Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
File: QtvPm46wNgQ7t_e40zhrziTV3W4.mft (raw, json)
Hash identifier: qDvSrKsTXSVf+pNJ4rPg5GouZ0SQIv9w302DKwlCzlw=
Subject key identifier: 08:5F:A0:CE:13:91:3F:F4:19:B4:6D:BC:FD:A9:00:06:B7:47:3C:7C
Authority key identifier: 42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E
Certificate issuer: /CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e
Certificate serial: 019F954914909AB4D62559B018A1C3DF7D01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
Manifest number: 0CAA
Signing time: Fri 24 Jul 2026 18:00:22 +0000
Manifest this update: Fri 24 Jul 2026 18:00:22 +0000
Manifest next update: Sat 25 Jul 2026 18:00:22 +0000
Files and hashes: 1: QtvPm46wNgQ7t_e40zhrziTV3W4.crl (hash: jhfv7pGDjwaek3UTu3OHUod5sqCStp5jiAsWjbqKxEk=)
2: jS-v8sE_nNDS2wE29fkwjQ61v88.roa (hash: Flk+FfCfxIzDWzTQRWNpdyzzfWx1artWupYvhrPXQYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:14:90:9a:b4:d6:25:59:b0:18:a1:c3:df:7d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e
Validity
Not Before: Jul 24 18:00:22 2026 GMT
Not After : Jul 25 18:00:22 2026 GMT
Subject: CN=085fa0ce13913ff419b46dbcfda90006b7473c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:22:5d:24:be:4d:43:a7:73:07:bb:38:4e:35:
8a:f3:91:b7:f9:e0:df:d2:e8:17:84:6a:bf:ae:76:
af:87:24:a8:ad:cc:53:c4:9b:72:2a:65:0a:0d:d5:
52:3f:17:58:10:62:ea:ae:b7:1d:1e:3f:3d:65:43:
32:d9:6c:c4:f1:b5:66:57:2b:c0:5f:42:26:e4:0b:
dd:8f:8c:43:96:d3:c7:e8:d8:ca:ef:80:db:22:3d:
52:d1:48:68:04:19:22:71:c7:99:0f:9b:22:a4:a3:
52:ab:98:60:bc:9b:78:3b:bc:6a:2a:38:69:04:8e:
1f:8d:34:fa:89:6d:19:2c:ea:8f:5c:a2:99:c4:c2:
c4:10:07:30:18:f7:07:c3:a9:7c:f1:97:05:ae:1d:
27:45:ae:b2:65:3f:a6:91:ad:54:7b:8c:b3:a9:43:
ae:e8:05:b7:55:31:11:44:2c:6b:cf:98:fd:d6:3f:
f7:93:4d:6f:04:a4:98:c5:fa:50:5a:c1:ee:b1:b3:
91:8b:5b:8e:8d:2d:11:e7:dd:de:7b:17:1b:53:73:
ce:61:22:f7:c0:49:a5:95:37:b1:c7:45:40:b7:91:
b9:ac:39:29:c4:b6:12:1c:1d:25:69:d0:28:b2:74:
b5:fb:87:74:6d:f8:cd:ad:8e:30:92:4f:09:93:47:
12:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5F:A0:CE:13:91:3F:F4:19:B4:6D:BC:FD:A9:00:06:B7:47:3C:7C
X509v3 Authority Key Identifier:
keyid:42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f3:78:8e:db:4f:7c:27:8b:97:0d:1d:a1:f7:bc:46:cb:83:
70:1c:ed:7d:10:32:50:80:cd:64:4a:38:e3:5d:c2:2d:0b:88:
06:c4:54:ba:eb:f1:40:1c:6a:64:39:cd:2b:09:56:29:b0:6d:
05:94:3c:9b:26:f2:a9:43:96:ce:3c:a6:1e:a6:92:79:a9:42:
dd:fe:c3:ba:3f:30:70:e4:62:96:d4:87:f6:60:88:07:d7:3f:
e2:5d:63:64:04:65:ca:76:a7:e9:71:09:45:78:27:f6:8f:bf:
83:16:0e:02:1d:19:ed:43:d8:19:55:4d:6c:d6:e2:12:1a:29:
0b:7c:bb:28:4b:4c:a6:0f:3a:27:0c:09:1a:56:aa:2e:f8:08:
4b:d4:68:6c:fb:8e:b0:c1:ad:fb:a4:3d:fc:a9:7a:7a:e2:85:
b0:f0:37:df:13:ef:49:d6:5d:4c:ce:83:ea:60:c4:92:bb:e1:
d2:8a:0e:f8:0d:bf:de:42:95:4a:5c:43:4d:74:a7:d9:28:ce:
fc:c5:db:92:f8:e1:c6:86:74:ca:b2:bd:5e:1b:1a:43:90:38:
4c:34:29:96:3c:30:d9:4a:66:43:c7:13:01:cc:c4:bf:25:c3:
b4:99:9b:42:01:b0:75:5d:81:66:1f:e6:83:74:bf:90:41:51:
44:cf:94:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:56:49 2026 by rpki-client