Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
File: qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft (raw, json)
Hash identifier: 9rtqJXfDvfGvwKZrS/QaXcWkeUohiFvyT5KQMurhIVU=
Subject key identifier: 25:05:04:FC:41:8A:1F:AE:1D:2D:1A:BA:FA:C6:53:32:0B:99:F6:E1
Authority key identifier: A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C
Certificate issuer: /CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c
Certificate serial: 019F935B4C50BABB0442B4DD917B27781083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 09:01:01 +0000
Manifest this update: Fri 24 Jul 2026 09:01:01 +0000
Manifest next update: Sat 25 Jul 2026 09:01:01 +0000
Files and hashes: 1: U4sjdHd-gX-XqAKv1_i_s77A5sw.roa (hash: R8Ebp8RZ69ktsKpPiMp0a78DZiZYGn/b1MPxbWALvI0=)
2: qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl (hash: keMXv2AsAdgLLrlG14tnZKdGk9oV4q6zMuQnR8K7T5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:4c:50:ba:bb:04:42:b4:dd:91:7b:27:78:10:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c
Validity
Not Before: Jul 24 09:01:01 2026 GMT
Not After : Jul 25 09:01:01 2026 GMT
Subject: CN=250504fc418a1fae1d2d1abafac653320b99f6e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3a:40:e6:0c:37:6e:5e:13:7a:72:d6:9f:85:
f9:51:fc:e4:72:2e:59:e1:14:99:cc:93:58:63:c6:
30:3f:0a:f9:95:a7:d7:df:ff:09:12:32:3e:52:3b:
29:14:9e:48:41:27:e7:e6:8f:7f:85:6f:f1:27:8d:
79:b3:f6:84:76:bc:58:d9:c6:77:a3:41:80:9f:f0:
ff:a5:a8:da:53:23:ec:c3:40:a7:9f:5e:24:e7:af:
3f:79:09:3d:23:30:33:bf:08:70:da:61:06:ec:6d:
22:09:6b:98:06:4b:11:9a:61:fc:22:6c:67:07:52:
53:82:b2:59:97:1f:dc:f8:3c:06:bf:5b:1c:4b:4d:
6c:2c:5e:a4:6a:7d:a1:5c:5d:93:5e:3d:3f:ce:1c:
5c:bc:e2:9e:bf:76:06:a8:3c:ab:95:ab:5f:b9:50:
7d:fc:7f:2c:85:9b:da:72:9b:23:8d:4b:67:94:bd:
97:bd:ce:4c:ba:71:60:c8:f2:ac:23:57:65:1a:fd:
c4:ee:5c:45:28:f2:0c:1f:e7:eb:5a:44:52:d7:ce:
76:43:ab:95:18:17:1f:27:47:a1:6a:48:78:cb:f2:
be:0c:4e:7f:63:63:84:7e:15:a3:64:c1:2e:d4:6d:
63:45:3a:58:fa:db:fc:bb:b2:2c:0f:a6:fc:bd:f4:
07:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:05:04:FC:41:8A:1F:AE:1D:2D:1A:BA:FA:C6:53:32:0B:99:F6:E1
X509v3 Authority Key Identifier:
keyid:A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e2:28:9c:3d:9f:c1:54:f3:89:3f:2c:5a:7e:60:98:9e:39:
5e:6f:f3:6f:08:48:1d:70:8b:b0:c7:27:77:0a:de:cb:21:9d:
91:07:3d:dd:21:49:f5:9a:27:e5:6d:e6:31:db:cb:39:54:03:
25:c6:e3:ae:c2:cf:dc:77:25:c8:51:e1:33:22:11:ed:bb:d3:
82:94:6c:1a:4c:1b:d7:22:f4:47:ed:6e:c8:e9:b9:83:78:5d:
4b:b4:6b:5b:38:25:41:bd:14:1e:96:7a:39:8f:65:39:b9:1f:
a5:a6:96:26:ef:5c:98:c3:84:60:84:2b:c7:c4:ff:93:13:b3:
2e:d7:18:5d:61:35:27:d3:73:cd:dc:29:05:0c:d3:01:35:2f:
2f:b2:58:39:d1:03:49:a9:03:28:95:90:09:be:b9:b5:65:7f:
df:78:d2:45:a9:6f:a2:1d:42:c2:a2:bf:f4:ce:75:2c:4e:88:
c8:27:8e:f9:a8:34:fb:85:ce:90:63:0f:bd:79:89:38:66:65:
45:27:cd:fb:06:c5:a8:df:49:dd:32:1c:50:90:7d:1c:26:73:
68:80:c0:0a:4a:e4:4c:55:7c:d9:85:a1:aa:ba:1b:ec:d1:09:
68:5e:50:bc:7f:09:c5:7a:d6:29:33:d0:a2:28:14:fe:e9:e3:
b0:b1:f9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:18:04 2026 by rpki-client