Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
File: QsMDcZht9dVk7mcHRxe2agL_VxI.mft (raw, json)
Hash identifier: xA9plGF3nnyWuHi8pfBALCLHPtyDMmPw45KzvP4RQpA=
Subject key identifier: 83:72:A9:5A:15:F3:18:59:A7:A9:E5:FC:CC:E6:BA:83:64:C9:0C:D2
Authority key identifier: 42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12
Certificate issuer: /CN=42c30371986df5d564ee67074717b66a02ff5712
Certificate serial: 019F9436FA47210CB465700DF3851A53EE99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
Manifest number: 18B9
Signing time: Fri 24 Jul 2026 13:00:58 +0000
Manifest this update: Fri 24 Jul 2026 13:00:58 +0000
Manifest next update: Sat 25 Jul 2026 13:00:58 +0000
Files and hashes: 1: QsMDcZht9dVk7mcHRxe2agL_VxI.crl (hash: Pu+dKbFOEVhY2pwUAdIrX8lSgfj60WC9fNmqIsPSJ2Y=)
2: kIdKfcVB8xoU-jL0GS61sHZEdFc.roa (hash: 0PfvIN3m+RMyfBShY3gPVZh53Z/48yCnaRs0eMSULZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:fa:47:21:0c:b4:65:70:0d:f3:85:1a:53:ee:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c30371986df5d564ee67074717b66a02ff5712
Validity
Not Before: Jul 24 13:00:58 2026 GMT
Not After : Jul 25 13:00:58 2026 GMT
Subject: CN=8372a95a15f31859a7a9e5fccce6ba8364c90cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:87:f3:4d:74:d1:bb:fe:a2:5e:d7:6e:ab:99:
0b:cc:54:01:48:eb:44:fb:92:f9:5d:8e:66:00:fc:
2a:e6:9e:56:25:ad:4a:e1:37:a3:61:f7:55:e2:a9:
b9:d0:64:f9:e2:fb:f2:f9:86:47:c7:3a:c9:c7:43:
8a:5c:3e:7b:68:f9:b8:dc:c8:9e:d0:3d:41:d8:96:
f7:b5:d9:f5:20:1f:35:88:19:3c:9e:0d:57:d0:39:
4d:07:63:0a:88:8b:82:3c:f6:e3:5e:c8:5b:82:66:
7c:c2:4e:44:53:27:9d:fb:c2:72:46:6b:c7:05:9c:
92:ce:22:87:52:a0:6f:f5:91:50:59:06:02:dc:05:
09:c7:40:a6:9c:84:b5:a4:17:a4:69:bc:b4:04:3c:
f2:54:77:3b:4e:e4:ac:29:4f:a1:32:5c:a3:57:90:
d7:79:52:aa:ff:eb:09:1f:42:3c:d0:dd:cd:f7:67:
4f:cd:7b:c9:5a:5c:99:eb:6a:70:0f:24:eb:27:18:
ce:05:b4:af:8c:6a:45:16:b1:95:e1:a0:ff:48:fa:
ac:24:d4:76:e6:05:93:19:f4:3b:20:c2:a5:ac:71:
c3:4d:26:e0:e7:ce:8d:cb:47:c1:f5:57:09:8d:c8:
1e:67:be:de:ec:0f:47:8a:dc:c6:82:7a:19:80:c1:
89:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:72:A9:5A:15:F3:18:59:A7:A9:E5:FC:CC:E6:BA:83:64:C9:0C:D2
X509v3 Authority Key Identifier:
keyid:42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:6f:fa:9e:c7:4e:d9:34:53:70:f6:60:4b:ad:32:66:c5:70:
40:a2:ea:06:a3:d8:ea:2b:d3:bd:15:a6:44:2c:3a:c1:16:3a:
ff:4f:95:41:e5:3b:32:6a:18:fc:52:48:bd:dd:0c:71:75:70:
ea:2c:b8:c5:fd:26:e9:05:9d:20:01:a4:26:5a:19:58:78:6f:
57:0f:4e:ca:a3:2d:b3:93:df:5f:c7:95:ae:84:8b:aa:6f:8e:
31:93:6a:57:8e:19:0a:72:a9:c5:02:33:87:e6:f5:af:92:fa:
03:90:d0:4a:10:38:f1:85:a3:b0:ff:c6:1f:fa:2e:60:81:10:
22:bd:7f:2a:b5:b4:b9:40:b7:1a:38:61:b1:b0:ae:00:0f:0b:
9e:b4:17:76:e7:77:ea:00:d8:74:de:90:d4:cb:a4:48:0e:a8:
48:dd:e7:f1:af:8a:72:41:ca:ed:b2:ec:d8:f5:d9:58:2a:c2:
70:65:79:fb:98:16:1d:55:d9:5c:c0:2e:f3:27:3e:fd:cd:2e:
40:4e:c0:4f:1c:1e:05:e9:f2:90:e1:95:17:5b:e4:fe:3c:e5:
02:06:4e:10:c1:6b:b0:c4:bb:5c:90:5d:52:fd:d2:11:34:61:
e2:c4:08:60:ff:af:0b:8b:59:cc:38:1a:01:a6:74:f2:79:e5:
69:98:67:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:47:18 2026 by rpki-client