Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
File: QnPDfxOasLj9mBdxtNiMPGF1-aU.mft (raw, json)
Hash identifier: wCiEjVfJUmp8RMkddKsqkYjiIBcTy4mk+w5xr1grha8=
Subject key identifier: B1:1A:ED:17:13:56:DC:41:3B:DE:0C:B0:B4:8D:7B:80:09:5A:9E:82
Authority key identifier: 42:73:C3:7F:13:9A:B0:B8:FD:98:17:71:B4:D8:8C:3C:61:75:F9:A5
Certificate issuer: /CN=4273c37f139ab0b8fd981771b4d88c3c6175f9a5
Certificate serial: 019F940018A7F37716BB79458F2907CEC242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnPDfxOasLj9mBdxtNiMPGF1-aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
Manifest number: 01B5
Signing time: Fri 24 Jul 2026 12:01:01 +0000
Manifest this update: Fri 24 Jul 2026 12:01:01 +0000
Manifest next update: Sat 25 Jul 2026 12:01:01 +0000
Files and hashes: 1: Lqur6ZAGNL1ulbCAad6HGsiWQyE.roa (hash: bghFI/F9IV8PP3AOsFzer9ecqyhiQ6uXbQxrY4jrXXw=)
2: QnPDfxOasLj9mBdxtNiMPGF1-aU.crl (hash: yx4N+iZnEfwwOr2eKJ0dxD8wsVKKepTbykX1h3sAFDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnPDfxOasLj9mBdxtNiMPGF1-aU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:00:18:a7:f3:77:16:bb:79:45:8f:29:07:ce:c2:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4273c37f139ab0b8fd981771b4d88c3c6175f9a5
Validity
Not Before: Jul 24 12:01:01 2026 GMT
Not After : Jul 25 12:01:01 2026 GMT
Subject: CN=b11aed171356dc413bde0cb0b48d7b80095a9e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cb:0d:da:6a:d3:d4:c1:cd:21:03:d1:10:07:
40:d3:40:37:40:9c:8f:7a:cc:4d:70:b9:27:1e:16:
c0:23:ed:22:0c:81:25:a9:41:75:4d:1c:e2:72:22:
e6:3b:3a:d6:06:d6:22:23:2c:67:b2:a5:42:ca:08:
55:2e:b7:36:59:63:c0:90:0e:36:ca:5b:3a:0b:8c:
e6:f7:29:e2:2c:7c:6a:1c:49:aa:9a:d1:16:2e:61:
5c:03:a5:8b:b4:27:b1:8e:c5:a5:bf:ac:e8:01:a8:
bb:96:ae:3a:c4:41:9e:5b:d2:34:f8:3f:da:b8:6d:
dd:c6:61:a2:a5:87:48:20:ed:23:3b:af:03:67:21:
05:14:2e:7e:c2:4a:88:c7:c5:59:22:a3:76:8e:f3:
c3:77:55:63:11:b8:e5:90:ac:38:64:e4:2a:90:02:
8d:eb:63:ca:ae:18:03:e0:1e:ed:ab:cd:5a:8f:71:
83:e8:85:6a:d9:e4:af:d5:0c:20:74:4b:74:78:4f:
8b:c5:60:c7:02:e7:bc:4c:b2:c9:e4:66:ce:a5:a3:
f8:0b:3f:01:3e:09:46:5b:c6:86:8c:81:be:07:8c:
51:ba:ef:58:fd:3f:7f:78:54:68:8c:9e:f1:25:1d:
05:aa:d5:7a:07:b6:14:47:7f:5f:23:c1:08:0a:70:
c7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:1A:ED:17:13:56:DC:41:3B:DE:0C:B0:B4:8D:7B:80:09:5A:9E:82
X509v3 Authority Key Identifier:
keyid:42:73:C3:7F:13:9A:B0:B8:FD:98:17:71:B4:D8:8C:3C:61:75:F9:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnPDfxOasLj9mBdxtNiMPGF1-aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:7c:02:3a:3d:92:8e:f5:d3:ab:fd:ee:b7:39:49:d2:c7:9a:
12:22:73:fa:0d:04:47:3e:00:d2:12:1f:d2:6b:c7:57:7b:25:
a3:6d:fb:61:70:0f:30:d5:93:0b:82:4b:3f:f4:9f:30:34:a2:
c2:ba:5e:43:95:b6:a1:17:fa:ee:df:be:cc:a0:5f:a8:00:da:
88:ef:c8:0f:65:4e:89:64:7b:2d:b2:31:69:a4:f8:31:e5:4c:
e4:cd:38:22:19:a4:fe:7d:6d:da:68:fc:ad:48:82:bb:04:8c:
9d:7c:aa:4c:b6:2a:64:11:eb:31:8a:35:ed:49:da:e3:2b:e6:
cf:f2:6a:64:cc:68:31:29:9a:6a:69:17:3b:2e:ff:05:4d:20:
35:7f:5d:14:0c:6b:11:02:7d:f3:71:21:12:cd:b0:f0:4d:63:
31:d9:d8:e5:7f:6b:3e:cb:84:6a:ff:15:ed:ea:11:46:b2:90:
78:6e:90:04:fd:f2:0d:65:c4:14:d1:d2:e3:8a:b4:20:b9:d7:
e6:66:59:74:4d:3a:c9:0d:5f:5b:7c:6e:cf:0b:9c:f2:02:14:
11:ba:17:e5:70:bd:45:e8:ac:bf:64:c6:f2:52:99:05:f5:a6:
8e:6c:0b:a3:94:cb:00:41:87:81:62:0e:28:57:b4:95:9e:7e:
2d:18:87:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:32:42 2026 by rpki-client