Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
File: qDBcblgpStDtUWL6hCnaUWVlOTA.mft (raw, json)
Hash identifier: Lx0AMBcaOjgqyGKMWuBHcV2PgJNHiBAy7la6dkdmNQ0=
Subject key identifier: 81:E8:5D:02:73:55:51:4D:EB:67:B7:0E:21:8D:B4:27:1D:E1:38:78
Authority key identifier: A8:30:5C:6E:58:29:4A:D0:ED:51:62:FA:84:29:DA:51:65:65:39:30
Certificate issuer: /CN=a8305c6e58294ad0ed5162fa8429da5165653930
Certificate serial: 019F91DA3A74E172FA8B0B3793099955EDDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 02:00:25 +0000
Manifest this update: Fri 24 Jul 2026 02:00:25 +0000
Manifest next update: Sat 25 Jul 2026 02:00:25 +0000
Files and hashes: 1: BvmjN1Ei-RdZ5XU4wyESLuA_jUA.roa (hash: ELi50YRUe877yWFfXU+gVz/inLW8fniMz5ZEj37kHhM=)
2: qDBcblgpStDtUWL6hCnaUWVlOTA.crl (hash: f1RR7a8tD9STXnJtErLdx+CdGr76Jh7kS0ZxBPYsAwE=)
3: yxoyiq6u244VKW72oii9uUiHB5w.roa (hash: jfOnDIC+Hn7PQuMw02CvW0H07qmgRK5GNbtZKtIIp2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:3a:74:e1:72:fa:8b:0b:37:93:09:99:55:ed:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8305c6e58294ad0ed5162fa8429da5165653930
Validity
Not Before: Jul 24 02:00:25 2026 GMT
Not After : Jul 25 02:00:25 2026 GMT
Subject: CN=81e85d027355514deb67b70e218db4271de13878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b1:55:60:eb:32:dd:45:ab:de:68:f1:45:87:
7f:8f:92:58:54:02:74:af:16:a2:23:88:cb:c9:5c:
ae:ed:3e:55:29:6b:d9:49:e8:20:e9:ef:2d:07:fd:
cb:0b:de:a4:e3:c4:8a:06:13:f7:1f:70:20:19:e7:
2b:25:d6:73:86:cc:ed:df:ed:60:20:ec:b6:b6:8c:
9e:25:80:56:a6:58:96:f4:e2:2a:f6:0a:ad:ef:69:
ae:34:2c:96:4f:c6:d1:5c:a7:20:e8:01:07:ef:26:
0a:8c:e6:4b:be:66:1c:ae:f4:ae:7f:36:ae:a6:ed:
fe:80:4f:da:a3:4c:10:71:60:cb:4c:7f:6a:59:2b:
d1:3e:19:bc:12:2a:5d:b9:0f:62:21:f7:0d:dd:bb:
65:3f:77:3a:89:f3:37:61:2d:c8:4c:db:ff:2e:6b:
06:a4:5d:0d:72:0f:4d:ce:22:32:29:ec:d6:e3:9b:
7f:83:1f:89:28:03:da:42:98:58:5f:52:ef:2f:00:
c5:be:29:f6:dc:ba:d4:ce:b6:3b:1a:9c:e7:3b:12:
00:44:00:3d:5d:9a:21:3d:90:05:e9:cb:1c:48:59:
9f:8b:74:28:f2:3d:c5:da:a5:90:8e:24:db:57:04:
86:c0:53:7f:99:50:35:98:18:33:9d:bb:05:83:1d:
a6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E8:5D:02:73:55:51:4D:EB:67:B7:0E:21:8D:B4:27:1D:E1:38:78
X509v3 Authority Key Identifier:
keyid:A8:30:5C:6E:58:29:4A:D0:ED:51:62:FA:84:29:DA:51:65:65:39:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:04:36:70:05:53:88:80:0e:25:55:2f:8d:4a:57:f4:16:9a:
d5:f8:1e:c6:38:21:a2:52:da:6c:3d:ed:51:d2:a8:bb:0f:15:
9f:88:72:05:06:db:7f:c0:20:0a:21:17:16:48:b2:48:08:da:
93:30:e7:fb:1b:07:49:ab:e5:d7:d5:17:d5:5f:10:cb:ce:a7:
92:43:b1:27:a6:5c:1b:dd:9a:ae:ef:01:d2:58:c8:e7:2b:01:
e3:26:8d:c5:33:67:0a:f3:2a:e2:c1:20:08:e5:e5:d8:f6:06:
8a:d1:b6:10:a7:98:9d:bd:95:f9:64:08:fb:b6:7e:4b:62:10:
31:e2:ad:6c:e1:b7:6e:5a:af:04:40:77:4b:50:5f:ab:df:46:
e3:20:fa:bd:96:d1:8b:b1:24:25:1f:15:9d:d6:60:90:4d:13:
00:07:14:d3:2f:2e:32:21:a2:c0:d3:0d:bb:82:17:1a:03:a3:
06:e0:43:4f:27:87:31:74:43:73:02:1f:68:77:2a:bd:8a:67:
4e:d6:05:76:b5:f9:7f:14:9c:8a:07:1e:0f:15:4a:30:5b:73:
27:42:4b:a8:bf:74:48:12:38:bf:2b:99:b8:d2:37:d3:72:e0:
49:d8:c6:3f:14:c9:c9:17:08:64:a1:24:d0:8d:fd:3d:32:63:
e5:07:6e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:52:31 2026 by rpki-client