Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
File: qT8yMceH9x3SSE7gAtpzpxdb0kk.mft (raw, json)
Hash identifier: 8XbE6vD00SnXH1vLpClTtkmbcDoAvkz2G0jaUScR620=
Subject key identifier: A1:11:46:D3:73:F6:2C:50:0E:C8:6C:01:3A:6D:3C:B4:D4:7D:9C:19
Authority key identifier: A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49
Certificate issuer: /CN=a93f3231c787f71dd2484ee002da73a7175bd249
Certificate serial: 019F93C9647E78BA1DD235A7CC2D8DA30E44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
Manifest number: 1713
Signing time: Fri 24 Jul 2026 11:01:16 +0000
Manifest this update: Fri 24 Jul 2026 11:01:16 +0000
Manifest next update: Sat 25 Jul 2026 11:01:16 +0000
Files and hashes: 1: YKQ7bJ5Uygsy5yN7dP8YeQLmEx4.roa (hash: qv62jghVn/xc1zYuKekCyiDZQVZ2Kui3yZ/JmsGwwSk=)
2: qT8yMceH9x3SSE7gAtpzpxdb0kk.crl (hash: nEOzmOe09HbU4we98ZRWLUy+hwkmxPJM6cayS67v+Z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:64:7e:78:ba:1d:d2:35:a7:cc:2d:8d:a3:0e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93f3231c787f71dd2484ee002da73a7175bd249
Validity
Not Before: Jul 24 11:01:16 2026 GMT
Not After : Jul 25 11:01:16 2026 GMT
Subject: CN=a11146d373f62c500ec86c013a6d3cb4d47d9c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:18:1e:52:cc:da:87:4f:f2:5f:84:27:8d:68:
8b:fd:d7:0c:ea:98:49:dc:b1:25:0b:f6:b6:25:12:
ce:db:d5:eb:92:65:56:6f:79:4d:33:e7:26:aa:26:
21:be:71:7e:36:0c:06:9c:d7:fa:a9:fb:05:53:a1:
53:a0:7a:87:40:a5:20:c5:d3:47:97:95:9a:37:d0:
6d:84:15:5c:00:d5:b2:b2:2d:22:64:cb:43:4a:fa:
4d:d3:f4:8e:44:5b:56:d4:6c:97:ca:18:f7:3e:55:
2e:e1:d7:42:d5:ee:93:a6:e8:e3:8d:0f:f8:62:ff:
8c:ac:b8:63:a2:f9:6c:e4:c0:a3:f2:a2:07:e2:2a:
b4:c9:db:68:50:09:96:fc:e8:9e:42:04:2f:3d:cc:
77:c6:e4:36:df:e8:fc:ae:87:7d:c6:5b:a4:77:c4:
dc:ae:b2:94:95:2a:e3:b5:5e:79:9c:99:77:3c:1d:
ab:26:c6:1b:c6:2b:83:88:2b:6d:7e:2e:b2:94:cb:
64:81:d1:be:10:e2:5f:cd:2e:49:72:ab:07:ae:f1:
ce:a4:da:a0:6b:c2:b2:15:2d:a4:91:35:0a:f6:3f:
40:8b:cb:a1:14:47:03:bb:ab:5a:6e:46:c7:e4:a9:
fa:21:fd:7b:0a:dd:92:59:22:00:18:5c:1a:3d:5f:
0a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:11:46:D3:73:F6:2C:50:0E:C8:6C:01:3A:6D:3C:B4:D4:7D:9C:19
X509v3 Authority Key Identifier:
keyid:A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ec:69:0c:13:bb:3f:e6:e7:1f:06:56:ed:21:b2:1d:9b:b7:
bd:6e:fd:27:9e:40:c4:86:be:29:70:9c:c2:72:db:87:9e:5b:
28:86:f2:6e:22:18:83:d2:dd:50:19:c8:f9:0e:42:13:ea:64:
70:aa:01:5d:97:f2:d4:cb:3e:bd:64:2f:98:56:1b:74:0d:36:
1f:ba:2a:bb:a9:1e:c8:dc:93:c8:98:c3:91:35:39:ac:f9:2d:
a1:65:0b:9b:27:b0:a9:c8:88:13:bb:ea:fa:a3:83:f2:0c:0d:
00:14:9e:d6:fa:a8:8b:54:94:98:f5:74:46:47:27:2b:55:d9:
07:6a:41:44:29:ee:e8:3e:a2:c8:d5:68:22:2b:3a:03:9f:c1:
74:d2:73:c2:0c:71:94:55:ac:02:6b:29:21:93:d4:4d:8a:1b:
26:4d:d6:ed:ed:40:b1:94:16:fd:85:ae:55:43:97:51:e3:11:
00:15:de:f9:33:21:a1:25:41:d9:11:b0:3b:cd:a9:4c:4f:4e:
62:a4:20:cc:24:a0:9f:06:50:18:ad:08:9e:c9:d9:48:e9:ac:
a7:23:04:a4:29:26:42:20:92:2d:76:98:9e:6e:d9:dc:94:a0:
5c:d1:2a:07:86:39:95:67:08:db:ab:a4:d0:83:51:a9:51:dd:
c3:15:28:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:11:48 2026 by rpki-client