Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
File: QcjQJBEIsB9etwj-i7uEfVOjDxY.mft (raw, json)
Hash identifier: /fZF9oxUYNrJ1G6l1JvtvtMzS7RtwdGL5PBaJ1rJoM8=
Subject key identifier: 18:54:48:7A:3F:2F:07:99:E8:80:59:B1:A6:D2:78:43:A3:21:E7:82
Authority key identifier: 41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
Certificate issuer: /CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Certificate serial: 019F9512696A2EA8F2841EB86C7FDAC26D86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 17:00:39 +0000
Manifest this update: Fri 24 Jul 2026 17:00:39 +0000
Manifest next update: Sat 25 Jul 2026 17:00:39 +0000
Files and hashes: 1: ALRri6kgiQCaJnYBd8e-iNH8nUk.roa (hash: bRi9PCHK9wO56WGyzaQUXDtECAlJgx3ISDb8+1dq0Jk=)
2: QcjQJBEIsB9etwj-i7uEfVOjDxY.crl (hash: 8y1g2J5GIeZcAB2vWQEqAc8ty8V9+jsK+2Cd6GLdR88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:69:6a:2e:a8:f2:84:1e:b8:6c:7f:da:c2:6d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Validity
Not Before: Jul 24 17:00:39 2026 GMT
Not After : Jul 25 17:00:39 2026 GMT
Subject: CN=1854487a3f2f0799e88059b1a6d27843a321e782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f9:5b:80:4d:1b:5d:1d:14:46:da:70:27:4b:
b1:7f:21:f7:36:1c:69:75:5e:fa:f2:6d:a3:09:ed:
79:32:d9:0d:05:ec:70:fa:df:27:b2:3a:5e:19:23:
a6:a2:f0:5e:a0:49:b6:b3:fa:df:ee:d3:b7:04:91:
79:d8:83:e4:38:28:e6:8c:a2:54:98:dd:45:c7:31:
d7:7b:72:49:bf:a4:3d:29:35:9e:04:09:20:ab:ee:
ec:58:43:d8:13:b5:f2:3a:04:30:99:ba:97:c5:9a:
55:02:45:f3:d7:e2:22:cb:68:22:7f:50:ed:a9:cd:
12:6d:a1:d8:4e:73:9c:d5:93:b4:64:c4:b8:0e:60:
2b:53:29:0e:fb:27:1d:98:08:b0:aa:c5:20:03:b5:
bf:49:7f:b7:c0:1a:c5:f5:dc:72:dc:05:55:11:36:
79:eb:b4:3f:c4:9c:1a:0f:5d:81:5b:05:7b:c3:ac:
41:e1:ff:30:db:22:56:cf:2a:b7:87:f4:8e:0c:2c:
c7:21:4b:35:a8:98:86:12:a9:87:c6:98:e3:ce:f9:
04:e6:d8:e0:5f:34:cd:12:d9:ac:34:7e:03:ee:5f:
ad:05:6a:78:4d:2d:d5:90:f7:95:d4:a2:4f:3d:11:
7c:f9:74:e0:a2:a5:33:f4:36:16:7c:e3:c1:66:94:
a1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:54:48:7A:3F:2F:07:99:E8:80:59:B1:A6:D2:78:43:A3:21:E7:82
X509v3 Authority Key Identifier:
keyid:41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:5e:05:28:f1:e4:df:24:f9:bd:82:c4:65:2b:e3:ba:aa:15:
cc:93:c4:e1:ef:ea:b9:78:a5:93:61:b7:be:78:b5:44:63:65:
62:73:a0:0d:eb:7f:8c:e4:bc:ff:b5:54:7d:50:a6:e5:c6:0f:
fc:9a:b8:17:8f:cc:eb:78:c8:c4:11:1e:a1:20:21:46:0d:35:
fa:dd:56:6c:76:4c:3d:7b:4f:ab:30:c7:5a:2f:40:67:a2:ff:
3c:f0:53:7c:60:f6:0f:03:f2:6d:c6:71:a2:29:b9:bd:6e:3f:
76:74:75:50:d7:74:b0:85:04:54:4e:41:56:1e:5e:4e:80:e1:
5d:d2:e0:15:e1:a3:32:2d:a7:1f:84:5c:ae:c3:13:79:b8:7c:
0c:0e:91:55:38:d0:3b:8a:d5:fc:15:60:65:32:ea:c8:a5:32:
3d:69:4b:75:6e:d2:de:52:89:87:47:cd:b3:6f:e8:70:5e:30:
1d:b1:d3:62:cd:6e:eb:79:a1:fc:cb:15:65:60:96:f3:a0:c9:
f8:04:07:24:44:24:13:da:de:49:a9:04:75:60:9a:32:da:0c:
94:8a:5d:1d:59:07:41:24:75:ee:83:62:2c:9d:3a:06:b7:0f:
3f:6e:6b:8a:c6:36:05:ed:0b:bf:2d:ff:bb:ae:1e:3a:8f:d3:
e4:63:49:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:24:24 2026 by rpki-client