Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
File: QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft (raw, json)
Hash identifier: w2nuQid8xhJTOYEob32z+6wBOos6tdskIMcvxNwGOIw=
Subject key identifier: DE:5E:92:A5:5E:20:17:2A:40:29:1B:01:B6:96:86:82:A3:33:8F:62
Authority key identifier: 42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
Certificate issuer: /CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Certificate serial: 019F935BC6475448E367DB139F08AE7F7D1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 09:01:32 +0000
Manifest this update: Fri 24 Jul 2026 09:01:32 +0000
Manifest next update: Sat 25 Jul 2026 09:01:32 +0000
Files and hashes: 1: MQeTf0MYRPYw_402BYO3IY08ZTI.roa (hash: ubuWvtB27a2rNunPzQvBhMbVlyiCsPYMuMsDZ/GM8W0=)
2: QC24amafYIiFlBtdr2WUg2xACfs.roa (hash: Ng0ihtKKcM9kRDb9fajNLLNxzOWsbpbjqi/vEHQuY0M=)
3: QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl (hash: 6HhgHZHG9dTVFqPErnZDQVqMliSdMjz8uoCfddWREDs=)
4: sJsFgScidYmjw0Gax5q7KoaUiTs.roa (hash: eLBSlnZ6dXYnxuPFk8J5TGTFkRXIwmeZVoqCZXfPffQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:c6:47:54:48:e3:67:db:13:9f:08:ae:7f:7d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Validity
Not Before: Jul 24 09:01:32 2026 GMT
Not After : Jul 25 09:01:32 2026 GMT
Subject: CN=de5e92a55e20172a40291b01b6968682a3338f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:97:b6:3e:08:23:d3:2a:e4:c3:ba:16:3a:05:
8c:93:56:c1:86:50:ef:84:2f:7c:c6:22:6b:2d:88:
e4:2c:35:5a:8c:ab:ae:be:40:47:f6:7e:10:d4:c4:
04:a6:a8:fd:1b:11:f1:19:e5:80:dd:12:8f:f5:aa:
5f:23:76:3b:4d:8b:49:77:c1:46:c6:9b:9e:3b:07:
54:db:3c:f5:f4:05:28:73:45:fd:0d:cd:e2:c4:22:
be:1e:e6:a4:1d:98:bb:63:21:75:a7:dd:7a:92:ea:
44:0a:f5:65:2f:7d:68:74:26:be:73:ed:00:80:54:
40:01:76:1c:bd:06:ba:35:c4:69:7a:56:8e:18:15:
cd:35:b2:4d:4f:00:35:bd:27:14:10:45:a1:64:ba:
cf:c8:6b:24:2c:9d:80:9a:16:44:dd:fc:3b:a0:f4:
e4:76:ae:fb:81:94:b8:be:1c:a2:b2:3d:29:d2:a3:
9f:a2:92:18:5f:0e:78:77:c7:b8:2a:d2:f7:51:87:
c1:75:2f:fd:1f:e9:31:54:ad:cf:9e:09:11:ea:6d:
32:c8:9f:a2:64:cf:f6:fb:c7:34:cf:96:ab:51:d4:
99:45:53:d2:c1:5b:5d:63:14:46:a2:a5:66:e6:a5:
77:39:3f:09:08:8e:f2:83:48:34:da:fd:44:73:b2:
cd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5E:92:A5:5E:20:17:2A:40:29:1B:01:B6:96:86:82:A3:33:8F:62
X509v3 Authority Key Identifier:
keyid:42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:58:d3:67:ea:14:49:1b:72:e9:06:e6:f7:a4:a3:09:ac:d4:
1f:8a:f7:6b:bf:ac:6a:58:8a:d0:f0:fb:37:a6:96:ea:28:e0:
1a:ea:3c:30:4d:7c:6d:3b:ce:9a:5e:02:37:3d:94:ad:19:b3:
6c:e5:1d:3e:42:e7:78:bc:80:d6:86:b1:99:b2:d7:8a:80:2d:
96:aa:8d:8c:10:d8:d3:4d:a4:1d:77:87:4e:01:9b:1c:df:d8:
89:25:c9:5d:98:47:9e:24:89:d5:ce:29:a7:00:96:d2:1b:ac:
64:6d:bd:3a:93:9f:04:fb:ff:6e:a5:26:1f:64:88:f0:ef:ad:
2d:6c:c6:66:10:66:5d:ab:57:17:10:b6:ee:6e:5b:6b:c7:21:
16:c7:22:f7:79:52:64:69:7c:95:63:5f:70:cb:c9:c1:f5:a7:
80:dd:0d:f1:b0:21:df:e7:a1:4c:2b:67:a0:ff:0b:80:ec:0d:
09:aa:66:ed:c2:a6:52:52:bb:b5:81:13:14:e0:11:f1:b4:97:
d4:8f:d9:4f:41:11:fd:dc:26:e1:5b:c1:df:74:52:4a:69:49:
99:31:2d:27:fe:28:17:a4:2e:5f:5d:ab:1c:fa:57:11:92:4b:
f6:25:30:b6:46:f2:ff:cc:df:77:52:c4:c7:bf:d8:3d:80:b6:
d0:3c:ec:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:21:19 2026 by rpki-client