Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
File: h_Qa4HeeN978abKlsPerj9QM0-c.mft (raw, json)
Hash identifier: bQQ10bMcHZHNDmPmezGtjiMRoUU20Pk7ClIA/VJ5T2Q=
Subject key identifier: EC:62:49:AE:85:A9:50:1E:12:A3:31:2B:C1:CC:F4:19:D3:58:25:A5
Authority key identifier: 87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
Certificate issuer: /CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Certificate serial: 019F8F7ED924ADEFED64C9B310EC909AEE25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
Manifest number: 19CA
Signing time: Thu 23 Jul 2026 15:01:22 +0000
Manifest this update: Thu 23 Jul 2026 15:01:22 +0000
Manifest next update: Fri 24 Jul 2026 15:01:22 +0000
Files and hashes: 1: 9qN4udPUuYowf7HliZ_TGQM3Bms.roa (hash: 5MTkrEKeRcydaztC2Vfhe58BESExP2wuV5gzeR4YOSY=)
2: Dtj1m4cKe3GqX6bpwYtVYnUDpiQ.roa (hash: mEvlh065fRebiKkRrPdsUXHfTWLTcYZ3LKAKyBAKzLI=)
3: h_Qa4HeeN978abKlsPerj9QM0-c.crl (hash: Ziz9BXew4J0BP7ue3y8bfEqsD5Izn6ZeHS/H/ElrH6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:d9:24:ad:ef:ed:64:c9:b3:10:ec:90:9a:ee:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Validity
Not Before: Jul 23 15:01:22 2026 GMT
Not After : Jul 24 15:01:22 2026 GMT
Subject: CN=ec6249ae85a9501e12a3312bc1ccf419d35825a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1d:98:b2:06:ff:27:c1:c5:e9:fe:d8:2f:34:
6b:3f:ac:b3:01:c1:59:10:1d:48:e4:15:61:24:f1:
8b:29:bd:2f:e7:5c:42:32:da:02:c5:d5:49:77:1a:
4a:53:9a:5f:61:eb:25:55:a2:62:66:ae:04:34:09:
0e:fa:55:e7:27:ef:b8:72:9e:43:2b:88:ab:c0:fd:
c3:ef:f3:a8:97:f3:26:8d:ff:ad:a3:97:95:1c:17:
4d:78:b2:5a:36:a1:54:31:71:d8:58:e1:68:dc:d7:
18:8b:55:b0:2c:93:bf:40:c2:ca:ca:51:9a:77:3d:
d1:31:a5:d3:ca:5a:d4:c7:34:85:cf:e1:22:b4:0a:
2f:69:a6:9d:f8:58:65:2e:73:8e:94:f6:23:8b:a3:
a9:06:dd:81:b8:4a:cb:bf:25:c8:fc:4e:29:a9:68:
5b:80:26:dc:90:64:a5:51:4a:e0:c2:a6:ba:e5:9e:
83:eb:79:52:bf:75:29:9b:a4:3f:62:a7:28:39:3e:
f3:89:46:5a:90:4d:4c:69:fa:24:74:31:ba:4e:44:
af:55:00:13:0a:7a:07:ce:51:fe:ce:06:55:d9:3c:
10:67:b5:2c:98:69:5f:65:ff:7e:5c:22:d8:21:64:
77:7d:fc:38:66:f4:06:7b:bf:22:f6:71:0e:2e:3d:
11:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:62:49:AE:85:A9:50:1E:12:A3:31:2B:C1:CC:F4:19:D3:58:25:A5
X509v3 Authority Key Identifier:
keyid:87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:60:2f:d1:e8:66:03:da:b0:21:1e:46:7c:fc:0a:ce:e2:56:
47:e0:25:d6:23:61:85:f6:ce:72:f4:f7:ae:74:c7:5b:29:ce:
d2:17:01:cf:7e:87:53:14:e0:24:bf:f4:4a:4a:20:a9:ec:ee:
c2:6e:a0:49:c8:e5:00:ee:f2:52:f4:5a:29:71:a6:d8:d8:83:
11:33:e9:d4:76:e2:c9:a4:cb:fb:e7:f1:99:88:04:b7:31:64:
3b:20:c6:6c:43:19:24:e2:e7:4e:81:f9:6f:f8:3c:7c:be:20:
7c:bf:88:13:9d:0e:ef:45:2d:5d:85:8a:75:a3:9c:06:f4:d2:
0f:13:9d:90:66:a4:45:85:c8:d1:db:b3:a2:32:a6:cd:50:a5:
6e:40:d5:96:1c:b6:f2:65:52:84:49:91:ee:f1:f8:fa:6c:70:
78:30:a1:c4:bb:8f:34:0f:90:86:8e:4a:b5:d2:81:5b:22:8c:
14:51:90:63:3c:b4:01:f9:43:0a:22:e7:8f:d3:25:6f:10:c7:
0f:38:1f:30:13:2d:bb:c0:2f:ba:38:f0:80:38:74:ff:91:1c:
0b:ab:1a:65:1d:9e:7c:d1:71:59:6f:05:ba:8c:2e:b5:f8:63:
6a:f7:e4:e4:82:2d:af:b1:ad:4c:0b:04:bb:9e:fe:05:40:e0:
a9:b9:82:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:40:44 2026 by rpki-client