Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft
File: q3kW82CYNO1AFNqMaVs0CnsKWA4.mft (raw, json)
Hash identifier: P2S9jF87baUVGIqTBgbtUvS5mXFwt6K1f8yVxY26J28=
Subject key identifier: F4:A4:B4:B7:52:C3:2A:E4:37:CD:59:0F:01:06:EC:88:35:76:48:98
Authority key identifier: AB:79:16:F3:60:98:34:ED:40:14:DA:8C:69:5B:34:0A:7B:0A:58:0E
Certificate issuer: /CN=ab7916f3609834ed4014da8c695b340a7b0a580e
Certificate serial: 019F8EA2AE576081EA2A19A7209D83747F3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3kW82CYNO1AFNqMaVs0CnsKWA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft
Manifest number: 0371
Signing time: Thu 23 Jul 2026 11:00:53 +0000
Manifest this update: Thu 23 Jul 2026 11:00:53 +0000
Manifest next update: Fri 24 Jul 2026 11:00:53 +0000
Files and hashes: 1: LTVOJrN7tMu87dFspIcmBlzwME4.asa (hash: tHJyxmUmJCWBdZOh74CFjQH4LfeAyi34h5vxnLm7Pjk=)
2: SZY6wsq_78e2nLvWAkeHk1piMW4.roa (hash: crCAmARzqXmw7E9/kb/thI4py7GtbXwH0Xp22Jp2Zrs=)
3: q3kW82CYNO1AFNqMaVs0CnsKWA4.crl (hash: RwKyMt3t14uaWlNMB+EflLfXL6DUnNG5XB6mG4ueeXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3kW82CYNO1AFNqMaVs0CnsKWA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:ae:57:60:81:ea:2a:19:a7:20:9d:83:74:7f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7916f3609834ed4014da8c695b340a7b0a580e
Validity
Not Before: Jul 23 11:00:53 2026 GMT
Not After : Jul 24 11:00:53 2026 GMT
Subject: CN=f4a4b4b752c32ae437cd590f0106ec8835764898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4a:d0:21:a8:a1:7c:c0:6b:31:21:1b:3d:f3:
0e:b2:49:b6:81:50:9b:69:a2:83:5f:78:51:b4:5f:
23:df:bb:e5:90:ba:5d:e5:91:6d:f7:7c:0b:13:8b:
3c:b7:74:2a:c4:80:3a:c0:1a:bf:5e:58:d5:7a:e8:
9e:06:cf:a0:a5:ff:fd:f2:16:88:79:c5:93:03:75:
4a:4e:4c:21:0d:f7:05:61:85:ce:2b:e7:ae:14:9b:
64:1f:ee:96:4e:61:d8:ab:4a:a0:3b:5f:81:c5:81:
98:cd:ee:84:62:1d:6f:ca:eb:1d:ba:d2:c1:03:e2:
a0:a9:b8:ae:9d:f6:69:c3:9a:6e:dd:15:d3:e7:40:
27:32:24:55:ce:a8:a5:d2:49:21:b1:ef:74:89:3b:
86:88:af:9c:96:6d:7b:63:27:40:04:1a:be:28:77:
d2:82:8a:18:38:68:60:41:4e:fb:70:f6:cd:4b:55:
25:f5:42:c5:47:87:56:f4:82:f9:8f:7a:4d:62:75:
d9:34:5d:31:06:ce:42:d6:2e:20:89:a6:2e:55:05:
a0:3d:11:40:64:b0:2e:87:a8:c4:82:d0:f2:6b:b0:
b9:e1:36:00:ce:cf:6b:63:87:1b:38:da:38:24:cb:
9d:4f:8c:39:dd:4f:70:d7:a4:f3:35:bd:99:4d:94:
2c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A4:B4:B7:52:C3:2A:E4:37:CD:59:0F:01:06:EC:88:35:76:48:98
X509v3 Authority Key Identifier:
keyid:AB:79:16:F3:60:98:34:ED:40:14:DA:8C:69:5B:34:0A:7B:0A:58:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3kW82CYNO1AFNqMaVs0CnsKWA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:de:61:dd:81:a4:1c:d0:cb:f8:7a:51:f1:ef:3a:19:41:84:
6d:b8:91:f3:28:b6:ae:cd:ed:5b:bb:2d:65:fb:12:55:f1:a6:
8a:d3:3b:54:f6:a1:d5:4c:f1:a4:4a:be:fa:83:0c:20:2c:85:
c5:4c:20:4a:a4:93:c4:16:c7:3b:c4:8c:49:e2:20:e1:b2:c3:
a0:50:7d:f9:45:ef:90:21:5d:94:44:84:4d:a4:2d:dc:84:53:
09:6c:07:da:8b:12:9d:be:05:91:da:f8:e8:43:6e:e2:12:3f:
51:46:87:52:00:27:35:01:d4:7b:73:36:e4:a2:aa:f7:15:16:
f4:7b:69:11:d6:32:88:8c:c2:8f:f0:4b:16:24:07:5a:e9:69:
f5:48:1b:04:c0:f5:be:e9:15:e2:5f:8d:79:16:4f:25:4d:00:
83:96:14:29:0b:b8:ca:69:d6:31:14:dc:4f:2a:48:76:74:c5:
dc:97:0d:36:e8:c6:6e:9f:a3:35:f8:42:38:69:3e:49:d1:d0:
d8:9a:50:ce:2d:23:ff:70:c9:1d:33:1e:c6:0a:16:af:9b:58:
d6:0e:ee:9d:06:42:b4:bb:ac:fa:17:69:49:03:bf:86:39:6f:
37:89:df:cc:a0:fb:b4:6f:9a:26:78:d4:e2:8e:6b:e0:2d:99:
b1:14:1e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:04:36 2026 by rpki-client