:fb:98:06:5b:4b:c4:99:0b:88:
d8:04:97:25:cb:51:4c:ff:1b:7a:e4:cd:f3:5c:f1:30:67:90:
47:2e:ae:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:25:20 2026 by rpki-client