Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
File: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft (raw, json)
Hash identifier: LJ2rtc2zzjNNZeEqh4yVQZRgJH0EwbPtanLfHBWbmgM=
Subject key identifier: 10:9D:FB:25:09:CB:8E:8F:6B:AE:F0:3B:10:AD:B0:20:02:05:C3:BF
Authority key identifier: 43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
Certificate issuer: /CN=43a438813750133e55001bf89670a0db3ae5be1f
Certificate serial: 019F9391D2B9A4E50C3DE9E7C9D285921C2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 10:00:35 +0000
Manifest this update: Fri 24 Jul 2026 10:00:35 +0000
Manifest next update: Sat 25 Jul 2026 10:00:35 +0000
Files and hashes: 1: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl (hash: IjWmDTfMxd90t5+xcxEFzQecXyMBjyszPD1RNxgEYR8=)
2: TooDCGrMmE8TWOWnC74K3nWuV3A.roa (hash: GIzJZl3HOD2NAFRpAxSwsyFue5zuRGFN1EKt60XvdLE=)
3: _Fbs2myjlyXM3gZy6ijAia4ZHT4.roa (hash: 8ZiAikGkRwLzcArbFm/2YKSLA5m5mnQdWj1FO5Wjvcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:d2:b9:a4:e5:0c:3d:e9:e7:c9:d2:85:92:1c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a438813750133e55001bf89670a0db3ae5be1f
Validity
Not Before: Jul 24 10:00:35 2026 GMT
Not After : Jul 25 10:00:35 2026 GMT
Subject: CN=109dfb2509cb8e8f6baef03b10adb0200205c3bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5e:a0:45:4b:e2:c1:2a:38:af:08:bc:7f:ec:
d5:ac:ef:d5:f5:65:3f:1d:7e:7b:96:30:d7:1b:9e:
25:30:ed:ce:f4:33:b4:5e:fe:88:2b:3c:e5:d8:68:
71:fa:ca:83:6c:4e:11:5e:ca:8e:d6:63:f0:84:85:
f4:71:7c:57:66:78:e4:52:17:25:7a:22:e9:28:61:
15:50:77:db:71:b2:9b:46:8f:01:d6:93:0a:66:24:
bd:9c:d9:a4:5a:54:c3:9d:f2:92:42:a3:0b:65:98:
65:59:79:16:87:f6:5a:b1:46:92:e8:bc:f1:a5:b0:
c9:43:0a:c5:5e:22:7e:23:f3:21:4f:c3:64:5b:75:
36:ab:3d:d5:09:28:3d:a7:76:91:f9:ff:af:87:f7:
19:f3:1b:37:e9:7d:21:82:62:af:12:26:c3:be:62:
3a:16:dc:c0:0c:8f:71:a8:79:98:c0:54:9a:6a:d1:
55:d4:67:1b:4f:16:d8:e4:2f:95:b4:03:df:1d:33:
2c:5e:60:8a:1e:27:f6:38:3c:cb:52:fe:82:56:d8:
61:b3:94:b3:e2:ea:09:9e:c7:7b:66:8f:90:13:fa:
3c:5b:fb:0e:0d:53:db:59:9b:21:6a:f3:f4:7a:b9:
71:c3:2c:5c:8b:f9:c8:68:ed:dd:f1:4d:b8:4d:c6:
3c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9D:FB:25:09:CB:8E:8F:6B:AE:F0:3B:10:AD:B0:20:02:05:C3:BF
X509v3 Authority Key Identifier:
keyid:43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:18:c1:21:a8:6c:d9:3f:71:e5:7f:49:7c:c8:bd:da:dd:3b:
57:aa:a1:cc:ba:02:97:1e:5f:4a:1f:06:b8:ad:2b:22:8b:30:
ae:93:d8:c3:ad:4c:09:65:2a:9d:64:9d:0d:e4:fa:60:a6:5e:
4e:c6:8e:e5:bb:51:6e:88:91:90:29:f1:9b:d3:87:f8:e5:88:
5c:00:ba:ea:9d:eb:48:33:e5:36:7e:95:64:d7:26:9b:69:45:
3f:8e:c5:7c:7c:cc:11:e0:b2:47:21:df:45:aa:cb:b7:7c:4f:
6d:af:fc:c9:03:e1:00:0a:33:a4:9a:46:23:2c:af:0c:b0:f4:
28:80:eb:a3:12:aa:ee:97:9a:7b:ba:3c:03:58:e7:f5:66:41:
e8:94:ff:83:dd:04:53:f2:a6:8b:2f:15:69:25:77:20:ca:a0:
58:b5:bb:93:f6:39:50:02:d3:31:a4:86:72:6e:5f:50:53:a3:
c1:34:5e:77:14:ec:00:c4:9e:60:a3:c2:85:1f:88:a4:55:e0:
ea:c8:3f:80:9b:be:ca:3f:36:fa:67:7e:f9:79:89:57:ed:08:
19:82:b5:dd:71:8d:ae:7d:00:63:93:57:94:84:1b:c0:15:54:
42:a9:94:84:7d:bb:d2:0b:0b:c0:5a:34:69:43:ca:58:e8:ac:
90:d4:b8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:02:37 2026 by rpki-client