Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
File: QTe22qILXgYYYrb7meI2rCwuNPg.mft (raw, json)
Hash identifier: IxQItKjCQ8DnfVaLfhvYtLxRNByOzM7S8UsWgtPeCwM=
Subject key identifier: 01:06:EC:37:22:6E:EB:B9:AE:9D:BF:16:44:3C:54:53:F8:C3:42:62
Authority key identifier: 41:37:B6:DA:A2:0B:5E:06:18:62:B6:FB:99:E2:36:AC:2C:2E:34:F8
Certificate issuer: /CN=4137b6daa20b5e061862b6fb99e236ac2c2e34f8
Certificate serial: 019F935B1559BE48925C8C386E512AF98B00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
Manifest number: 0996
Signing time: Fri 24 Jul 2026 09:00:47 +0000
Manifest this update: Fri 24 Jul 2026 09:00:47 +0000
Manifest next update: Sat 25 Jul 2026 09:00:47 +0000
Files and hashes: 1: QTe22qILXgYYYrb7meI2rCwuNPg.crl (hash: gBURdoOns3pi9vtacRiWXqtnmPxxmQSMsE6kZNPYjF4=)
2: cnMksPM8qHUJS7PE1xwm-IJZIEs.roa (hash: F0Xawui/3p0KQ1PsdF0IPS6D5QX+wIN0HvSrMKPyjOo=)
3: iXKcLuJmGyAb1eHjCTVSp7W3GfM.roa (hash: fKesRGsQOYtr1MHvJTlZYCSawG7ul48aKfBiS+3ImGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:15:59:be:48:92:5c:8c:38:6e:51:2a:f9:8b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4137b6daa20b5e061862b6fb99e236ac2c2e34f8
Validity
Not Before: Jul 24 09:00:47 2026 GMT
Not After : Jul 25 09:00:47 2026 GMT
Subject: CN=0106ec37226eebb9ae9dbf16443c5453f8c34262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cb:64:78:f6:fc:e4:9f:90:af:49:98:ee:4b:
26:b1:82:2e:d9:dd:46:63:41:da:41:40:8d:1a:27:
bc:01:a9:df:13:23:de:30:39:8a:ad:c0:da:05:50:
b5:14:9e:a3:26:73:51:ce:69:99:b9:a1:9c:d0:ad:
72:6b:fb:c4:6a:59:94:35:59:37:80:73:23:6f:1b:
bb:e1:00:34:6b:13:74:fb:3c:f0:f7:2f:42:38:e0:
87:38:ff:24:2b:90:87:d9:50:7f:1f:3a:1a:1b:9f:
af:6d:04:b7:62:a2:81:e6:8d:f7:a3:f2:d3:b4:a6:
e9:b9:cd:1c:ea:ff:8e:82:bc:ce:9c:79:ea:67:61:
6d:61:1a:de:89:68:f9:a5:1c:c6:ab:a0:de:94:d0:
31:e8:e8:94:35:53:f3:d0:fb:26:02:34:02:da:65:
1e:44:65:c0:2d:4b:bb:73:38:f8:7e:1f:50:cb:86:
6c:b5:74:49:ba:6b:08:d7:e3:66:65:19:41:c2:2a:
e1:34:05:41:ed:5d:ba:62:2c:62:ba:a6:11:bb:5d:
6d:64:94:35:e5:01:69:8c:15:53:43:98:de:59:ab:
64:c5:c5:72:f8:d3:88:a8:ad:bf:a3:95:55:b0:e6:
12:9d:1a:e4:46:a8:e5:f8:f7:b3:be:ec:a5:b5:b8:
9a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:06:EC:37:22:6E:EB:B9:AE:9D:BF:16:44:3C:54:53:F8:C3:42:62
X509v3 Authority Key Identifier:
keyid:41:37:B6:DA:A2:0B:5E:06:18:62:B6:FB:99:E2:36:AC:2C:2E:34:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e9:1e:24:b9:30:49:95:01:f3:8f:1d:7d:b2:b7:d2:6e:ff:
f2:d3:d7:f5:1e:0f:2f:6f:b7:57:e3:ef:89:c4:52:54:68:4b:
4c:4e:4f:fe:77:f4:0c:cd:24:43:4e:6c:c8:b0:af:e1:b7:3b:
10:ed:5d:44:ad:3c:4e:01:8d:bf:d9:05:5a:48:f2:95:15:b8:
38:be:dd:30:ce:41:17:6a:2d:78:69:0e:fb:f9:57:3c:a3:2f:
c0:46:0f:9d:d5:68:2e:3b:f2:20:3e:03:03:80:ca:a3:75:81:
65:1c:9f:82:52:a9:52:be:c8:bd:50:e7:4c:f4:a5:f1:dc:dc:
c2:96:c3:fb:28:04:1f:e1:b3:0d:44:11:73:6c:3d:b5:56:37:
56:26:f5:31:9c:23:33:ed:46:82:ef:18:8c:09:91:33:34:57:
1f:55:b2:e3:9f:6e:9c:09:48:fd:28:d6:c6:37:6b:48:8e:20:
3b:8b:fb:e6:81:5b:77:06:f1:45:43:74:5c:cd:bd:38:1c:ed:
64:6b:b7:47:4b:6f:7d:16:88:a4:98:85:71:d4:fa:1e:e9:df:
73:d3:f3:f1:19:9a:92:89:4d:ca:f1:c8:8c:8d:4a:79:33:de:
95:4f:e7:ba:9b:61:52:a2:c5:38:4c:dc:39:c3:71:93:40:53:
07:24:f4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:06:44 2026 by rpki-client