Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
File: QHSniVh1zyxnhUT2zm9LI59JKfs.mft (raw, json)
Hash identifier: aGMjDVMnCEcsMJWhMsIPdEZ5e8IWxnBwheEGyONiVjs=
Subject key identifier: C1:44:5D:D9:5D:03:CD:9D:E4:40:22:B6:F3:79:38:74:17:C5:FB:1E
Authority key identifier: 40:74:A7:89:58:75:CF:2C:67:85:44:F6:CE:6F:4B:23:9F:49:29:FB
Certificate issuer: /CN=4074a7895875cf2c678544f6ce6f4b239f4929fb
Certificate serial: 019F93924283C37D97339369420F68B72063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 10:01:03 +0000
Manifest this update: Fri 24 Jul 2026 10:01:03 +0000
Manifest next update: Sat 25 Jul 2026 10:01:03 +0000
Files and hashes: 1: QHSniVh1zyxnhUT2zm9LI59JKfs.crl (hash: 0U6Vb4BapNHTUiIj2XM6s57rimeY+U604xvrxgySokE=)
2: ugMrWtr-AgbWpTxdCrlYjC4RyWA.roa (hash: 5ukMlR12Rye0g+suC8BFsAQhk/pWlg5h05IGSX13iYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:42:83:c3:7d:97:33:93:69:42:0f:68:b7:20:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4074a7895875cf2c678544f6ce6f4b239f4929fb
Validity
Not Before: Jul 24 10:01:03 2026 GMT
Not After : Jul 25 10:01:03 2026 GMT
Subject: CN=c1445dd95d03cd9de44022b6f379387417c5fb1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:50:65:49:ea:42:18:c2:e9:3a:10:18:d3:bc:
6e:02:8a:c6:58:df:5f:a6:71:2d:97:21:2d:23:15:
42:95:c7:0f:43:08:6c:a0:ae:20:36:16:11:b0:6c:
e3:de:8f:c7:16:98:15:7a:42:18:fc:0e:fc:23:94:
cb:d0:26:53:e0:88:de:e9:7c:6d:c0:f0:e2:c4:50:
94:70:d0:82:5c:69:a3:ed:56:14:2d:32:eb:b9:b5:
6b:25:d8:13:83:40:02:d4:33:ed:b9:b0:e1:3e:51:
14:70:cb:8e:79:cf:61:8b:71:38:7a:89:e3:f1:88:
e3:10:86:28:02:b5:c9:64:0a:4e:14:a9:1d:bc:7a:
c2:ab:b6:56:bc:f1:53:c4:92:0d:b7:f3:38:ee:fd:
43:d5:da:bf:60:a4:ec:dc:e9:5b:7b:a7:ad:ec:ee:
58:18:74:1d:10:72:43:f8:76:91:53:6b:d8:bc:88:
bc:43:b7:1f:4c:28:7e:bd:43:b4:e1:8b:27:6b:db:
7d:cc:e8:85:30:08:ce:3f:4f:19:dd:33:d1:5b:ad:
a4:c7:4e:bf:63:df:db:08:f1:10:d0:a5:e4:d5:96:
e3:21:1d:cd:71:2c:b2:5c:d2:eb:cb:56:29:7a:0b:
9a:75:0f:36:d1:54:61:8e:d9:1e:39:9d:5c:7f:6c:
fb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:44:5D:D9:5D:03:CD:9D:E4:40:22:B6:F3:79:38:74:17:C5:FB:1E
X509v3 Authority Key Identifier:
keyid:40:74:A7:89:58:75:CF:2C:67:85:44:F6:CE:6F:4B:23:9F:49:29:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b7:07:d2:d8:b5:ea:60:3b:fe:f4:70:48:bc:bb:65:d3:b1:
86:d9:7a:53:55:59:1a:93:82:29:d1:fe:0a:0e:31:c3:9e:33:
05:37:e6:76:ad:5d:2e:7e:61:ce:52:49:7d:e3:47:22:97:f9:
bb:81:33:8c:b9:1e:01:e6:4e:62:b4:90:21:47:4e:4a:ab:2d:
43:84:f8:27:8d:2e:68:fa:ad:c0:28:a6:e8:25:9f:10:be:80:
d8:03:a6:bc:4e:5c:8e:d2:8e:ec:66:b2:28:71:cd:31:a5:40:
c2:89:d5:56:f8:a0:df:c0:84:5f:93:f8:2e:43:f1:84:f4:ae:
df:17:6e:36:e5:69:f1:6b:c5:00:93:bd:83:f1:fc:d1:01:da:
05:a3:2c:ff:9b:eb:c8:5e:83:3d:a5:5e:29:b3:fe:af:28:7f:
6a:88:73:c1:42:3a:7f:ab:f5:e2:83:5e:8f:ef:ef:4b:76:d6:
c0:f0:17:40:e2:a9:c6:3d:96:ba:c8:43:c6:11:b0:cd:50:a5:
6c:f6:3b:98:2a:da:4a:15:fe:26:8d:7a:0b:e1:37:21:05:84:
4f:19:3a:ba:a1:36:3f:63:37:2d:21:b7:7a:07:0f:8f:f8:ad:
de:31:3e:4d:00:f7:e1:08:f7:d5:1a:9a:29:f2:11:7b:f9:a4:
56:0c:7d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:03:39 2026 by rpki-client