Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/Qj5ipcKoD99-poRT7-iin0H8IH0.mft
File: Qj5ipcKoD99-poRT7-iin0H8IH0.mft (raw, json)
Hash identifier: VldCyL9koFqQa/Qi7B6mZdXW+prxVuFNaLLpRAzovxU=
Subject key identifier: 83:4C:F4:40:3A:F4:CA:E3:AC:79:6B:6C:06:8D:E1:89:A9:C9:C5:43
Authority key identifier: 42:3E:62:A5:C2:A8:0F:DF:7E:A6:84:53:EF:E8:A2:9F:41:FC:20:7D
Certificate issuer: /CN=423e62a5c2a80fdf7ea68453efe8a29f41fc207d
Certificate serial: 019F9247EE2C56E216261277BE47592D2DCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qj5ipcKoD99-poRT7-iin0H8IH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/Qj5ipcKoD99-poRT7-iin0H8IH0.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 04:00:15 +0000
Manifest this update: Fri 24 Jul 2026 04:00:15 +0000
Manifest next update: Sat 25 Jul 2026 04:00:15 +0000
Files and hashes: 1: Aj4QBwQL2uNoWKXRywa_DkLBxU8.roa (hash: AEwHfAxrbOcjeazAx/K/5vrZbUowV0UzX8EfJJIkJVk=)
2: Qj5ipcKoD99-poRT7-iin0H8IH0.crl (hash: s2mptN0eKSKgUuxhcaXIyGx+Pj8pEfqerCZJrT4qJys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/Qj5ipcKoD99-poRT7-iin0H8IH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/Qj5ipcKoD99-poRT7-iin0H8IH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qj5ipcKoD99-poRT7-iin0H8IH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:47:ee:2c:56:e2:16:26:12:77:be:47:59:2d:2d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423e62a5c2a80fdf7ea68453efe8a29f41fc207d
Validity
Not Before: Jul 24 04:00:15 2026 GMT
Not After : Jul 25 04:00:15 2026 GMT
Subject: CN=834cf4403af4cae3ac796b6c068de189a9c9c543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f0:a7:cd:9b:82:2f:75:0e:da:c1:99:7a:ee:
bd:c9:07:7a:c4:1e:36:c2:51:fb:f2:1b:e1:43:cb:
10:81:e5:52:33:10:1a:92:76:83:58:20:cc:49:c3:
af:36:ad:23:54:c1:33:26:4d:1d:80:ad:ff:a5:1d:
4c:b0:76:c7:0b:c5:7e:0a:32:c3:c9:0c:db:2a:40:
40:1f:85:9f:7b:ca:bf:f0:dc:32:ab:6e:a3:1f:e2:
76:e1:44:0a:49:d4:1e:cb:ba:9b:5e:bf:00:e2:1e:
5a:a8:6b:2e:2c:6b:5f:9a:ab:82:04:72:d0:ec:91:
e7:f7:82:02:a9:6b:11:6a:e3:7d:1a:da:22:38:75:
73:44:f1:29:3b:0c:75:3d:ea:da:ee:07:2a:74:02:
62:86:ea:3a:c2:af:84:d3:59:0d:90:bd:35:9f:28:
a4:d2:ff:94:7b:22:90:18:e6:2f:a5:d3:cd:61:67:
df:5b:d5:ff:9f:5e:49:47:ed:30:1c:05:5b:24:8d:
95:fd:39:9e:ad:e3:f7:5a:3f:59:7f:24:9a:97:ad:
9a:2c:b7:ef:9a:b0:79:77:dd:dc:31:1a:10:58:2b:
80:3a:fa:3a:78:a9:e1:37:cb:bf:22:f7:80:4b:e7:
30:62:7b:84:b6:d2:2d:12:18:df:9e:2f:4d:7e:22:
c0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4C:F4:40:3A:F4:CA:E3:AC:79:6B:6C:06:8D:E1:89:A9:C9:C5:43
X509v3 Authority Key Identifier:
keyid:42:3E:62:A5:C2:A8:0F:DF:7E:A6:84:53:EF:E8:A2:9F:41:FC:20:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj5ipcKoD99-poRT7-iin0H8IH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/Qj5ipcKoD99-poRT7-iin0H8IH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/Qj5ipcKoD99-poRT7-iin0H8IH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ba:91:5a:7d:d9:74:90:6e:4e:ec:2f:15:9a:6f:2d:05:93:
30:b2:99:63:00:1b:6a:3a:48:8e:42:f5:ec:27:d8:3f:08:c4:
d5:76:65:b8:50:e7:b0:b6:9b:8b:31:81:90:fb:ed:b7:00:fb:
06:29:a1:63:50:71:35:68:1c:78:cd:6e:f3:0a:22:70:f7:0e:
4b:4f:21:29:82:8b:c4:42:50:e0:b9:53:e1:a9:7e:e6:d2:05:
30:f1:b7:e7:26:8b:01:04:de:b5:38:74:48:8f:ae:a4:6a:a6:
0b:49:88:2e:43:52:68:fb:0b:bb:52:b7:62:ca:8d:5d:56:6e:
df:45:56:a1:61:14:63:c8:fb:1f:b0:01:a8:2b:9a:57:c1:ea:
20:6d:0d:9c:f5:b8:65:fc:1a:04:92:46:64:c1:08:3f:6e:f6:
fb:53:98:5b:5d:75:9f:7e:60:83:2b:07:58:7c:d8:ec:8d:ba:
59:52:d8:c8:76:fb:64:16:3e:06:5f:21:4f:3c:d6:0b:37:c6:
18:d3:14:82:82:a8:34:28:bc:37:52:16:9d:46:94:02:a8:34:
2b:1f:79:35:92:80:25:9e:5e:00:55:b3:61:f0:c2:96:1f:74:
fa:86:98:dc:fa:69:98:64:62:6a:97:58:b4:22:67:dc:a0:55:
4f:e7:64:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:32:33 2026 by rpki-client