Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
File: qlfg60pFBqGasu_5iaZ9VZuYzBo.mft (raw, json)
Hash identifier: vdPZkGnJrtOiLUlvzg7pRxgu8XuzasgEiAgItfD/Ckw=
Subject key identifier: BE:35:F3:B6:05:3E:C1:82:16:0D:44:CB:2C:89:65:D7:F9:B5:35:64
Authority key identifier: AA:57:E0:EB:4A:45:06:A1:9A:B2:EF:F9:89:A6:7D:55:9B:98:CC:1A
Certificate issuer: /CN=aa57e0eb4a4506a19ab2eff989a67d559b98cc1a
Certificate serial: 019F95B6ECA13D172A01802ECEDAB72A35BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
Manifest number: 19CC
Signing time: Fri 24 Jul 2026 20:00:20 +0000
Manifest this update: Fri 24 Jul 2026 20:00:20 +0000
Manifest next update: Sat 25 Jul 2026 20:00:20 +0000
Files and hashes: 1: PZcwljxkluLyPsCu5IOqcb5bfu0.roa (hash: 74prXbYhNn50EgwVIKtgiNZLNDDm+6LO8raCktKadFM=)
2: qlfg60pFBqGasu_5iaZ9VZuYzBo.crl (hash: ui+I01PP811EUx9HAuyP901faTtivMPj6P/5KJ5iosU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 20:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b6:ec:a1:3d:17:2a:01:80:2e:ce:da:b7:2a:35:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa57e0eb4a4506a19ab2eff989a67d559b98cc1a
Validity
Not Before: Jul 24 20:00:20 2026 GMT
Not After : Jul 25 20:00:20 2026 GMT
Subject: CN=be35f3b6053ec182160d44cb2c8965d7f9b53564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c8:aa:42:4a:fd:fb:a1:ad:2b:0a:13:c3:db:
16:0d:22:f6:e0:44:40:2c:f9:a7:c1:52:8f:9b:78:
f2:85:cf:97:98:48:31:68:d3:dd:cf:0f:05:eb:be:
93:85:be:cb:1f:e7:f0:cf:19:de:ff:fd:73:55:c0:
b8:d7:5e:40:f6:49:d5:2d:f4:61:17:cb:15:54:68:
82:81:7f:80:6d:da:86:73:28:39:71:2c:10:2c:0c:
9a:f7:57:7c:4a:5a:b9:87:6e:dc:bb:cc:07:f7:da:
67:a5:6d:00:33:dc:e6:7d:12:c3:57:3a:c3:3f:7b:
2b:7d:32:33:49:cb:f1:45:46:05:69:ff:fc:16:65:
77:b6:6f:cd:91:eb:4a:fb:fa:07:79:a3:51:94:59:
74:c8:c6:53:4f:4b:ca:a5:cd:1e:d2:1f:4c:50:c6:
22:07:0e:18:f5:2a:c3:8f:d0:9f:ce:84:b9:b6:7c:
1b:21:fe:f7:a3:70:02:74:69:49:a7:84:e5:79:f4:
85:d4:47:72:f4:92:51:4e:a7:f1:6c:61:ce:04:d2:
32:bb:a5:3b:2b:64:b9:70:14:6e:4d:7a:a0:5f:4d:
7f:b9:4f:ee:b6:9b:91:27:1e:48:89:ea:77:fe:a1:
1f:0e:81:56:4c:83:67:1e:fd:25:eb:91:bc:fe:71:
cc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:35:F3:B6:05:3E:C1:82:16:0D:44:CB:2C:89:65:D7:F9:B5:35:64
X509v3 Authority Key Identifier:
keyid:AA:57:E0:EB:4A:45:06:A1:9A:B2:EF:F9:89:A6:7D:55:9B:98:CC:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:98:9d:5c:a4:e7:5b:c4:ac:b1:1b:10:07:a4:b9:6a:4c:55:
09:4b:ee:16:03:d4:53:61:c3:6d:d0:37:cc:99:55:22:a6:ae:
cc:4a:e4:29:93:94:3e:5a:6d:be:de:de:b4:0b:da:ca:c7:1f:
26:c8:e8:9d:28:36:d4:80:40:d8:f5:65:f8:1c:7c:75:15:b2:
3e:c3:8a:1a:91:a3:f0:00:4a:88:d2:d2:00:58:f1:75:b7:b2:
94:d4:35:5b:32:ff:22:80:b2:96:24:14:39:03:80:69:b0:17:
03:e4:b3:5d:70:4c:e0:10:af:bc:8b:57:1f:90:86:33:a2:1e:
67:17:a1:51:d9:5a:33:9b:e3:a3:94:11:da:ae:ff:eb:d5:2f:
dd:70:7f:69:77:3e:b7:78:f7:15:2e:6e:55:61:3c:8f:2b:36:
17:3e:0c:d7:d8:63:d7:09:96:78:01:9c:26:7c:43:f7:7d:84:
87:2d:b2:3b:74:20:bc:7a:5c:b7:27:d9:7c:73:5f:e2:4a:42:
a5:79:0c:c5:91:48:9d:91:58:1f:85:54:6a:2c:e1:5c:43:17:
02:4d:7c:e9:8e:c5:bd:ca:ba:40:34:b5:f9:2e:3f:f9:13:b7:
f7:0c:eb:a5:ec:8d:86:15:14:19:d7:63:9a:9a:36:d7:12:f0:
16:82:cc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 04:17:22 2026 by rpki-client