Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
File: Q57sdw36ZitOpkoCLus46D2q4ig.mft (raw, json)
Hash identifier: MaFNxdOmsUcmyTSArLBPqy8WwCD1iGB4tZIIiAtFHWs=
Subject key identifier: 1E:24:92:4C:20:FF:21:31:C8:19:40:5B:E2:B9:55:4B:93:81:74:DB
Authority key identifier: 43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
Certificate issuer: /CN=439eec770dfa662b4ea64a022eeb38e83daae228
Certificate serial: 019F939235EE4AD3978F72A32C031973DD0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
Manifest number: 0B5E
Signing time: Fri 24 Jul 2026 10:01:00 +0000
Manifest this update: Fri 24 Jul 2026 10:01:00 +0000
Manifest next update: Sat 25 Jul 2026 10:01:00 +0000
Files and hashes: 1: 5D5H4157fnq095Zx28ueaKeKXYM.roa (hash: HGS6JRy2csmBENBtc74ury4ycHEpdmnQ0F2/7fuFltg=)
2: Q57sdw36ZitOpkoCLus46D2q4ig.crl (hash: 4vfEPFmSkd1cU7ZJrZAIsbDl3GmxoJ/HVyiw0uqNIY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:35:ee:4a:d3:97:8f:72:a3:2c:03:19:73:dd:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439eec770dfa662b4ea64a022eeb38e83daae228
Validity
Not Before: Jul 24 10:01:00 2026 GMT
Not After : Jul 25 10:01:00 2026 GMT
Subject: CN=1e24924c20ff2131c819405be2b9554b938174db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:28:28:f7:e7:98:d7:48:b8:17:9b:88:91:85:
7b:1f:39:22:6e:6b:99:ac:2c:26:6f:f6:50:eb:09:
c4:97:b5:bc:9f:69:9a:08:93:16:f5:e7:95:68:c0:
ad:99:2e:ae:87:d0:bf:55:47:48:cb:af:51:04:07:
bb:ff:18:eb:63:d1:b6:71:62:39:58:a0:85:6a:26:
79:de:10:55:30:c2:ff:f4:52:74:dd:8c:2d:db:93:
8e:fd:26:9a:fe:5b:a7:6a:ae:2e:cd:4f:a8:8e:5a:
ec:6f:c1:50:54:94:54:a6:d1:30:04:5f:17:17:b2:
14:c9:d8:1c:39:67:6e:8b:70:b8:81:bc:fe:36:f7:
a8:73:86:71:a5:c5:55:3d:ec:28:da:05:f9:80:b8:
42:0c:ac:49:d2:d5:84:67:49:25:b8:78:43:9c:30:
85:e4:0c:2f:e1:b5:4c:75:82:f8:20:4b:0b:13:95:
1d:c1:f7:91:6a:d3:a4:db:f3:58:eb:73:a7:80:1f:
88:9e:f7:79:e1:d6:c6:e4:c4:63:d8:d8:1f:7d:0d:
75:7e:61:75:6f:b9:79:d5:5b:e1:54:33:02:73:c4:
d5:3e:09:66:1b:f7:53:cc:df:48:27:86:05:16:57:
6f:80:43:fe:26:a3:3d:d4:64:2f:de:4d:82:6a:13:
9c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:24:92:4C:20:FF:21:31:C8:19:40:5B:E2:B9:55:4B:93:81:74:DB
X509v3 Authority Key Identifier:
keyid:43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:ec:93:d3:9a:67:3c:14:13:c5:20:ea:21:14:67:50:af:86:
1d:5d:a4:8a:5e:c5:4f:15:b9:cf:00:7d:c3:de:64:cc:e1:05:
87:2b:ec:16:03:95:f5:c1:05:23:25:62:d5:20:78:63:d2:3f:
b3:f9:db:3a:4b:83:97:db:36:7e:88:fd:c9:bf:58:a6:cd:ad:
5c:0e:a5:0e:30:b3:38:ec:22:0c:2b:86:f8:1f:fd:0b:a4:83:
fb:20:0e:1e:cc:87:31:6a:d0:8c:db:05:4c:21:e9:b4:d0:99:
30:09:ce:78:a9:74:ff:21:13:11:f9:aa:53:2c:1f:1d:ac:57:
e2:69:25:f0:b8:fd:d6:f9:c0:85:88:2d:82:b4:c6:32:c7:ff:
18:08:b9:39:23:a7:84:db:66:2e:46:1f:aa:bf:85:80:b2:3b:
ad:82:57:15:43:7d:7a:61:4c:41:28:62:ee:21:06:22:32:41:
42:ff:4d:ac:3a:6a:fb:3f:26:bb:e0:d9:b1:10:0a:82:d3:e8:
0b:ad:f9:eb:bc:ff:20:40:3a:5b:98:6b:f4:87:ce:95:58:8c:
91:46:cd:47:66:d1:41:30:8a:78:37:bd:a0:4a:9e:df:39:88:
9b:f5:5b:fd:aa:cb:14:5b:54:80:69:69:96:00:a9:0c:19:37:
b4:a7:c0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:48:36 2026 by rpki-client