Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
File: Qd0c5O65L_U7YziS_UV7AR4RcfE.mft (raw, json)
Hash identifier: QdW8gCL93rwxzjbUGPRyHu4B9qyj2HbU88AX7dj1WWo=
Subject key identifier: DF:05:82:AB:70:B1:0B:B7:9B:53:F3:4E:35:2D:BD:F0:0F:9F:62:47
Authority key identifier: 41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1
Certificate issuer: /CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
Certificate serial: 019F927F3459224527AEBBD8818C5D75FD4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
Manifest number: 08CD
Signing time: Fri 24 Jul 2026 05:00:37 +0000
Manifest this update: Fri 24 Jul 2026 05:00:37 +0000
Manifest next update: Sat 25 Jul 2026 05:00:37 +0000
Files and hashes: 1: 3OkMfbNK7oywxyEduLLpDjtw4pE.roa (hash: L7QwofR/zK4j6up4RavhL5dZloz6sdS+umIJ+YznSC4=)
2: BfXkb3Ul_TeZj4Afd4e_3oJ5s1c.roa (hash: 7KGanpBCj79/3lwELkYNBDfBwHWTdM1LjWtMw6Jbt2E=)
3: Qd0c5O65L_U7YziS_UV7AR4RcfE.crl (hash: xBXLjfN4HOXLTd3tJuq9VFkuJ1ZYb4vvq5Bzm6C3C0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:34:59:22:45:27:ae:bb:d8:81:8c:5d:75:fd:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
Validity
Not Before: Jul 24 05:00:37 2026 GMT
Not After : Jul 25 05:00:37 2026 GMT
Subject: CN=df0582ab70b10bb79b53f34e352dbdf00f9f6247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:61:0e:fd:a3:3c:d8:dc:22:ab:fa:98:86:3d:
49:37:15:13:a5:ef:4e:44:5d:b1:ec:6a:0f:ff:5c:
8b:f9:65:39:84:d3:b2:0e:f2:e6:00:23:02:69:f2:
06:2f:1d:2a:6d:46:3c:9b:aa:92:d1:be:e0:8f:04:
de:76:b5:02:d8:16:4e:e9:ac:6d:1b:b6:5d:b0:49:
b5:48:81:1f:dd:8b:5b:81:0b:23:c4:0c:96:b8:ba:
fe:01:97:61:cb:d4:a1:18:f9:70:24:52:9a:70:42:
00:d4:ce:d9:76:21:02:16:cb:15:d6:7d:32:c2:a7:
6a:52:2c:91:30:fa:0e:bc:29:b4:31:f9:24:78:f4:
a8:5d:6d:a5:a2:be:67:6c:77:10:92:53:18:91:8c:
53:7c:12:68:97:81:49:df:2c:aa:57:97:d2:4a:65:
18:ac:aa:68:cb:c4:19:e4:b0:37:3c:95:ae:1d:53:
6c:ee:0c:03:b7:94:bd:3f:2c:cc:2f:54:e7:60:6b:
7d:58:d5:b3:91:a5:df:97:d2:ed:d5:4c:7c:3d:13:
b1:e1:da:4c:8e:e6:0f:1f:43:d2:97:4e:50:aa:47:
66:41:03:7f:90:7b:5f:51:15:d1:6d:99:e6:86:4d:
f8:aa:d5:51:b0:a0:a9:e8:ef:d7:49:dc:2c:d2:32:
40:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:05:82:AB:70:B1:0B:B7:9B:53:F3:4E:35:2D:BD:F0:0F:9F:62:47
X509v3 Authority Key Identifier:
keyid:41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a6:ad:ef:93:ed:25:68:0a:f4:aa:26:a0:e9:a4:ae:eb:b9:
88:0b:be:92:52:eb:e5:63:3a:03:79:0b:d8:f6:bb:44:ee:52:
61:8a:f2:3b:80:45:3c:b7:3e:be:a2:9b:c1:d2:41:f8:5f:76:
da:3d:13:1c:7c:5f:1e:ba:d6:28:be:39:c8:88:80:d1:b3:c8:
bd:11:04:3b:43:66:a2:a4:93:58:1b:23:c7:5a:71:32:8f:95:
70:73:2f:e4:b5:4d:f0:7a:17:c4:55:d8:71:55:76:7b:54:67:
d1:9b:dc:69:97:8c:a0:1a:ed:4b:a0:9d:5d:10:7a:6a:3c:6e:
38:e3:fd:3b:f2:08:0e:7c:e1:c1:1a:76:14:36:83:ca:7c:03:
91:ce:6b:49:c5:ec:8e:f6:18:36:47:38:07:de:37:0f:e6:76:
fb:e4:46:5d:7f:f6:54:b4:51:95:d7:85:64:da:a1:8f:d2:50:
8e:24:e1:75:82:f7:bb:1c:d2:c0:82:71:a8:1c:70:f0:08:5f:
19:74:64:dd:6d:99:5a:b7:13:6e:ee:32:14:7b:d4:d7:19:6b:
8b:0a:68:af:83:69:33:cc:c4:95:d1:cf:a2:34:ff:1c:4e:a6:
57:f1:79:00:16:7a:c1:52:60:ad:3e:eb:be:24:74:85:9e:04:
9f:f8:13:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:30:37 2026 by rpki-client