Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
File: Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft (raw, json)
Hash identifier: WS1kb0AFCNETBEAxbPPGCainuVI/HhgNl+FXRLIb0oo=
Subject key identifier: E3:3A:76:E8:39:D8:0A:17:B2:CB:AF:96:A0:C6:A7:EC:47:82:54:5D
Authority key identifier: 42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02
Certificate issuer: /CN=429b1cf21d20f8c6f94641e3327e4555e2e41102
Certificate serial: 019F90C829AE149DA91F6C08488570FBF40F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 21:01:04 +0000
Manifest this update: Thu 23 Jul 2026 21:01:04 +0000
Manifest next update: Fri 24 Jul 2026 21:01:04 +0000
Files and hashes: 1: Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl (hash: F5WPeIHz+vvH32B4UQNiZbyLeA3MUjg4RFaTWqLR5qM=)
2: Seo64cK5BBL5Z5Lga5yI1lf8M6w.roa (hash: LMUW9+NLiMGnI7ZWrV590GSKNkkWYi8Hg05UOVRU3Cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:29:ae:14:9d:a9:1f:6c:08:48:85:70:fb:f4:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429b1cf21d20f8c6f94641e3327e4555e2e41102
Validity
Not Before: Jul 23 21:01:04 2026 GMT
Not After : Jul 24 21:01:04 2026 GMT
Subject: CN=e33a76e839d80a17b2cbaf96a0c6a7ec4782545d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:42:f7:0b:ee:20:b1:e2:2a:1f:99:e5:6d:b9:
24:94:47:e6:57:d9:25:70:b1:6e:57:66:23:e8:22:
fb:26:3e:e4:7a:a0:1b:13:55:a1:2b:e0:61:fa:32:
d3:c8:7a:04:09:a5:a0:54:a2:f3:c8:a4:ea:ab:ea:
6e:86:5a:ad:9c:f2:d2:11:eb:c2:dd:dc:5e:ec:49:
48:27:60:8d:6c:4e:4c:f2:69:71:55:c0:80:db:e0:
4b:f8:79:bc:ba:e1:a6:90:52:27:4b:a9:cf:41:c8:
f4:5d:c0:a5:cd:67:4b:47:38:58:76:e8:c4:88:f1:
b8:4e:b9:69:ce:31:9d:ca:aa:f5:46:2c:dd:78:c0:
1d:c3:51:20:41:ff:73:38:1e:95:34:70:57:ae:fd:
d9:bc:78:99:6a:18:8b:a3:60:62:24:19:9e:bf:85:
96:17:dc:53:85:f6:d8:15:aa:8c:d1:43:fe:fd:ac:
d9:51:39:02:d6:86:be:a9:90:34:b7:36:cc:20:5b:
2c:31:7c:4c:79:f1:1f:6d:cd:0e:40:14:35:1a:95:
5b:83:f1:ea:4d:cf:9b:00:c9:a2:58:82:28:2b:e2:
cd:ec:0b:2a:a2:92:99:9d:4c:ac:3f:7d:d8:f1:21:
91:2b:d5:cc:ce:7b:b8:0b:4a:7e:61:69:8c:8a:94:
29:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:3A:76:E8:39:D8:0A:17:B2:CB:AF:96:A0:C6:A7:EC:47:82:54:5D
X509v3 Authority Key Identifier:
keyid:42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:1c:c8:9c:5b:b9:5a:29:d1:0d:ab:f6:09:e8:68:df:cc:1b:
b6:5b:fd:8a:f7:5e:97:b2:a3:1f:7e:6b:43:c0:7f:79:50:8e:
9f:c1:d7:34:75:c8:d1:6a:c1:3c:55:47:da:94:09:da:ed:0d:
6a:78:c3:0c:48:7e:f0:5e:de:c6:ca:de:ad:63:88:6c:81:60:
95:1a:c3:2d:05:cf:27:c7:cb:46:60:68:95:b7:d1:1a:3f:d2:
31:f8:4d:a1:59:4c:15:b5:47:6f:8d:15:8b:8d:29:fb:2e:f6:
3a:81:39:1c:89:2a:9a:b3:f2:9f:65:eb:58:e2:c2:71:72:b1:
17:2c:37:f6:2c:f6:d9:3f:93:de:17:1c:8d:a8:d7:ad:f8:a8:
8a:42:c9:85:4c:b0:a6:49:f4:f0:95:4f:c0:31:97:2b:9b:62:
77:2e:d2:51:a9:12:08:a0:7e:d1:08:e1:7a:3b:b6:07:65:3f:
ce:78:2d:e2:bd:59:dd:39:f9:0f:49:f3:e4:c0:b0:43:a0:62:
c3:96:a3:9b:e7:bf:d8:56:f7:8f:e3:1d:a9:95:7a:74:4b:bc:
dd:36:b2:04:89:58:6e:2f:14:9e:7f:59:b5:b9:f7:2b:86:53:
cd:a3:45:69:c7:cc:6e:8c:ba:97:b2:81:8b:11:2a:a2:5b:2d:
69:58:d1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:25:26 2026 by rpki-client