Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
File: QHznj0rDupAqDDjcAaDF8hJlGbA.mft (raw, json)
Hash identifier: CrGWdwbrgSCSU8YdenwMwdW+T9yJdanSZX+m9rMPS4w=
Subject key identifier: 9F:E0:A8:63:DB:1D:D1:9F:94:B5:BE:AA:29:C5:BE:26:0D:5E:A3:81
Authority key identifier: 40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0
Certificate issuer: /CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0
Certificate serial: 019F92B632CCA15D67D02D0219CFFFE04666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
Manifest number: 0E35
Signing time: Fri 24 Jul 2026 06:00:41 +0000
Manifest this update: Fri 24 Jul 2026 06:00:41 +0000
Manifest next update: Sat 25 Jul 2026 06:00:41 +0000
Files and hashes: 1: QHznj0rDupAqDDjcAaDF8hJlGbA.crl (hash: cWYdDbPMasLED+CyuEiJR2wGN53+yUapHlxdRpZNCHU=)
2: UKN4qXdB5emZZX9TzM0PF4jJuRs.roa (hash: Y842Sm+wv4FkMHDbdNeBmo19SEMhJtIByCHRBpFd6qo=)
3: qOyavHaQUzWIgFJKhwDzN8qp-NU.roa (hash: 6+GcU7ai/o4JeNdvfA796blKNzslNJ8s8dxyOTcoPxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:32:cc:a1:5d:67:d0:2d:02:19:cf:ff:e0:46:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0
Validity
Not Before: Jul 24 06:00:41 2026 GMT
Not After : Jul 25 06:00:41 2026 GMT
Subject: CN=9fe0a863db1dd19f94b5beaa29c5be260d5ea381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1a:91:61:8e:ad:a5:61:bb:7c:5a:5c:43:f6:
63:c3:27:74:76:41:eb:b2:69:21:cd:a3:6c:20:da:
a3:0f:4f:1a:0e:b0:55:15:48:bf:0e:7f:2d:ce:a2:
a0:75:73:66:e5:13:e1:11:af:50:9a:01:64:13:c4:
ee:60:35:1b:52:fc:fa:5d:ec:26:b0:95:8b:fd:53:
d9:e5:d4:b6:44:47:d7:e0:ec:89:e0:63:05:be:16:
2b:b7:aa:a9:e9:c9:53:32:40:c3:eb:7e:f1:b8:f6:
c7:28:c8:bd:2b:6c:c4:3c:1d:27:b1:2e:b2:27:b0:
1e:7d:a6:fc:c0:60:24:4f:dd:56:0b:a5:20:0e:56:
47:60:1e:ea:d1:f7:b0:11:24:d7:5c:25:fe:ea:3e:
96:d3:38:a7:70:6a:45:13:1c:43:ad:eb:d8:9c:9d:
ec:c5:96:a0:94:d4:aa:ce:fd:4d:9a:de:d0:84:18:
75:3b:fc:7a:d4:1c:b4:ad:43:97:e8:08:8a:82:8b:
01:d0:ab:01:05:7f:04:62:2d:17:a6:a2:f9:82:cf:
8f:47:7e:80:4e:ad:ea:66:e4:f0:34:13:60:f8:da:
7c:92:5c:a6:72:5d:8a:1b:44:32:60:7f:c6:17:29:
5c:af:f6:20:8f:11:20:02:f5:06:b6:0d:6c:a2:1c:
4e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E0:A8:63:DB:1D:D1:9F:94:B5:BE:AA:29:C5:BE:26:0D:5E:A3:81
X509v3 Authority Key Identifier:
keyid:40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e6:38:a3:63:45:44:6b:4c:55:f4:d9:bb:d9:48:d5:41:4c:
75:bf:4a:36:4c:e1:7c:c6:de:14:e4:41:f1:62:0f:3b:b8:ef:
14:4e:40:d4:7b:77:b2:30:0d:ad:c2:f3:e3:f6:23:47:97:95:
be:32:99:56:25:bf:9b:51:9f:df:fe:5e:28:06:c3:65:44:4b:
61:52:49:71:a8:5f:f0:bb:06:ed:f5:d3:ae:ea:13:da:c0:9c:
e1:1e:03:5a:f0:b1:29:83:b8:e3:c5:05:9f:1f:66:97:91:b1:
c5:df:92:3f:6b:38:81:89:ff:e5:42:cd:52:98:47:24:56:8b:
be:72:32:52:4d:cb:e8:b4:30:76:2a:73:fb:c8:54:3a:d2:9d:
60:9b:13:ad:fa:4f:16:15:51:80:68:6e:7f:8a:c3:e1:92:2a:
a1:fd:07:fc:01:8d:e7:cb:00:c8:a8:53:ac:f9:1f:53:22:a2:
1b:90:ca:17:13:f8:1c:93:2c:2c:df:ac:33:73:2e:d6:46:46:
29:f9:2a:23:1d:a0:9f:0e:d5:0c:95:cc:00:50:91:97:03:4d:
2f:5a:a2:3b:79:5a:fa:4e:3b:5f:18:27:42:67:7f:4b:bb:12:
20:c5:c4:89:42:3e:97:b8:53:50:c6:4c:eb:38:57:9e:d4:6a:
81:95:8b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:07:42 2026 by rpki-client