Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
File: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft (raw, json)
Hash identifier: jLBpbXY2IpKgydN4kAtwjDCQcnCA8ZG4PvpyslG4Wms=
Subject key identifier: C5:F3:75:98:88:59:06:E5:14:16:57:31:AA:3C:52:01:5A:28:E9:53
Authority key identifier: A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
Certificate issuer: /CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Certificate serial: 019F94DBCEC9829006E33E3341E0C20B7D61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
Manifest number: 1564
Signing time: Fri 24 Jul 2026 16:01:01 +0000
Manifest this update: Fri 24 Jul 2026 16:01:01 +0000
Manifest next update: Sat 25 Jul 2026 16:01:01 +0000
Files and hashes: 1: 3FimOljJosTayAtjbZa6x1Z1MXs.roa (hash: MeEGr+necOtlrJoGJSW1/wG4DV94jp5QrV4hS1BQHCg=)
2: QP9nM5PMiejN9yhohpS-UJYwohQ.roa (hash: YoeG5CqmyBDeclyGv/x1kOlmle614YEmox8sx9pd0fU=)
3: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl (hash: AsgamL28x3R7gKr5Z5WkVPtLlWxLfkHAmglMpnqlSW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:db:ce:c9:82:90:06:e3:3e:33:41:e0:c2:0b:7d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Validity
Not Before: Jul 24 16:01:01 2026 GMT
Not After : Jul 25 16:01:01 2026 GMT
Subject: CN=c5f37598885906e514165731aa3c52015a28e953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4e:59:f4:3e:cd:fd:87:da:aa:e0:2f:a9:a7:
31:08:ff:bc:44:ed:f5:b4:60:a8:55:78:a8:f2:72:
c3:32:8d:7d:21:84:82:b1:2d:b6:50:7d:c3:07:9f:
c4:09:fd:9d:72:fe:10:1d:6a:a2:37:ac:6e:5f:34:
6f:e6:f9:98:0e:29:f1:1e:1f:e1:e4:7f:e1:05:99:
89:57:8a:be:55:e4:f6:a7:3e:39:01:ff:9d:70:be:
29:06:7f:a5:e8:df:40:99:aa:fe:53:be:da:77:6f:
79:3b:32:3d:c4:6c:12:60:3b:af:9d:0c:32:bf:ef:
f5:a7:19:43:61:45:cf:57:d5:d8:cd:ad:e4:b5:f0:
54:7e:63:be:20:2d:23:57:7d:4a:54:02:d6:50:b7:
d3:29:75:07:0d:5f:c2:39:db:ca:08:7a:79:44:92:
07:58:37:f9:1e:11:32:eb:43:ab:b8:e1:b8:97:d9:
27:8a:eb:b2:87:d4:10:d1:ef:d5:25:a0:d0:36:ec:
c8:a5:5b:5a:33:17:83:7c:d7:13:dc:44:ef:41:f9:
28:4f:09:ba:76:0e:f4:f9:66:df:45:56:ae:a6:aa:
43:03:b1:62:5f:37:55:ff:b1:f7:5b:47:86:04:b1:
87:5f:43:ce:d2:4f:12:c3:de:9f:53:78:1f:74:a8:
75:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F3:75:98:88:59:06:E5:14:16:57:31:AA:3C:52:01:5A:28:E9:53
X509v3 Authority Key Identifier:
keyid:A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:b2:95:8c:9b:32:92:47:c6:55:5b:df:34:a2:70:27:c0:6b:
c3:35:5c:83:88:47:50:2e:34:5d:e6:eb:02:db:9e:df:76:20:
cc:3d:09:32:16:34:06:27:46:b7:4f:e2:a2:2a:b3:c9:01:7b:
ff:1d:e0:dd:f8:2b:8d:c6:12:94:40:20:23:0a:9f:81:91:e4:
8b:1b:de:62:bd:65:19:48:4d:e0:60:b2:e8:3b:0a:32:87:fb:
74:e0:43:65:e9:33:ea:98:bc:b8:5e:6b:6e:1b:97:43:71:c9:
6b:4c:50:26:2c:09:e0:11:a4:56:75:df:38:ac:5d:e4:2b:84:
cd:60:93:4d:59:9e:ea:44:bc:6e:c1:bf:f1:9f:be:cf:29:e6:
21:c5:58:de:8d:b1:9a:ac:49:56:11:12:3d:a1:d1:16:64:4d:
2f:7c:f0:53:77:33:4a:d4:66:81:db:e5:37:8e:15:8e:8b:40:
d4:d0:87:40:ff:85:75:c1:d0:94:b3:a8:98:9e:d3:a9:10:64:
cf:74:22:4d:fd:3d:30:89:68:e8:4f:a1:49:b0:f5:b8:ef:b7:
c4:1f:c7:c1:cf:37:a4:9c:70:ce:6f:cf:b9:e2:67:76:be:1d:
cb:9f:f2:0c:fc:8f:e6:31:48:4c:72:55:1b:07:0a:55:63:d7:
90:cd:33:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:15:29 2026 by rpki-client