Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.mft
File: QBY91EFO8-eS4AUB80786UQKnE4.mft (raw, json)
Hash identifier: UhAiPv7rNygv7TNSPnEXWr203/NcNaTrTY9ZX206sy0=
Subject key identifier: FF:F7:C9:34:FE:82:E3:EA:57:4A:BC:02:FB:4C:51:9C:A1:CF:83:DC
Authority key identifier: 40:16:3D:D4:41:4E:F3:E7:92:E0:05:01:F3:4E:FC:E9:44:0A:9C:4E
Certificate issuer: /CN=40163dd4414ef3e792e00501f34efce9440a9c4e
Certificate serial: 019F927EFE3D99E25DDCD30E4210FB74F333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QBY91EFO8-eS4AUB80786UQKnE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 05:00:23 +0000
Manifest this update: Fri 24 Jul 2026 05:00:23 +0000
Manifest next update: Sat 25 Jul 2026 05:00:23 +0000
Files and hashes: 1: QBY91EFO8-eS4AUB80786UQKnE4.crl (hash: 6Ei4CgiVhGsuMcgJdDoIlDbf/lpuU16f1k6uMAjGHdc=)
2: XVQmZyZgIfyuS-i9_dYYU_5CGT0.roa (hash: BPYDVshqMOmc9U1pef4+DfyaziPWsnfi+uZonkxHf4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QBY91EFO8-eS4AUB80786UQKnE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7e:fe:3d:99:e2:5d:dc:d3:0e:42:10:fb:74:f3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40163dd4414ef3e792e00501f34efce9440a9c4e
Validity
Not Before: Jul 24 05:00:23 2026 GMT
Not After : Jul 25 05:00:23 2026 GMT
Subject: CN=fff7c934fe82e3ea574abc02fb4c519ca1cf83dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:90:18:6b:66:ef:93:a5:3f:7c:72:47:bb:9a:
d3:da:2e:41:fc:c6:05:ab:45:5a:d2:e6:49:f7:b4:
53:6b:42:03:e1:ba:45:0a:39:a9:b1:a4:ec:03:45:
26:50:5c:51:09:d8:f1:5a:74:ed:ce:2e:e7:e4:14:
b4:86:9e:92:41:12:1a:9f:19:8e:9f:f0:a8:a4:5e:
92:d4:16:c1:a3:3f:a1:b4:e6:0c:f3:9f:59:74:51:
ad:ab:b1:52:e0:6e:73:67:27:37:8c:46:13:09:b7:
44:31:36:47:eb:29:68:66:9d:2d:67:2e:f3:ed:8b:
8e:c1:eb:13:83:e3:d5:be:26:76:c0:6e:27:8a:42:
ec:3c:5d:6d:22:48:fc:63:ff:ac:cf:2f:38:86:9e:
ff:d7:ca:b7:da:f6:41:83:a8:ae:d7:ba:4a:53:53:
85:2c:54:3e:6d:81:3e:40:9d:d0:2d:92:1f:7c:53:
5c:d0:e9:a4:fd:2f:ca:77:e9:5c:e7:8b:47:e1:31:
91:6d:13:71:11:1c:b3:74:7a:ea:e1:ae:c2:d6:b0:
56:f1:98:07:40:cf:8e:15:33:47:65:1d:09:01:42:
8c:58:c6:b5:f8:64:49:32:2b:45:c8:6c:86:3f:cf:
9c:87:33:e6:e8:be:98:9a:fb:81:08:ac:98:e9:a0:
fb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F7:C9:34:FE:82:E3:EA:57:4A:BC:02:FB:4C:51:9C:A1:CF:83:DC
X509v3 Authority Key Identifier:
keyid:40:16:3D:D4:41:4E:F3:E7:92:E0:05:01:F3:4E:FC:E9:44:0A:9C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBY91EFO8-eS4AUB80786UQKnE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b8:ef:ee:81:2e:7d:ff:28:95:4d:39:b7:74:6f:71:77:bc:
8f:4f:92:03:6f:95:7a:1e:2b:e8:50:89:b2:f9:42:25:31:3a:
7a:4a:16:f4:ed:92:d7:be:54:51:3e:0a:87:c4:6f:81:36:57:
30:8d:93:62:87:1c:99:48:bd:a9:5d:30:70:dd:10:0e:d5:05:
38:1a:12:d2:ba:68:5a:ab:c6:2e:42:81:0f:af:0a:c9:a2:d3:
cd:b7:cc:46:8b:8c:3e:ac:76:17:0a:fe:a9:69:8b:8b:a4:a4:
94:e8:14:18:0e:32:5f:44:88:2a:8d:33:e1:11:bc:e3:13:47:
b0:9b:11:5f:81:fe:c8:36:26:b6:e1:25:4b:49:1f:af:46:7b:
0e:e4:e3:13:8b:09:f6:d0:f2:b3:b5:53:1b:24:f5:ca:bc:72:
d2:0c:d4:91:c4:5c:27:09:e6:83:c2:87:5d:61:10:19:9f:9d:
88:d8:83:8e:ad:af:65:d1:f4:cf:a6:c5:0b:5c:04:1f:b8:1b:
b7:d9:49:64:52:41:9a:d4:2e:08:6c:a4:63:07:c2:98:1b:35:
ec:cb:9d:ad:77:5e:a0:e3:6b:a0:31:c7:ab:d1:34:bf:60:85:
3f:e0:f0:c6:cb:57:8f:ae:95:2b:af:e1:ed:d6:1e:e2:a7:99:
5f:9b:96:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:46:12 2026 by rpki-client