Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
File: QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft (raw, json)
Hash identifier: IaWGUL/LyLZ0SnYdsm6TEgRI5YWR6pl/vI+E3m434tw=
Subject key identifier: 59:B9:F9:18:4F:77:B9:E0:BA:2F:86:D4:5F:7C:31:88:E1:A3:3A:00
Authority key identifier: 43:0A:56:48:E1:D4:6B:66:2F:4D:1D:CC:06:6D:39:42:7C:65:F0:D1
Certificate issuer: /CN=430a5648e1d46b662f4d1dcc066d39427c65f0d1
Certificate serial: 019F913592704E6E722CA0CD11D2D46F1030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 23:00:34 +0000
Manifest this update: Thu 23 Jul 2026 23:00:34 +0000
Manifest next update: Fri 24 Jul 2026 23:00:34 +0000
Files and hashes: 1: 9talkSrwDgnaCxDO4CeVrwCobYU.roa (hash: YP25gB5idoPvdLAQ6DcYcc8fU/wCBS3MFRk7Mh6hG84=)
2: QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl (hash: vQAWxsY4qDQyI9tjOq0LZkeXmvKce9F7kj/1EzPvEeo=)
3: pe0y6D9YFwdUoOdD0yoX4k8o7Rg.roa (hash: lD1kQU1t2awKdohr2NZ+PC7BmU3yOJRyp13CGfdz+Js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:92:70:4e:6e:72:2c:a0:cd:11:d2:d4:6f:10:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430a5648e1d46b662f4d1dcc066d39427c65f0d1
Validity
Not Before: Jul 23 23:00:34 2026 GMT
Not After : Jul 24 23:00:34 2026 GMT
Subject: CN=59b9f9184f77b9e0ba2f86d45f7c3188e1a33a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:66:49:85:42:5f:c8:b3:4e:f0:b3:1f:9c:8d:
06:df:ae:f9:30:1d:dd:7d:48:0e:4f:e5:4d:1b:50:
c5:fc:f3:06:2a:25:d1:b8:d6:f4:3c:20:5b:f3:e2:
0c:02:57:f3:30:fd:49:ac:0c:a9:a5:f0:4c:1e:a1:
ce:d4:53:68:5d:0a:f1:20:f5:f6:fe:62:15:84:4f:
00:dc:4b:24:9d:30:c6:46:37:21:c6:b5:18:46:98:
44:b6:ea:08:96:22:cd:f5:77:c9:3c:6b:71:a3:da:
65:ca:c7:81:3d:c6:88:ed:69:99:2f:67:db:e8:15:
d4:1f:a5:2d:6a:cb:c1:a0:f8:64:ab:9c:03:e5:f5:
bf:5d:eb:6b:f3:64:9f:88:b2:16:31:e4:dd:ca:ca:
31:af:13:6f:9d:e1:60:cc:a5:2e:43:0c:75:d8:48:
f7:5a:2c:4b:4e:61:90:51:0a:e5:9a:2d:8d:91:ed:
70:2f:4b:f3:22:63:4a:7e:43:36:69:63:d3:a0:b5:
cf:a8:ed:a8:3e:fd:57:8d:f0:b7:01:63:4a:91:f1:
89:86:80:d7:c8:1c:e6:4d:63:b8:3c:74:c9:8c:48:
78:f7:39:b5:32:cf:94:9c:39:43:f3:8f:f9:a5:3c:
01:4d:7d:5d:49:fe:f1:e6:96:f0:2c:61:ef:16:2a:
90:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B9:F9:18:4F:77:B9:E0:BA:2F:86:D4:5F:7C:31:88:E1:A3:3A:00
X509v3 Authority Key Identifier:
keyid:43:0A:56:48:E1:D4:6B:66:2F:4D:1D:CC:06:6D:39:42:7C:65:F0:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:cb:92:bf:56:75:6b:a3:24:2d:fd:16:f5:f5:79:26:60:e3:
d0:14:2c:51:a7:54:14:8a:df:57:2f:aa:4d:8a:6b:d7:89:ef:
bb:95:68:05:6e:97:85:ef:46:94:ff:db:f4:8d:79:d7:6e:c9:
89:ef:2c:51:58:34:b6:36:24:6d:fd:47:6f:3b:91:e8:10:9a:
96:ae:e3:74:19:df:c9:26:d1:74:f6:23:1b:da:42:1e:ee:0d:
79:fd:2f:12:d5:5e:c8:c6:f9:e2:78:ed:76:12:3a:46:0d:8f:
66:bd:99:02:d1:00:24:21:92:bb:04:05:96:c6:dd:68:c5:f7:
c4:90:79:69:9d:c1:b4:7f:cd:5c:9f:1e:7e:9d:2f:89:94:93:
83:bc:3f:b9:96:8d:73:69:70:85:a0:49:6d:fd:81:01:45:6b:
f9:d0:30:a4:0c:39:a0:64:36:95:13:84:c6:e2:81:a7:a7:e1:
68:f4:0e:f9:3b:44:7c:da:30:fd:1f:ab:dd:63:03:d3:09:fb:
dc:9c:51:48:23:08:16:79:cf:01:e3:f0:0a:63:1f:7e:74:df:
97:d5:47:78:4b:6b:6d:d7:95:6f:c8:e2:7f:d4:83:96:96:8d:
d1:7f:9b:97:c9:04:ea:33:dc:cd:c0:36:0d:da:5d:b0:d5:28:
c3:8b:27:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:43:44 2026 by rpki-client