Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/70230f-5c0b-4308-ab4e-7af6282c2ce8/1/QKljngI9_Ik-xp2nFrhKtdZOpZw.mft
File: QKljngI9_Ik-xp2nFrhKtdZOpZw.mft (raw, json)
Hash identifier: Zi9ZTALxK6yDQO40LbbzYNFYMkuMrnvLRHQk9dT8krU=
Subject key identifier: 7C:09:40:DB:44:0D:36:84:B4:6B:22:14:DC:9C:9A:46:A4:7F:D3:BF
Authority key identifier: 40:A9:63:9E:02:3D:FC:89:3E:C6:9D:A7:16:B8:4A:B5:D6:4E:A5:9C
Certificate issuer: /CN=40a9639e023dfc893ec69da716b84ab5d64ea59c
Certificate serial: 019F90FE8C0AAEBE3774F5175AA834306EA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QKljngI9_Ik-xp2nFrhKtdZOpZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/70230f-5c0b-4308-ab4e-7af6282c2ce8/1/QKljngI9_Ik-xp2nFrhKtdZOpZw.mft
Manifest number: 31
Signing time: Thu 23 Jul 2026 22:00:28 +0000
Manifest this update: Thu 23 Jul 2026 22:00:28 +0000
Manifest next update: Fri 24 Jul 2026 22:00:28 +0000
Files and hashes: 1: QKljngI9_Ik-xp2nFrhKtdZOpZw.crl (hash: +tnIrdslLCvTC7G3NDOJNhGsM+V7HN1nRR4jnqFl980=)
2: ou0GbJ1blaoMkgv99wOuI85TEgs.roa (hash: oR49PdheVHE66AKe4AhTIFXe+kYWY/wSYwudCN274ZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/70230f-5c0b-4308-ab4e-7af6282c2ce8/1/QKljngI9_Ik-xp2nFrhKtdZOpZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/70230f-5c0b-4308-ab4e-7af6282c2ce8/1/QKljngI9_Ik-xp2nFrhKtdZOpZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QKljngI9_Ik-xp2nFrhKtdZOpZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:8c:0a:ae:be:37:74:f5:17:5a:a8:34:30:6e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40a9639e023dfc893ec69da716b84ab5d64ea59c
Validity
Not Before: Jul 23 22:00:28 2026 GMT
Not After : Jul 24 22:00:28 2026 GMT
Subject: CN=7c0940db440d3684b46b2214dc9c9a46a47fd3bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e5:85:0b:40:20:38:f3:56:c0:ab:00:f0:ec:
ef:33:55:11:38:f9:a2:10:37:a0:5f:a9:0f:32:f3:
4b:7b:f7:3a:9d:59:7a:a9:50:5b:47:1a:ea:89:ea:
44:01:ad:a7:41:28:ae:6b:4c:09:7a:9f:c5:76:81:
0b:09:c5:1b:9b:0d:21:4a:76:4b:55:99:2f:88:59:
e9:e1:c4:15:a5:86:96:11:22:ee:40:02:a1:ec:dc:
c4:7c:14:d0:c1:32:f2:2f:bb:a4:5a:e4:34:f7:27:
3a:60:3f:74:ce:79:d2:ff:6f:7a:38:a1:7d:5b:ea:
3b:96:74:8f:75:49:28:09:dd:df:f7:b2:5b:2e:74:
16:10:04:4b:28:83:71:0f:fd:0f:5a:69:39:47:af:
a3:cd:a3:6e:c8:8a:92:50:12:04:2d:83:95:82:25:
04:52:41:93:a5:70:c0:72:fb:a6:6c:e2:42:21:df:
cc:8e:d8:6c:7c:bd:c0:35:53:00:2c:9d:0b:51:0d:
9b:9d:fb:8d:1e:25:fa:ac:68:ac:8f:9c:f9:97:ec:
71:52:69:e5:2b:09:a7:16:f5:55:03:4a:34:83:75:
2d:11:3a:9f:b7:e8:3e:4c:f1:58:35:b0:b9:ce:c2:
8b:2b:a1:54:a9:bd:4d:50:c4:90:f1:8a:71:66:8f:
ef:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:09:40:DB:44:0D:36:84:B4:6B:22:14:DC:9C:9A:46:A4:7F:D3:BF
X509v3 Authority Key Identifier:
keyid:40:A9:63:9E:02:3D:FC:89:3E:C6:9D:A7:16:B8:4A:B5:D6:4E:A5:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKljngI9_Ik-xp2nFrhKtdZOpZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/70230f-5c0b-4308-ab4e-7af6282c2ce8/1/QKljngI9_Ik-xp2nFrhKtdZOpZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/70230f-5c0b-4308-ab4e-7af6282c2ce8/1/QKljngI9_Ik-xp2nFrhKtdZOpZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:93:a6:34:63:3a:e2:ac:fb:42:57:c9:5b:50:f7:a4:68:08:
68:42:fe:b8:ef:62:5f:3e:3a:e7:79:50:e5:7f:19:b3:42:c7:
b5:b1:92:6b:6b:2d:14:f3:8f:05:63:a8:65:a6:ee:03:fd:08:
3d:4d:cc:7c:95:43:d3:33:77:39:04:40:3c:27:3c:b5:07:5f:
96:f8:38:55:73:0e:31:ed:3d:3d:81:fd:dc:ea:2b:2a:fe:94:
3b:23:cd:c8:06:13:ae:27:13:b1:04:07:31:21:23:44:95:30:
41:35:c0:ed:44:4a:e4:a6:4b:84:a6:ec:9f:cd:d2:f8:d8:59:
dd:ba:8e:ce:d7:92:b1:09:60:00:08:12:74:4b:44:5d:9a:ce:
56:44:bb:cd:5b:30:c3:8f:3a:50:cd:c8:1f:22:23:ec:d8:a2:
d7:36:7f:86:7d:ee:32:4d:bd:ad:8f:3f:1d:57:c3:8f:9c:59:
1a:75:e9:99:4a:e4:2a:46:34:ee:ac:73:84:48:f0:33:65:ec:
af:f6:ed:2a:e5:13:3b:35:ef:3d:14:89:72:89:26:18:f5:68:
b6:65:5e:b6:57:fc:da:f5:a6:a1:38:8a:2d:13:b8:21:04:e4:
8a:98:40:87:67:93:fa:5c:aa:bf:cb:9b:28:62:98:a6:20:b1:
fa:fd:2d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:32:05 2026 by rpki-client