Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
File: QpNhzRgdhu9U6-L8kagOxTTOrHg.mft (raw, json)
Hash identifier: RDSySbHEEEA5HPlRsFkCn+Ne3waOWVnrHXuAnCBe6u4=
Subject key identifier: 98:07:F7:F4:2E:6B:0B:5E:10:78:6C:04:9B:DF:1D:89:C3:29:F1:D9
Authority key identifier: 42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
Certificate issuer: /CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Certificate serial: 019F91DA859A0F75138D11C45DF920359F0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
Manifest number: 0DF8
Signing time: Fri 24 Jul 2026 02:00:44 +0000
Manifest this update: Fri 24 Jul 2026 02:00:44 +0000
Manifest next update: Sat 25 Jul 2026 02:00:44 +0000
Files and hashes: 1: 9pGoDb8m8-uHunZG0g4IpC_J3W8.roa (hash: j9T9+HzYFR2vUjj6NG2JWZokXgG77nlwhtywobwQLLE=)
2: QpNhzRgdhu9U6-L8kagOxTTOrHg.crl (hash: hy7hJOV8aN9ffb7N9E18Q6ApkuQeQnN4LUvOKLpo8WM=)
3: yJnPYZA1yZSCQgYd_0lPnb8sfL4.roa (hash: ee1f7M50/x8p9bLR5E0wEJgtc9ejznbk546kHlNn9qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:85:9a:0f:75:13:8d:11:c4:5d:f9:20:35:9f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Validity
Not Before: Jul 24 02:00:44 2026 GMT
Not After : Jul 25 02:00:44 2026 GMT
Subject: CN=9807f7f42e6b0b5e10786c049bdf1d89c329f1d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:60:70:92:cc:06:d6:41:e9:ec:a0:2e:5e:36:
a2:90:7c:5a:95:76:f6:8c:f1:bf:b9:c2:0f:53:96:
f8:84:c4:91:65:a7:be:14:ff:8d:93:17:cb:5f:ae:
f1:bf:e8:9e:50:9c:e8:ac:cd:33:9a:8b:dc:51:dd:
dd:ad:0c:f1:ae:29:38:8a:15:11:93:ec:0a:0a:5d:
8c:63:62:ad:e1:b7:f9:37:1a:a7:a5:fb:4b:87:b1:
89:84:05:95:93:1a:fd:f2:47:9a:b6:df:c9:5a:49:
65:8e:05:6a:bc:85:50:ba:49:0d:60:84:5c:51:c9:
c6:46:46:03:db:d0:55:42:81:72:f3:f7:c3:f7:67:
0b:b8:70:7c:1d:0b:83:2c:94:ba:1b:42:5e:c6:d3:
74:cf:0a:56:43:34:ba:58:f9:05:6b:5a:4b:f6:ad:
b3:75:98:43:07:6e:65:e3:d2:e9:39:ef:3b:46:2e:
7d:c6:b2:67:07:0a:c8:36:2b:31:93:eb:a4:cf:92:
c6:d6:e1:11:6a:2d:8a:2e:10:50:4d:e4:e6:7f:22:
5b:0d:dd:ba:4c:bf:ed:0c:42:77:a0:a6:8d:0b:81:
d0:48:64:74:de:f8:c1:02:16:89:ee:67:03:07:22:
42:04:c6:67:c9:4f:ce:53:e6:e7:de:96:33:79:b7:
e4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:07:F7:F4:2E:6B:0B:5E:10:78:6C:04:9B:DF:1D:89:C3:29:F1:D9
X509v3 Authority Key Identifier:
keyid:42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:fe:f8:71:af:b8:77:c0:70:7c:27:6f:58:75:d3:03:35:0c:
89:28:62:58:38:c7:fb:3f:9b:5b:1c:1a:4c:b8:e1:de:c3:b8:
78:57:ca:64:4e:4b:a2:95:55:e9:de:b7:04:f8:cb:b4:54:4f:
76:2d:93:75:1a:ab:e3:83:5f:6c:30:66:dc:be:cc:13:2e:b6:
81:80:8f:dd:87:a0:6b:ef:54:22:18:0e:c2:8f:82:d2:b5:d4:
d0:7b:08:77:98:cd:a6:7e:0b:8c:31:b4:4e:ef:15:84:70:e1:
0d:29:23:78:88:71:33:cc:e6:85:6c:77:9e:af:5b:aa:d1:f5:
e1:b5:7d:52:6c:63:e2:9d:2e:05:a9:d6:32:8e:42:86:75:92:
42:47:4a:ca:fb:29:fe:e2:c3:8d:c2:c2:d2:4d:b0:83:73:82:
8f:98:c0:22:8d:4d:f6:ab:79:4c:72:1f:08:fe:cc:ec:e2:29:
3e:ba:24:85:4f:19:44:0b:93:bf:b4:72:36:5e:00:6f:1e:ac:
59:47:61:9a:90:75:43:8c:82:47:b6:ce:e8:56:55:b2:b1:66:
77:eb:b2:90:58:6f:4d:1b:19:a4:05:b6:70:80:3c:81:dc:a2:
93:9b:bc:da:a7:16:c8:24:87:68:64:92:c1:4e:5f:a0:6d:d2:
63:87:4f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:49:26 2026 by rpki-client