Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
File: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft (raw, json)
Hash identifier: nGaTiVZlUDWmeMV4pryQ/Faqaa4/sl0E3DPqqDPiSSk=
Subject key identifier: DF:91:CB:35:E4:62:43:5A:70:F8:38:55:99:5F:53:83:26:70:43:DF
Authority key identifier: 43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
Certificate issuer: /CN=43a8e2899693fca00bd8041ba8801f2d88869108
Certificate serial: 019F95499482B0FCF75A47F6432F47E056D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
Manifest number: 1817
Signing time: Fri 24 Jul 2026 18:00:55 +0000
Manifest this update: Fri 24 Jul 2026 18:00:55 +0000
Manifest next update: Sat 25 Jul 2026 18:00:55 +0000
Files and hashes: 1: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl (hash: KzIm1G/mSVCktNPf3gwt/TzhpduC8F5ZNbv+Po1hsFI=)
2: eqD1-410xbl18T07yvCtbxsa1Ms.roa (hash: IGD8JZ6WIWOq2cxiQwhCeO2QQ+pd/nJb7mzndaBQXkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:94:82:b0:fc:f7:5a:47:f6:43:2f:47:e0:56:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a8e2899693fca00bd8041ba8801f2d88869108
Validity
Not Before: Jul 24 18:00:55 2026 GMT
Not After : Jul 25 18:00:55 2026 GMT
Subject: CN=df91cb35e462435a70f83855995f5383267043df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ca:7e:72:fd:06:4b:6f:da:3e:49:ff:fb:59:
34:2c:91:fa:3d:19:ea:fe:dc:ee:9f:01:68:54:8e:
33:8d:0a:7b:40:5c:b7:3c:4e:c4:f3:c8:ae:3a:03:
dd:79:92:c9:20:f1:ac:7e:eb:05:3d:f7:91:27:6d:
d0:31:01:49:9a:48:b9:26:d3:e1:81:06:6e:d4:31:
2e:d1:21:7f:ad:e2:23:69:ac:f8:08:1f:45:80:83:
af:09:45:10:79:c1:0d:2c:51:8e:6a:d6:e3:06:b5:
fb:b6:00:ad:70:f7:11:40:18:9a:a7:63:c6:00:46:
e8:b4:ee:06:3b:e2:e2:c2:c8:ae:17:de:59:8f:2f:
cb:4a:35:c6:ee:b2:57:01:97:2e:cb:87:91:14:bf:
f3:d0:6e:fb:6d:f9:d5:b1:af:76:fa:19:83:f2:a9:
e1:ff:a8:06:a5:0d:65:0f:d8:8c:c0:f3:0a:e4:c5:
96:61:ad:98:7a:0f:2b:98:30:e4:6b:b8:15:d7:8d:
27:79:f0:a6:d1:39:99:8e:d0:97:b4:49:94:60:0a:
7b:4b:3c:66:a5:44:23:c5:ff:85:1e:f9:7d:f8:f1:
a4:85:d6:ef:9a:b5:56:98:d7:91:36:06:87:94:7d:
01:35:bf:14:3e:44:b5:43:0c:60:90:4e:3f:03:c0:
4f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:91:CB:35:E4:62:43:5A:70:F8:38:55:99:5F:53:83:26:70:43:DF
X509v3 Authority Key Identifier:
keyid:43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:0e:03:ff:cd:a1:a0:99:57:7f:19:0a:a7:da:86:0a:1b:a3:
2e:2c:1a:69:a0:38:63:b1:47:d3:95:f9:b3:3a:10:8c:f6:5f:
4c:05:cf:b2:d8:a9:d2:49:82:5b:bb:43:24:c3:22:88:ba:12:
c8:de:a7:fc:5b:02:90:17:23:05:a5:3a:6d:60:72:7d:99:98:
99:f1:41:80:e8:2b:05:95:b9:48:d0:ad:42:5f:06:50:00:94:
b5:ce:29:b7:47:43:41:fb:99:c1:7a:7b:6e:30:fd:bd:72:ef:
b6:61:b5:7a:54:18:f5:dc:0f:af:08:b9:18:bd:06:92:f8:83:
81:f2:79:ea:a4:49:04:e7:54:57:d6:6d:6b:c5:2d:7d:44:d1:
a0:c2:ef:bf:e9:16:0d:43:f9:2c:8b:69:8b:d5:7a:5d:89:38:
bf:cd:37:89:45:72:e6:fc:30:b5:f9:53:2c:4d:dc:21:da:93:
b0:a0:95:79:30:22:46:11:89:e4:7a:7d:d7:b1:00:a6:5f:1c:
47:c3:9c:cb:c1:24:85:c9:6d:a5:a7:d6:82:86:7f:f4:c8:17:
bf:b6:65:3d:34:3b:c4:a6:13:36:ef:82:01:35:06:b0:c2:48:
3d:76:f8:bf:9c:55:e6:fd:56:f4:4c:63:5c:d3:31:62:12:30:
e8:3c:ec:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:39:31 2026 by rpki-client