Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft
File: QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft (raw, json)
Hash identifier: HnWEzg9V+JpgS44qxnfZMwII9eLq/FxIWKZ41Z43POk=
Subject key identifier: C4:17:D7:3E:7C:27:41:CE:2C:79:27:60:AF:8C:F7:85:B1:28:FD:F6
Authority key identifier: 42:F9:A9:69:52:77:7F:10:74:33:83:03:EC:B6:50:25:C4:E2:B8:B5
Certificate issuer: /CN=42f9a96952777f1074338303ecb65025c4e2b8b5
Certificate serial: 019F927EF5961A56A4081B1133AFD6688149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft
Manifest number: 0B03
Signing time: Fri 24 Jul 2026 05:00:21 +0000
Manifest this update: Fri 24 Jul 2026 05:00:21 +0000
Manifest next update: Sat 25 Jul 2026 05:00:21 +0000
Files and hashes: 1: 65LDhkWiOsePvay_daaS19w9IrU.roa (hash: RDR1Bk3idKoyL2q+z5ptGPj51Bc2Dh1ei6t9SnrsQKk=)
2: QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl (hash: lkxdRC0ObZKTijov4J6eCUCRmla5Hq0o/GCpNkRFko8=)
3: VwG9H-H3BKxa182EuYMKOfW-pDY.asa (hash: VucV4WG0cObsmaD2Gcwxp4U13EVpmlKVeoHtemnYiqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7e:f5:96:1a:56:a4:08:1b:11:33:af:d6:68:81:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f9a96952777f1074338303ecb65025c4e2b8b5
Validity
Not Before: Jul 24 05:00:21 2026 GMT
Not After : Jul 25 05:00:21 2026 GMT
Subject: CN=c417d73e7c2741ce2c792760af8cf785b128fdf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ee:2b:3f:fc:ed:4f:81:f4:a6:37:e6:56:0d:
24:e4:16:82:d3:20:27:84:57:23:8f:72:9d:9a:c2:
28:61:6f:19:78:78:f4:69:50:10:93:89:64:f6:c2:
bf:23:e8:49:d9:61:51:db:88:49:9c:de:92:49:f1:
7d:0f:7b:8a:9a:9d:67:e4:29:c2:34:d7:6f:db:93:
59:e4:4e:9d:c5:5e:bc:5f:f2:f1:4b:79:c9:7c:2c:
ac:e2:64:7d:96:4c:38:5e:be:3e:78:74:74:cf:2a:
ce:0d:3f:44:42:49:07:36:34:93:65:59:4f:04:31:
1a:44:54:4f:78:2a:5a:47:8f:9a:2a:5c:40:10:9d:
60:28:a7:1b:20:e0:ff:84:5c:53:55:b8:2f:93:24:
4f:c1:bc:86:3a:92:40:51:6c:8b:ab:03:e6:4a:6e:
98:ca:41:a8:7f:e0:c6:db:2c:6e:0b:c2:f5:ab:21:
31:f5:20:31:90:ad:57:cd:c2:fd:84:fd:d6:d1:93:
0c:f7:8e:29:15:5c:25:e9:cc:37:68:1a:a9:52:8c:
d7:7c:82:83:e5:29:78:ad:c2:18:30:8e:f7:13:8e:
96:e7:66:52:d3:30:fd:b5:68:00:a1:85:1d:c0:2e:
f3:3b:36:56:a7:7b:53:f6:89:98:7f:04:a2:db:2a:
cb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:17:D7:3E:7C:27:41:CE:2C:79:27:60:AF:8C:F7:85:B1:28:FD:F6
X509v3 Authority Key Identifier:
keyid:42:F9:A9:69:52:77:7F:10:74:33:83:03:EC:B6:50:25:C4:E2:B8:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:29:6b:08:ab:e3:fd:18:e1:95:c2:76:67:3e:3e:f5:df:d4:
10:34:76:7b:75:e6:de:d2:e6:61:a8:21:2c:79:11:91:1c:d2:
8f:4e:16:10:67:ac:75:58:9f:a1:b5:6e:b5:02:cd:17:9b:5e:
29:38:d2:f7:e2:4f:9a:9e:64:07:74:d0:1b:54:2e:e7:d3:e2:
72:09:b6:4c:0b:be:45:76:ff:06:83:df:38:cc:3a:ed:2b:7d:
1d:cb:4b:5e:16:18:2e:ba:c2:35:c0:a0:ca:b2:17:c0:17:c3:
21:de:8f:cb:52:44:cb:21:fe:8e:1a:f2:f0:d7:42:b5:c9:9d:
59:cb:60:e6:66:e9:a8:25:6f:5a:96:13:7b:74:8d:b4:e1:fb:
c8:75:e6:e2:98:6e:d8:f4:e0:3f:94:29:87:4b:5f:43:98:d6:
e6:73:9c:08:df:06:70:69:ed:68:a7:cb:f6:ee:c7:be:2d:18:
c3:d8:e3:63:fb:09:1d:ac:98:25:00:a8:e4:bf:8e:0f:55:f8:
96:b8:21:78:6b:55:a9:12:a9:08:1b:7f:99:b1:d1:ec:61:b4:
c2:e2:c1:cc:94:b0:dc:e1:42:0b:dd:20:42:bc:98:30:92:bd:
24:eb:a6:3b:2c:e8:ca:00:b9:fe:68:15:91:13:67:c0:91:c3:
e2:bc:2c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:35:21 2026 by rpki-client