Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft
File: QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft (raw, json)
Hash identifier: wBF2wECZJwPstNMjGAt5rBNsjUGZ4Vpi9Fp7lHTGr2E=
Subject key identifier: E1:E5:63:76:87:30:D7:19:04:31:81:87:67:EA:14:AC:B9:33:51:E5
Authority key identifier: 40:D5:59:1A:75:BD:69:3E:9D:3B:76:68:34:BF:07:4F:7B:1E:EE:3A
Certificate issuer: /CN=40d5591a75bd693e9d3b766834bf074f7b1eee3a
Certificate serial: 019F951296E59AC4BC23224D26094E73C989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNVZGnW9aT6dO3ZoNL8HT3se7jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft
Manifest number: 0DD6
Signing time: Fri 24 Jul 2026 17:00:51 +0000
Manifest this update: Fri 24 Jul 2026 17:00:51 +0000
Manifest next update: Sat 25 Jul 2026 17:00:51 +0000
Files and hashes: 1: QNVZGnW9aT6dO3ZoNL8HT3se7jo.crl (hash: YMUVQhypI7x3gZmxgNkLG/vkkfCx789Vp429nJZS2Gs=)
2: YVo8LjxK7TZOHy2e0UtRMc12yMo.roa (hash: y1sW6xShCe5Zkqn/itmgk+RBNdntx91KOyuie9DOHaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNVZGnW9aT6dO3ZoNL8HT3se7jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:96:e5:9a:c4:bc:23:22:4d:26:09:4e:73:c9:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d5591a75bd693e9d3b766834bf074f7b1eee3a
Validity
Not Before: Jul 24 17:00:51 2026 GMT
Not After : Jul 25 17:00:51 2026 GMT
Subject: CN=e1e563768730d7190431818767ea14acb93351e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d9:f7:f1:fd:29:11:ba:24:23:1e:66:65:69:
f8:e8:1d:01:e2:67:80:4a:b2:18:e8:7a:c0:7a:15:
88:41:10:b5:3b:82:0b:13:6f:a0:4c:e9:db:cc:20:
64:62:66:bf:00:a6:85:c7:51:e8:ea:b6:91:50:4e:
78:21:3b:ad:41:fb:5d:bd:98:5c:02:a9:1c:a5:a7:
00:3c:13:31:f4:4e:77:44:62:b0:11:a7:ad:50:bf:
c7:90:ec:4c:ed:17:95:67:85:db:e8:b2:c9:d3:ca:
50:53:61:0b:bd:f5:ae:7a:9a:1e:49:51:b6:52:28:
f6:14:f9:66:69:85:86:0c:6e:c7:f3:1e:e9:fb:c5:
b3:3e:97:3b:37:d0:6c:fd:b2:04:8a:54:19:ca:f0:
ba:12:12:65:3d:14:68:b9:39:03:e1:0a:48:3c:e7:
e4:81:73:92:8b:3f:45:24:da:2d:ec:76:00:98:94:
56:f7:f1:2d:2d:a4:48:9d:d5:99:ad:89:fb:b6:48:
50:7c:7a:92:db:a6:a9:cc:a3:7f:91:c9:de:28:66:
8b:ce:2a:51:c3:04:09:a0:bc:85:76:9a:d7:5a:5d:
7c:b2:30:52:5c:3f:da:27:13:a2:de:07:64:b2:13:
cb:c2:26:71:6b:b0:e3:05:01:8f:09:81:1f:b9:38:
9d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E5:63:76:87:30:D7:19:04:31:81:87:67:EA:14:AC:B9:33:51:E5
X509v3 Authority Key Identifier:
keyid:40:D5:59:1A:75:BD:69:3E:9D:3B:76:68:34:BF:07:4F:7B:1E:EE:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVZGnW9aT6dO3ZoNL8HT3se7jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:cd:71:6d:ec:29:92:77:ab:0c:74:d0:da:94:88:40:95:b3:
ed:93:ad:15:dd:1b:b2:ab:dc:a4:ce:af:a2:02:30:3f:76:4c:
53:25:07:e5:12:04:94:9c:4a:d6:d0:1e:23:ce:86:5e:ee:1f:
a5:25:ef:b3:00:7f:fb:04:d6:76:08:00:a6:d9:13:bc:a8:24:
66:17:d7:15:15:66:41:77:b3:a3:67:91:cf:a7:28:f3:91:24:
c9:3d:3b:b3:44:13:32:86:1c:4b:00:43:08:a7:ed:d8:f1:bd:
cc:aa:ca:f0:b0:bf:14:48:e6:4d:68:c6:48:25:1d:e7:89:32:
99:ac:f6:b7:73:49:cb:b4:50:19:c2:ad:46:39:f0:6f:7a:b7:
57:1c:ff:20:39:fd:f2:4e:71:9b:28:e1:b3:0b:dd:d8:77:82:
6f:39:d7:49:9d:b4:35:a6:50:59:50:67:3d:13:00:e4:fe:d9:
03:26:1d:4e:60:cc:07:cb:69:95:e1:10:b6:fb:74:e4:41:cb:
02:0e:bd:42:48:da:21:22:ab:e8:18:bb:0d:7a:a8:8e:8b:18:
b3:87:62:21:fc:42:7d:23:3b:92:92:ae:81:b5:0b:12:d3:18:
83:44:8b:49:c6:e4:75:7a:d8:96:bb:dc:a6:76:44:c7:1f:3f:
27:fb:c6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:26:52 2026 by rpki-client