Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
File: QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft (raw, json)
Hash identifier: pOgyfkAj7YpfB1s88WmZtv0wkv3PLi0zI3K1KAy4ZQ4=
Subject key identifier: CD:D5:C1:C3:AA:70:E1:EF:10:2F:D7:72:1D:78:54:16:0E:F6:A4:37
Authority key identifier: 40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4
Certificate issuer: /CN=4092c47db8a21931154605d576c3b7341d06b4b4
Certificate serial: 019F8EA2F5C72196B88DE2F09F1E4432470B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
Manifest number: 174F
Signing time: Thu 23 Jul 2026 11:01:12 +0000
Manifest this update: Thu 23 Jul 2026 11:01:12 +0000
Manifest next update: Fri 24 Jul 2026 11:01:12 +0000
Files and hashes: 1: 4lRlhSc9Jzpgo2qyOZgRPmeBS8E.roa (hash: fe25PIHE4R92mruy7bWhmhbyquYQv4J/2uT5rEcGMtI=)
2: QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl (hash: 0KqjaXzKQPFAc4W3zb9UvjQRGFsReOVPeln5uytFeko=)
3: d4L-Ywam3q9FKYpyHF6Nixngago.asa (hash: zY2cIfwxMRiOqaAZBQMaP/RsPvaaJfXbxud7F/yA2YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:f5:c7:21:96:b8:8d:e2:f0:9f:1e:44:32:47:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4092c47db8a21931154605d576c3b7341d06b4b4
Validity
Not Before: Jul 23 11:01:12 2026 GMT
Not After : Jul 24 11:01:12 2026 GMT
Subject: CN=cdd5c1c3aa70e1ef102fd7721d7854160ef6a437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bf:76:7d:49:d6:a9:1d:6e:42:f3:f8:f3:f8:
99:68:2e:9e:f9:74:70:f1:c8:42:61:62:2a:cf:74:
30:93:ea:77:8f:7b:4a:f2:b4:05:cd:bc:14:33:3b:
ba:d0:fa:e0:1a:da:f2:ba:bc:72:b5:b6:02:ab:ec:
5b:70:2a:7a:d2:8c:f4:c9:20:69:85:d8:30:05:9e:
d4:32:7d:07:dd:d7:85:90:82:8c:05:a3:df:a0:76:
dd:c9:93:92:2f:e2:f0:c2:3e:07:81:07:b9:27:60:
38:4c:3a:a4:ff:4c:28:bd:ff:37:db:fe:b1:90:f4:
4c:a6:f5:2a:28:29:82:ac:54:97:9a:c9:60:c8:f6:
fd:70:fa:7d:5f:cc:fa:ee:44:be:c9:c9:e4:c9:ef:
04:81:7c:62:f8:9e:b5:12:18:6f:ef:40:8a:02:4b:
cc:26:7f:19:2e:7f:18:d2:ed:34:e7:94:8b:9e:84:
88:19:a0:f1:1e:eb:23:f8:73:67:b8:24:b5:bf:b1:
7e:45:b8:7f:4f:cc:f1:4e:76:da:89:2a:44:d3:4e:
ce:92:af:fb:8c:10:8f:87:c0:8f:45:b1:2e:3c:1a:
03:c7:60:0a:2e:79:18:71:69:8d:df:67:cb:70:01:
82:3f:8c:26:86:1b:37:ed:a3:0e:15:ed:6b:78:ed:
40:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D5:C1:C3:AA:70:E1:EF:10:2F:D7:72:1D:78:54:16:0E:F6:A4:37
X509v3 Authority Key Identifier:
keyid:40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:1c:7e:5c:d9:8c:15:fd:61:2c:dc:9b:d7:bc:36:27:47:57:
cb:23:f1:19:aa:71:3c:2b:97:8f:d5:77:d6:94:33:4a:e5:8c:
db:84:fd:7f:d9:c1:01:ae:f9:1f:56:2b:57:c0:c2:59:24:d7:
32:0e:3e:49:8f:f4:b8:d6:cf:e4:7d:3d:f0:33:65:f8:61:59:
c5:50:70:1d:a7:ce:e9:32:3d:c9:de:8c:ca:1e:03:72:52:2c:
6c:3c:13:79:70:5e:dc:92:0e:95:bd:d2:d1:25:0c:27:f6:b6:
d9:22:c8:0b:17:41:e8:ee:e9:eb:13:b1:57:96:a7:81:0f:44:
d5:54:1a:ae:3f:52:40:ca:81:2b:96:05:bc:1a:24:61:32:b9:
a3:6d:ef:5f:da:53:90:df:29:34:54:1c:60:db:b3:75:3d:1c:
48:e5:0b:7a:14:fc:df:c8:49:76:02:e4:fe:d1:1d:d1:98:e1:
a6:4f:42:d7:d4:2a:3c:f5:9f:22:82:8b:4c:1c:90:e3:8e:89:
1c:8c:a7:9b:09:27:63:af:27:e9:81:bc:7c:2a:ae:27:d5:37:
56:51:61:a6:6f:b4:e5:98:49:1c:ab:89:83:34:85:1e:f2:cd:
0f:31:b0:fc:ba:5e:49:51:0e:fe:0a:0b:bd:a6:b4:15:03:88:
20:3d:64:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:02:49 2026 by rpki-client