Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
File: 4QBqBtxJCZf_j8OkLs84m-090Xg.mft (raw, json)
Hash identifier: 6PbLALknZ8jNQRgPRUZTL9qb6poI2/vOk+v8jN4lDS8=
Subject key identifier: 57:5E:20:3B:AC:8F:A1:C8:B1:53:36:1F:54:68:2A:66:0F:C2:8F:75
Authority key identifier: E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78
Certificate issuer: /CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178
Certificate serial: 019F92B69DB79E7DEC0EE064D9AB75CBF43E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 06:01:09 +0000
Manifest this update: Fri 24 Jul 2026 06:01:09 +0000
Manifest next update: Sat 25 Jul 2026 06:01:09 +0000
Files and hashes: 1: 4QBqBtxJCZf_j8OkLs84m-090Xg.crl (hash: rKttP95u5lfsvoI+Eymf/ejASb+0m+4nRJgfyTAK6Us=)
2: UdwPC5AdaFNXtHywAO0ry8S25cM.roa (hash: tBmGJBJCpxYDGJAJLW9uH/5FtF0sovEOEcwJbFRoFVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:9d:b7:9e:7d:ec:0e:e0:64:d9:ab:75:cb:f4:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178
Validity
Not Before: Jul 24 06:01:09 2026 GMT
Not After : Jul 25 06:01:09 2026 GMT
Subject: CN=575e203bac8fa1c8b153361f54682a660fc28f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a3:77:60:fe:43:f0:ff:5e:42:27:d3:e5:7e:
40:7c:4f:c0:fa:86:69:da:00:19:58:b9:45:8b:e9:
ea:1c:70:a4:0b:cc:56:5f:7b:35:0c:63:e9:0c:2f:
1f:36:46:28:da:9b:1e:c0:c8:8b:e1:2e:1e:34:8a:
ca:54:65:c9:2e:f4:e5:ae:1a:fe:4b:85:05:97:52:
b4:a8:6c:6c:00:fc:3e:19:3a:49:c4:52:8c:b6:49:
ed:47:ee:69:d9:b9:4e:6f:a0:52:8c:21:93:8a:b1:
ba:ab:05:7b:af:57:b2:18:b7:de:eb:e2:a4:69:e5:
c1:1d:9f:25:43:74:5d:d9:b8:0b:d1:fe:e8:7a:0d:
db:66:23:47:e9:27:cf:73:39:6d:64:a3:b7:84:72:
69:7d:f5:cd:4d:5e:90:d9:f1:8b:6a:59:21:d3:30:
04:84:83:7e:3c:91:47:34:d4:f0:e8:21:1e:0d:a7:
88:fe:e4:84:36:eb:2a:79:ea:0d:0d:54:3f:d8:8f:
b6:8e:f0:ad:9e:8f:94:75:b2:cd:b9:e9:25:87:0a:
c3:5a:c1:28:d6:81:2f:28:4c:e5:3d:39:a2:56:c8:
88:4d:f7:67:72:aa:78:1b:16:be:d5:49:7d:f2:9a:
02:36:4e:ec:75:39:dd:b3:bf:69:92:ce:3e:18:33:
7c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:5E:20:3B:AC:8F:A1:C8:B1:53:36:1F:54:68:2A:66:0F:C2:8F:75
X509v3 Authority Key Identifier:
keyid:E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e9:e2:5c:fe:ae:4b:70:78:41:0a:51:aa:b1:12:8c:37:49:
92:1a:49:26:6a:ec:a9:0b:50:35:21:76:0a:9b:f8:a6:2d:10:
34:f9:f5:d4:7d:69:d4:19:be:ab:88:fe:7b:2e:09:fa:cd:86:
02:4d:7d:4d:1e:86:35:89:3e:a3:ea:eb:1d:12:9d:b5:6f:ce:
b7:45:5d:7d:b6:be:5e:19:cc:64:44:80:b0:d5:e9:54:2d:12:
68:7d:ce:96:4a:c6:9e:21:40:af:73:a1:d8:f8:46:5e:ae:c6:
4c:e5:f4:2d:9e:df:f6:59:52:d9:a6:83:59:86:e9:16:91:48:
3c:c3:59:ca:81:8c:0e:98:c5:72:fd:ff:16:22:f1:00:c6:18:
f8:09:5e:c8:79:17:02:4d:63:da:7f:56:b9:fc:f5:0a:88:59:
c9:3b:7b:ed:71:26:3a:9d:53:8e:dd:76:38:ca:87:e2:15:1a:
be:95:5e:d8:4d:7c:c5:fd:37:e4:24:4a:a9:f7:e1:b5:ff:4f:
12:b9:8c:5e:14:12:ce:06:03:6a:17:98:0e:6a:2f:19:64:78:
4e:00:88:a2:06:ec:49:0e:0d:be:c6:ff:ec:08:e8:b7:61:40:
33:bd:07:70:da:8a:95:03:ce:87:e1:06:8f:e3:a0:03:1d:d6:
d9:e3:cc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:24:23 2026 by rpki-client