Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
File: qlPNLFhKPcFiCLqTsNt0dzs_I74.mft (raw, json)
Hash identifier: q/z/hNt1fPa6yOh12/IwXzs1v5MuXTkK+okPI89j+Wc=
Subject key identifier: AC:F5:22:E1:72:C9:6D:B6:B9:11:D5:47:87:BA:88:D9:F4:B9:1A:8D
Authority key identifier: AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE
Certificate issuer: /CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be
Certificate serial: 019F935BC985A0CD136A039692C2DB0579F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 09:01:33 +0000
Manifest this update: Fri 24 Jul 2026 09:01:33 +0000
Manifest next update: Sat 25 Jul 2026 09:01:33 +0000
Files and hashes: 1: GkaV6j5jPz1mP-Dn9Vke0qIsBRE.roa (hash: D0faA0NAhOg5B8uJp2cs027yC0WcbwJy1xgJBQXojpc=)
2: qlPNLFhKPcFiCLqTsNt0dzs_I74.crl (hash: Ie2wFIMd/Ymv1Gr9HxHeY9B0n0J2P6FxXgA3E4BEkj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:c9:85:a0:cd:13:6a:03:96:92:c2:db:05:79:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be
Validity
Not Before: Jul 24 09:01:33 2026 GMT
Not After : Jul 25 09:01:33 2026 GMT
Subject: CN=acf522e172c96db6b911d54787ba88d9f4b91a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f0:6c:94:29:b0:b1:bc:4b:a3:ad:0d:67:8d:
69:60:27:d1:8d:04:93:a2:a5:9b:57:bd:dd:a7:ce:
c3:c3:00:37:b6:f8:5d:98:f8:f6:ed:e8:04:09:a9:
19:c3:5c:e5:dc:64:10:11:b1:90:a7:46:80:cd:65:
92:a6:e3:e5:45:96:48:e3:1b:fd:86:38:b5:ea:e7:
ed:be:dd:9c:0b:9d:74:99:4c:28:fa:6c:a0:df:1a:
38:68:99:7e:1c:8b:60:b8:eb:5f:13:17:e9:96:97:
34:db:ad:c8:5a:7a:7a:dc:4c:12:78:03:d7:50:70:
07:a9:ae:33:f3:52:30:50:b0:8c:f4:9c:5e:d3:98:
fb:53:52:0e:ef:55:75:9c:ec:d7:34:a1:4a:df:39:
bc:93:09:08:cd:d3:59:a8:84:b8:5a:37:32:2d:3e:
0d:76:64:8f:a6:0d:6f:2a:60:7a:15:b8:c5:64:8f:
fd:2e:51:05:80:ce:55:ac:5a:b5:0c:51:3d:5b:6e:
56:2e:9a:b9:a8:ab:b8:a2:ba:d7:44:ec:8e:1b:88:
0a:14:d9:b1:74:30:46:23:44:3a:ce:0e:54:6e:86:
5b:9a:a3:e0:40:dd:44:45:a7:f8:22:3e:c6:0c:fa:
80:42:6f:a7:e4:02:e0:da:c1:a5:cf:5a:21:b3:b8:
98:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F5:22:E1:72:C9:6D:B6:B9:11:D5:47:87:BA:88:D9:F4:B9:1A:8D
X509v3 Authority Key Identifier:
keyid:AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c4:43:99:f9:01:26:23:ea:99:98:84:91:34:a0:e4:75:1e:
d5:b7:3f:7e:cf:c8:30:1c:c6:46:28:63:1a:33:a7:52:30:99:
15:dc:04:28:48:47:29:2f:6e:65:78:78:c0:ca:01:ee:8f:fe:
91:9a:97:8e:c0:d3:cd:03:a2:7a:25:4b:98:32:30:63:70:bd:
90:4b:2a:02:6e:ce:8a:de:09:29:2c:c5:31:07:ac:d9:35:50:
14:92:cf:d1:6a:ca:b0:07:41:73:2b:1c:7c:73:ab:67:c1:1e:
ae:66:33:0b:0f:9a:3e:08:ac:15:be:f9:7e:0a:c2:ac:b1:13:
ea:1d:4b:31:e7:70:8a:f6:79:cd:af:72:28:31:0d:74:8a:9e:
19:ff:e5:ef:05:33:80:25:11:65:a8:c8:11:ca:dd:d6:06:cc:
f9:3e:2d:2c:36:26:cc:05:12:2a:17:df:6a:9a:0c:9e:65:b0:
98:7f:b8:e8:ea:49:36:c8:0e:67:20:0f:13:53:d5:bf:89:79:
54:dc:12:4d:5e:34:d5:21:cc:66:25:90:db:a7:17:02:2a:35:
eb:04:29:75:49:94:22:49:0a:59:72:99:53:23:f4:d2:b9:96:
79:ac:3f:50:7e:4c:16:d7:29:81:e2:b6:92:71:e2:c7:b7:1c:
be:6c:a1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:02:03 2026 by rpki-client