Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
File: qT4365yxmDJdZWZzKJJY0o6587g.mft (raw, json)
Hash identifier: gI15w/qxQQ6jM0FfCK0JwiMlCOczN0dAH4PnLo5t44U=
Subject key identifier: CB:87:AD:53:5C:01:CA:B2:B0:19:97:09:85:8C:40:21:6B:94:77:E2
Authority key identifier: A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
Certificate issuer: /CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Certificate serial: 019F8E6C18E36A8C6DBF49211C6C9B79DBE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
Manifest number: 195A
Signing time: Thu 23 Jul 2026 10:01:16 +0000
Manifest this update: Thu 23 Jul 2026 10:01:16 +0000
Manifest next update: Fri 24 Jul 2026 10:01:16 +0000
Files and hashes: 1: qT4365yxmDJdZWZzKJJY0o6587g.crl (hash: p0i+/bC9EQ3hSaMMJ8Jeq+oHVxLYOf2uN8+hEsDIY9A=)
2: zkS0MtUwrQ_h652IdJT_LVppRJ4.roa (hash: SXClzu9ACUlrsWWr12HFWPaz9CkpTAyEDwuny+Lvk9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:6c:18:e3:6a:8c:6d:bf:49:21:1c:6c:9b:79:db:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Validity
Not Before: Jul 23 10:01:16 2026 GMT
Not After : Jul 24 10:01:16 2026 GMT
Subject: CN=cb87ad535c01cab2b0199709858c40216b9477e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2e:b0:0a:49:5c:4a:61:62:99:8e:ca:da:72:
62:9c:e1:c3:65:c4:1e:78:7d:20:68:73:63:fd:58:
ab:b0:c6:c0:7e:cb:c6:29:bd:be:4b:d9:69:c5:09:
8f:1a:54:31:44:71:52:a6:8f:e8:0a:94:3d:c4:5a:
42:0c:39:c0:96:90:8a:89:52:76:6c:59:f7:ae:d2:
1e:63:4d:64:83:57:60:89:19:e3:ce:4c:04:32:f6:
28:7b:06:45:96:42:01:90:df:16:62:dc:dc:6e:b3:
35:7f:92:f5:c4:2f:2a:ec:f6:59:54:af:4a:1e:b7:
e2:7f:20:f2:6f:16:5f:c1:18:2d:95:56:28:a9:32:
f7:d1:1b:0d:37:4c:e4:ea:d1:6c:6f:a6:11:eb:66:
6e:6b:aa:d1:6f:3f:e1:f2:a0:c1:e3:7f:9f:96:78:
b3:9d:ab:9d:99:c8:fc:49:c4:ef:39:af:39:4c:10:
c8:f0:9d:90:18:b0:26:3a:86:9a:26:bc:90:2b:58:
0f:cd:b2:57:44:82:d5:43:54:ee:a1:db:95:dc:ce:
65:94:23:33:40:49:26:18:20:8e:f9:e4:6c:4b:8c:
08:a0:44:ad:12:2d:e4:65:be:b6:f4:79:c7:fe:f4:
fd:66:e7:9e:c0:2c:6d:c5:fd:c8:79:68:d9:06:d9:
6a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:87:AD:53:5C:01:CA:B2:B0:19:97:09:85:8C:40:21:6B:94:77:E2
X509v3 Authority Key Identifier:
keyid:A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:36:a9:78:c4:65:bc:3b:fa:1a:b2:e9:b7:47:37:f5:cf:da:
db:5f:ae:06:dd:65:df:0b:ef:30:a9:5a:19:96:8c:43:cd:92:
be:a3:01:81:be:50:15:15:cc:a6:76:34:a0:a0:87:36:66:0a:
04:7f:69:10:f1:c5:e8:86:c1:2c:42:be:d7:76:50:cf:a2:2c:
db:4f:fe:1e:ed:89:16:44:fd:2f:86:54:c3:97:bd:1a:d9:2a:
aa:62:95:51:a9:db:ec:69:49:4b:5c:f5:91:1c:7a:36:e6:15:
dc:57:01:b5:15:04:3f:eb:2f:dc:ba:b2:1c:8f:3a:44:16:bf:
6e:70:4a:3c:83:64:35:fe:a0:5c:4d:73:33:cf:8b:f6:6b:97:
23:b6:cc:33:a9:14:1f:58:ca:28:55:6e:8c:e4:b9:98:3f:18:
6c:9c:ee:d7:69:ef:ed:58:a6:ff:57:4c:71:53:d5:eb:03:1f:
af:d0:8a:63:90:92:d6:d6:d5:53:52:e0:b6:5c:aa:31:99:31:
76:cd:e4:ae:f3:ab:94:cc:b3:e7:f7:d6:21:a2:0c:64:9c:f9:
c5:a4:51:ba:07:11:7d:53:2a:7e:40:ab:c8:d2:73:ca:51:26:
9e:5c:bf:19:b0:0e:94:af:b9:62:99:91:35:e0:b7:ab:3c:eb:
ba:23:1d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:10 2026 by rpki-client