Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
File: QSrIOifKhyPGGxRGw-Z4EQxlBok.mft (raw, json)
Hash identifier: cMsf3JdYzonTq86tsUAcYKKM4fFBM7ZAOTCpBmDhjsw=
Subject key identifier: 08:BA:84:C1:84:30:D4:6A:43:D7:B8:AD:3C:78:02:66:4A:74:45:EF
Authority key identifier: 41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89
Certificate issuer: /CN=412ac83a27ca8723c61b1446c3e678110c650689
Certificate serial: 019F9391C7345DBBD7AD90F47CA53F4DD579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
Manifest number: 19CC
Signing time: Fri 24 Jul 2026 10:00:32 +0000
Manifest this update: Fri 24 Jul 2026 10:00:32 +0000
Manifest next update: Sat 25 Jul 2026 10:00:32 +0000
Files and hashes: 1: 4646eK1Tkwjccpu4DCzx2JumzS8.roa (hash: lg2Dl0touPmWfPjJx+g7bMR8N5f9QX+NTtoNaXQCBJU=)
2: EnY8i1h7IIOiJBNf7SVRYwOzSLw.roa (hash: X80Gqz0nE+6UFtGApp5Wktmc8Oc2CPQtKl4rwvAFscI=)
3: QSrIOifKhyPGGxRGw-Z4EQxlBok.crl (hash: BxYnX/0vAjRU+xiSpGZfRt/HYW7mFaQig+50r+NeXt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:c7:34:5d:bb:d7:ad:90:f4:7c:a5:3f:4d:d5:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412ac83a27ca8723c61b1446c3e678110c650689
Validity
Not Before: Jul 24 10:00:32 2026 GMT
Not After : Jul 25 10:00:32 2026 GMT
Subject: CN=08ba84c18430d46a43d7b8ad3c7802664a7445ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b9:5a:c6:58:f9:d7:51:bd:b0:ca:d1:5f:49:
6c:6a:58:cc:81:45:88:3f:0c:f8:12:a2:e9:60:55:
70:45:ad:80:21:4e:e5:20:8f:75:52:9d:eb:cd:ba:
ae:a0:43:bb:23:5f:80:ef:ec:98:28:e0:a7:c4:1e:
dc:d1:31:57:60:50:88:09:3d:94:57:18:77:02:f7:
78:09:ff:48:17:2d:90:6d:02:e8:45:68:85:34:3f:
44:5b:ab:84:20:fa:24:1f:62:44:a5:5d:63:e1:16:
c9:8b:d2:66:22:0c:d6:04:3b:a1:05:cf:29:9f:f1:
fe:b8:47:1f:e0:71:22:7e:5c:79:00:59:7a:e0:c4:
5d:90:88:42:f6:9a:79:90:b6:93:ce:8c:ca:87:ba:
79:69:82:f7:d7:24:96:f0:13:f8:c0:c5:8f:1d:5b:
ce:85:a5:93:e9:5b:75:95:50:7a:05:ec:21:ad:0f:
91:d2:92:8c:79:73:df:d2:ec:f4:67:70:93:8d:3e:
35:01:b9:8c:79:62:0e:41:aa:b4:a3:c5:b7:f5:37:
7c:71:93:eb:f4:46:e3:cb:e1:60:9d:47:13:2c:f8:
35:19:73:83:b8:cb:b0:6b:d0:18:6c:fd:f0:23:f8:
f6:c1:ab:9f:75:4b:57:8e:cd:ed:62:ce:ad:f8:aa:
1c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BA:84:C1:84:30:D4:6A:43:D7:B8:AD:3C:78:02:66:4A:74:45:EF
X509v3 Authority Key Identifier:
keyid:41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:95:f6:78:12:41:f3:26:33:d3:01:58:ca:00:51:de:ab:66:
84:c9:8a:ce:28:69:1b:38:d6:03:b5:9e:37:46:6f:1d:82:57:
32:d3:b6:c1:7f:7d:e9:ae:95:9b:05:7a:22:44:e7:e6:60:79:
07:a0:2c:6d:0c:2e:09:60:3b:f1:13:77:88:89:76:d6:d5:c1:
6f:d4:8c:f5:a0:0c:f2:2a:15:0c:9f:c4:db:c8:fd:5f:b1:00:
44:68:27:97:10:c5:d6:c4:eb:dd:72:8d:5c:8c:f3:fe:29:4e:
da:76:34:c3:36:2b:46:0c:6b:d3:90:38:b7:0b:3f:15:40:6f:
a7:95:3e:0a:53:ba:33:27:8d:6e:de:ba:a1:9e:ca:dc:0f:bf:
86:58:9f:91:4f:db:ae:a4:4d:eb:17:d3:4c:8a:db:7c:62:f9:
ea:39:26:a4:91:be:cb:8e:c0:6e:c6:78:f9:bf:70:45:d0:bb:
da:16:86:9f:20:92:d9:51:e0:81:d7:ad:06:24:62:4a:fe:6c:
bf:a7:bb:2f:ac:0f:32:cb:1f:33:59:6e:9e:74:7e:70:48:d4:
cb:1d:fe:f6:13:68:97:fb:6e:46:1f:67:9a:e7:c9:08:37:0f:
15:83:f7:9c:a9:72:19:d6:ca:08:26:25:fd:b5:a9:26:0b:7c:
e8:6e:4d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:11:02 2026 by rpki-client