Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
File: Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft (raw, json)
Hash identifier: ppL3WZR/xFXjNUg2uudrnM6mdmPjX53JBJcqhx6Ib8M=
Subject key identifier: 34:74:CA:E6:F3:3C:84:65:CC:9E:00:35:E8:EA:31:EA:76:F6:03:D7
Authority key identifier: 42:1E:49:E1:C7:55:FD:E0:38:BD:18:75:C7:F3:97:A5:68:64:60:14
Certificate issuer: /CN=421e49e1c755fde038bd1875c7f397a568646014
Certificate serial: 019F94A4523946D876F7530CE16AFCF748B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
Manifest number: 0BDB
Signing time: Fri 24 Jul 2026 15:00:24 +0000
Manifest this update: Fri 24 Jul 2026 15:00:24 +0000
Manifest next update: Sat 25 Jul 2026 15:00:24 +0000
Files and hashes: 1: Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl (hash: rvirK61q7XTQW0TXkFHhiEvAgdIGqVqy4varAFODWwg=)
2: tzxRcibemA94VnMAm0dv4MlqbUA.roa (hash: VBIKKEa5Iy0UgSH1dlBF7tfkGRCcGJgtuhRAaqjOCP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:52:39:46:d8:76:f7:53:0c:e1:6a:fc:f7:48:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421e49e1c755fde038bd1875c7f397a568646014
Validity
Not Before: Jul 24 15:00:24 2026 GMT
Not After : Jul 25 15:00:24 2026 GMT
Subject: CN=3474cae6f33c8465cc9e0035e8ea31ea76f603d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:49:9a:99:4b:60:1e:b3:dc:da:2c:c0:1e:0a:
9e:83:09:59:26:86:43:0d:fe:c3:b2:7d:4d:bb:9a:
ae:c7:98:14:c9:0d:30:6d:88:a4:1b:a6:d3:48:75:
13:aa:fd:51:7c:a7:f2:3e:bd:a5:bd:5d:72:7b:26:
39:9c:77:7b:2c:a5:c7:90:8c:dc:09:1d:87:dc:98:
d5:f8:3b:f9:68:39:f3:03:b5:2a:e4:af:50:05:d3:
97:c5:47:0d:f4:c4:69:3e:0c:06:68:0f:e4:5b:21:
34:ed:06:87:d4:5d:4e:96:78:ce:03:97:2b:ef:78:
1a:f0:37:ef:6c:c7:d6:4e:8b:47:bb:53:70:3f:20:
eb:9d:74:2c:59:f9:c3:a8:ff:32:3c:c7:46:bb:02:
76:9e:69:55:b8:0a:f3:c5:79:21:c3:6c:71:92:40:
31:6a:64:22:ee:54:14:57:99:de:4a:38:96:90:3d:
7b:35:71:44:54:b9:bc:ce:1a:97:78:2a:b3:96:bf:
83:e0:2f:f2:61:c4:3f:bb:71:6b:8a:1f:df:60:be:
35:11:54:fd:0b:67:62:49:15:19:dd:22:fd:dc:30:
05:a0:3b:c6:84:4b:fb:b7:26:6d:55:0d:7b:a6:81:
28:35:37:78:9c:9b:f8:ba:64:c0:38:f8:ed:71:d5:
22:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:74:CA:E6:F3:3C:84:65:CC:9E:00:35:E8:EA:31:EA:76:F6:03:D7
X509v3 Authority Key Identifier:
keyid:42:1E:49:E1:C7:55:FD:E0:38:BD:18:75:C7:F3:97:A5:68:64:60:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ec:62:b1:d6:44:05:cc:51:0d:a7:8d:a3:50:76:05:27:03:
e7:12:c6:f2:f0:1e:29:6a:3a:b3:37:e7:22:35:3e:df:95:53:
ef:34:1c:df:76:80:c9:85:f7:09:89:90:e0:32:87:30:62:aa:
df:f9:ac:19:2f:23:b8:f8:86:00:6b:09:5e:46:00:b9:1d:7f:
75:f3:3d:00:86:be:62:04:1d:6a:9c:71:71:01:fd:36:5b:40:
0b:28:fb:2b:b6:55:4c:e4:8b:3c:27:bf:c3:57:ce:80:ba:50:
66:66:0c:2a:89:b8:93:e2:cb:3f:1a:7d:cd:e6:77:9b:d9:5a:
53:4e:5d:a9:9f:c7:d3:54:70:55:2f:1d:20:c8:d3:8c:ea:05:
e7:78:05:9f:09:e4:e8:9f:72:81:26:20:f9:6f:81:a6:e2:25:
dd:d1:c6:df:fd:50:34:2c:09:f2:47:66:67:e3:14:ac:7c:49:
7f:87:80:1f:1a:d4:ca:d0:df:f3:f3:07:cd:6f:7b:8a:a3:b0:
55:80:9d:ca:23:c2:95:07:73:57:e0:09:22:7c:13:84:36:d2:
cc:d5:7f:a1:69:f9:41:1e:62:68:42:7a:f7:8f:6b:bc:33:9f:
fe:79:2a:22:ed:cc:0c:42:9b:c9:08:2c:32:ae:3d:b4:d4:1c:
1c:e1:c1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:50:06 2026 by rpki-client