Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
File: Qkq4x890A7ViChuBPmrR2g2stE0.mft (raw, json)
Hash identifier: RZTZB3agkopnPIbcKqaAPxW1GRHeYvk9mk1CZPA7LeM=
Subject key identifier: 5A:8F:2A:46:1D:8F:76:28:91:26:8A:B9:77:2A:19:D7:C6:A9:F2:C5
Authority key identifier: 42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D
Certificate issuer: /CN=424ab8c7cf7403b5620a1b813e6ad1da0dacb44d
Certificate serial: 019F9211E6B33EA457275D0D258E9BAF95C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 03:01:14 +0000
Manifest this update: Fri 24 Jul 2026 03:01:14 +0000
Manifest next update: Sat 25 Jul 2026 03:01:14 +0000
Files and hashes: 1: Qkq4x890A7ViChuBPmrR2g2stE0.crl (hash: hBNJ0/M5Ws7Dvc0AtQvqZgGaePW2wG509KAq48dscWg=)
2: dzTzYf-TKYJMVkOvvaBfstjTJ9w.roa (hash: ZIgS2/isxUOPCfVNIh153dBZ1pmUGjEqXD0BSekDaHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:e6:b3:3e:a4:57:27:5d:0d:25:8e:9b:af:95:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424ab8c7cf7403b5620a1b813e6ad1da0dacb44d
Validity
Not Before: Jul 24 03:01:14 2026 GMT
Not After : Jul 25 03:01:14 2026 GMT
Subject: CN=5a8f2a461d8f762891268ab9772a19d7c6a9f2c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e7:e3:18:d5:fe:ef:20:17:50:cd:2a:ed:b5:
64:cf:b6:46:b5:07:d6:cf:b7:f6:79:de:42:d1:a6:
c7:4e:f5:db:8f:b9:41:26:b2:74:81:11:29:0f:2f:
b6:82:0b:35:b2:f3:4e:99:05:84:de:9d:f8:91:dc:
e2:fc:c6:ed:ee:3a:9e:41:36:6c:58:5c:ac:44:0a:
7e:89:64:cd:2b:fc:eb:f4:f3:61:e2:1a:66:ff:2e:
fa:51:0b:87:00:a2:65:66:c3:1c:0a:83:14:e3:cf:
7e:2e:1a:19:db:f4:22:d0:7e:35:e0:f9:03:63:26:
50:e8:e8:d7:7a:06:16:43:41:d4:60:35:ba:4b:e2:
f7:33:ef:8d:55:51:fb:c9:31:4d:77:5f:88:d2:21:
39:07:cb:7a:dd:73:7d:b1:fd:d9:0c:ff:96:2f:3b:
48:41:0c:a6:81:9a:7c:2c:93:e0:24:dd:6c:2b:0d:
51:4b:f2:f4:cf:c3:02:6a:c1:9e:44:94:6e:bc:ea:
a5:30:6f:75:aa:6c:15:98:94:0f:23:3b:7e:56:94:
ba:0e:95:89:d1:ca:65:cb:92:60:9e:1b:d5:4f:b9:
be:69:f2:9a:24:79:e4:bf:96:03:eb:b0:0b:a9:6e:
0a:c4:08:15:be:9a:79:64:1c:a4:c5:93:c5:86:e0:
9c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8F:2A:46:1D:8F:76:28:91:26:8A:B9:77:2A:19:D7:C6:A9:F2:C5
X509v3 Authority Key Identifier:
keyid:42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:62:15:0e:4b:74:ec:50:89:6b:da:4c:66:28:1a:8e:87:fa:
30:56:49:fb:63:90:a6:03:42:c4:df:e3:a7:f2:fc:a6:c5:e0:
89:02:31:7e:25:de:6e:be:86:87:91:31:bb:ef:91:77:d0:c3:
06:1e:3d:d4:45:55:94:35:f7:5b:ab:d7:6d:7a:36:52:ce:08:
52:ac:cb:48:f3:82:c8:f7:15:20:fc:2b:3e:37:fc:bb:64:b1:
e6:cc:fd:1e:90:1e:bf:4d:e3:ab:75:93:4d:0f:06:e2:a6:ac:
2c:81:16:48:2f:0f:d0:ae:b3:e2:56:78:f4:5d:6c:e2:1b:4d:
57:06:fa:ee:22:3a:35:9c:e4:e6:5d:97:03:89:c3:36:84:1f:
1c:03:6f:2a:6b:2b:83:a0:14:cd:53:5c:9d:89:e4:70:72:1f:
b3:9d:ed:9b:95:9d:8b:39:ba:20:eb:1c:d5:12:34:6b:23:f7:
32:23:7e:1e:97:dc:c5:04:05:d2:fb:7e:03:c1:5b:26:a1:97:
22:ac:7f:12:8c:85:73:04:3e:89:89:b5:89:a7:d2:2d:95:9c:
87:e0:ea:55:76:35:1e:cc:7d:d4:ef:e1:6c:8d:44:6d:eb:72:
4d:d8:03:70:d5:d4:c8:38:da:3e:ce:a2:2e:6e:4c:f6:39:5f:
d0:72:5e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:45:25 2026 by rpki-client