Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
File: qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft (raw, json)
Hash identifier: NMuXy/WogDIK81E+SJlR3Sty8r2GxA22dUz/g7pXNl0=
Subject key identifier: 3D:2E:81:BF:F5:65:B5:91:FC:F5:C4:53:81:23:76:CE:B4:93:B7:DC
Authority key identifier: AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3
Certificate issuer: /CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
Certificate serial: 019F90C7A229BEFF0B8B73E5DF87C1BF1144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
Manifest number: 19C6
Signing time: Thu 23 Jul 2026 21:00:29 +0000
Manifest this update: Thu 23 Jul 2026 21:00:29 +0000
Manifest next update: Fri 24 Jul 2026 21:00:29 +0000
Files and hashes: 1: HnCge9v0VMFv4p4n7gbHmPrHGJY.roa (hash: d62k4x4IFTUWXOO9eicQRIOUN/u5FXiup6Gnw1Q4kpc=)
2: M5Pjk3-Iv7owCPOWJdu9RksUoQk.roa (hash: 0apaBVPVgcAHb1VlUzCJsDR4I1XWTpJr/hHmPBPsgfc=)
3: RfnkqIe2fHDUVZT4yILbhKXutw4.roa (hash: GT4F8iAiZzVkJzzHLTAMNw/dN/RUobDqO6F2Kw345n4=)
4: qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl (hash: fqW1CbexVdK03vhi0t07VrK5jNeU5VRhEZFyf8OVlHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:a2:29:be:ff:0b:8b:73:e5:df:87:c1:bf:11:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
Validity
Not Before: Jul 23 21:00:29 2026 GMT
Not After : Jul 24 21:00:29 2026 GMT
Subject: CN=3d2e81bff565b591fcf5c453812376ceb493b7dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9b:67:95:5a:79:8b:83:2f:ab:a0:6e:e3:b8:
51:e0:5d:14:28:27:7d:b8:85:81:95:eb:ba:35:fd:
12:48:fa:58:8d:d9:f3:36:77:dd:08:6c:eb:6a:ee:
50:65:9d:be:00:ea:29:b3:16:de:ad:44:c5:c5:69:
39:25:7f:b6:0d:97:e1:b8:cf:e5:88:3f:a8:98:06:
7d:0b:30:f1:d5:d2:5f:20:b9:86:e3:ab:f9:b4:0f:
cb:bc:9a:fb:39:c8:98:0c:98:c4:33:5c:d9:10:58:
f7:9e:e2:59:34:94:48:fd:dc:ba:d4:d9:ba:c0:14:
13:64:c4:34:89:1e:dd:8d:c1:75:2b:0c:df:e9:68:
d6:c5:88:bc:82:1a:f7:72:89:a0:50:7a:a2:c2:ef:
12:21:c4:9b:76:ce:b5:21:07:3b:ef:a9:58:64:e5:
8e:aa:ea:bf:ec:6f:2d:06:35:8a:4d:82:ee:5d:10:
8b:4a:72:69:2c:b2:e1:41:48:a5:b5:eb:0d:c2:0b:
f9:4f:b9:f1:e4:2a:28:a3:e8:c2:66:62:8f:96:6d:
db:db:14:9e:e0:d7:68:d4:1b:04:bc:43:de:b6:95:
a0:fc:58:2f:dc:95:82:d1:d8:d2:52:a2:17:31:85:
21:64:a5:0e:02:a2:73:bd:bb:2b:d8:3d:19:7d:a1:
fe:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2E:81:BF:F5:65:B5:91:FC:F5:C4:53:81:23:76:CE:B4:93:B7:DC
X509v3 Authority Key Identifier:
keyid:AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:a2:04:62:5d:cb:42:a8:7a:d2:25:27:14:11:5c:34:0a:33:
50:53:8f:a0:80:91:c2:02:73:a4:a2:a5:b9:8d:c9:1d:aa:2f:
e3:d1:a8:93:a0:6c:25:fc:3d:d6:9b:c3:1a:aa:dd:f4:af:e8:
cc:29:c6:3e:53:9c:12:8b:d6:cb:da:73:a5:d4:d1:81:9a:fc:
94:4b:d7:e0:3f:3f:f1:fa:27:d3:f6:ed:aa:6b:7e:22:a0:73:
24:5b:61:d2:4b:5c:02:41:2a:ad:e4:4d:91:25:a0:be:5e:5f:
9b:d8:c5:c9:8f:b2:cc:49:c8:21:51:82:01:8c:de:87:58:93:
65:05:42:14:eb:02:0c:c1:62:fb:61:05:16:07:c0:9b:18:62:
2f:cd:23:f4:8a:fe:6a:39:9b:91:09:f0:4e:8a:4d:31:c3:4b:
26:67:65:55:c5:7f:6e:1e:18:0a:90:60:fe:ee:74:33:4f:de:
84:69:e6:20:b6:1f:2e:ae:21:91:9d:1b:f5:49:d0:f4:46:93:
6a:33:ab:6f:8f:f1:f8:3e:56:06:b4:66:4b:bb:68:7c:bf:8d:
40:32:d5:30:90:dd:ce:af:06:1c:df:a3:f8:0b:c8:85:ed:9f:
c8:23:c9:b8:d6:72:be:ff:1d:a1:67:e4:8d:07:1d:15:c8:82:
84:c8:e4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:21:39 2026 by rpki-client