Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
File: QF1kV0EhVne3dI0f3v1BYgetsS0.mft (raw, json)
Hash identifier: UQ21nTwd7Uk8OuUwbXRVU4UlcgE4uzMbYvy9ZTeMTss=
Subject key identifier: D1:FB:39:5B:4B:A4:59:8A:53:5C:B5:4F:D6:D7:E8:E7:7C:DB:43:35
Authority key identifier: 40:5D:64:57:41:21:56:77:B7:74:8D:1F:DE:FD:41:62:07:AD:B1:2D
Certificate issuer: /CN=405d645741215677b7748d1fdefd416207adb12d
Certificate serial: 019F94DC5999790B1A201EDFE68745191ECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
Manifest number: 0DB1
Signing time: Fri 24 Jul 2026 16:01:36 +0000
Manifest this update: Fri 24 Jul 2026 16:01:36 +0000
Manifest next update: Sat 25 Jul 2026 16:01:36 +0000
Files and hashes: 1: QF1kV0EhVne3dI0f3v1BYgetsS0.crl (hash: iYIWoRKRR36NBEMC8sVALPjVEySh1Hjlq440S631DIA=)
2: bgTj1AVpGOJ4PVrdSMxeLKpik_E.roa (hash: PA5QdaiNGx0nBgpS5K3tHFIeNRXLUOzm0Y2JaVTpock=)
3: lePQo6wZD_Sk6G9yXvisbl2Tsao.roa (hash: 4hQP72BMPYOrYdBAheaaMbRjYFT184+eQqEoi9pvU4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:dc:59:99:79:0b:1a:20:1e:df:e6:87:45:19:1e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=405d645741215677b7748d1fdefd416207adb12d
Validity
Not Before: Jul 24 16:01:36 2026 GMT
Not After : Jul 25 16:01:36 2026 GMT
Subject: CN=d1fb395b4ba4598a535cb54fd6d7e8e77cdb4335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a2:70:eb:61:a8:5d:cb:31:40:e8:e1:55:15:
5c:44:c4:aa:7c:8c:80:6a:e2:c7:91:60:f1:e1:01:
1f:56:23:7f:74:03:d6:00:03:ad:fa:4e:5e:56:c1:
e4:c5:a8:26:8b:59:d9:ae:be:91:4d:6d:7e:68:df:
10:4b:36:a0:45:14:63:67:db:d1:00:a7:ac:f9:31:
a8:52:31:10:e7:08:8a:8b:cd:96:b2:eb:90:cb:e4:
e9:58:7d:dc:1c:36:96:d2:3d:a1:d8:f9:cf:60:3d:
3d:dd:c3:ce:77:ea:0f:3c:10:26:63:a9:fe:a1:bc:
b6:35:02:53:be:54:1c:28:f9:79:1a:18:99:ea:1d:
c8:26:39:b2:47:b4:f5:75:ad:ee:a3:b6:5d:85:3d:
62:b0:e7:4d:63:04:4a:be:07:1c:e0:ce:2d:c7:91:
7e:6e:6d:c6:b2:e1:78:76:0d:41:30:b6:c9:44:0e:
b1:63:33:63:e3:0a:63:8d:0b:dc:52:40:98:28:d9:
f7:4c:7c:db:73:97:16:ec:90:67:b4:a5:59:74:18:
67:d2:6a:cd:ba:ca:77:0d:df:21:13:50:95:d8:e6:
5e:dc:98:84:f8:ba:39:58:96:55:f3:17:0f:a4:d2:
d3:7b:0d:af:6b:f1:a6:5b:1b:b7:bf:e8:d5:9a:65:
24:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FB:39:5B:4B:A4:59:8A:53:5C:B5:4F:D6:D7:E8:E7:7C:DB:43:35
X509v3 Authority Key Identifier:
keyid:40:5D:64:57:41:21:56:77:B7:74:8D:1F:DE:FD:41:62:07:AD:B1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:d8:d6:5d:37:62:ad:10:10:0a:45:13:6f:ca:76:b1:a7:43:
a5:e6:4b:7c:5c:21:a4:71:c1:7f:d3:66:fb:32:a9:67:73:8c:
92:a0:44:24:06:6c:5c:a1:73:a6:3b:2c:80:76:4c:f0:41:65:
5a:a8:b8:88:e9:a9:4c:da:53:26:c3:39:e4:b2:fe:23:07:3a:
c0:4c:95:ee:83:d1:0f:51:5d:32:e0:35:57:9d:9d:94:91:cb:
38:23:58:36:76:4f:75:0d:97:51:4d:f3:61:a9:b8:22:64:fe:
cd:61:93:d9:61:12:83:de:5d:cc:6e:4a:48:b0:52:3a:17:23:
53:fe:c2:30:c4:11:eb:44:72:a0:4f:6e:c7:1c:5e:2b:99:97:
31:da:17:08:c9:ea:2d:88:16:0b:ed:f6:d9:bf:3f:99:bd:51:
bf:65:ca:e8:01:25:d5:a7:c9:4b:81:b0:44:19:a6:81:e8:b1:
b3:85:97:f6:7b:af:16:82:3a:3f:95:5a:46:e3:93:66:22:2a:
64:24:99:96:da:98:f2:c2:b8:fd:5c:c2:d8:54:43:94:89:82:
1b:79:ab:4d:4e:9c:07:80:e5:ef:5b:4f:6a:b4:c7:a1:02:0e:
82:96:4a:18:a9:a9:2a:ce:8f:0e:b4:2d:80:a0:a9:9c:b6:19:
66:20:bd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:39:49 2026 by rpki-client