Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
File: q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft (raw, json)
Hash identifier: kLpWiq/xRLzWpQjOUas3unwb8ngYCEA7rh2extHScPE=
Subject key identifier: 1D:97:AE:82:4F:BF:9E:7E:69:26:76:4B:05:B5:A4:82:CF:B3:9B:EF
Authority key identifier: AB:87:73:43:68:D8:83:15:F1:1B:32:93:86:CC:5E:F2:BB:87:58:58
Certificate issuer: /CN=ab87734368d88315f11b329386cc5ef2bb875858
Certificate serial: 019F94366390ABB12AE14A9C7386C406A481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 13:00:20 +0000
Manifest this update: Fri 24 Jul 2026 13:00:20 +0000
Manifest next update: Sat 25 Jul 2026 13:00:20 +0000
Files and hashes: 1: 4SfojSm1O0yZDYuVtjhC0oqjoZo.roa (hash: q4mcTRajmA1x3P8ne7N/z6IxFaFTMj4qWNPcuiyXN+A=)
2: q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl (hash: qcf1TS9XolxsiFjY+1j/YxAkY9xf1BrjlznyPr0MBi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:63:90:ab:b1:2a:e1:4a:9c:73:86:c4:06:a4:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab87734368d88315f11b329386cc5ef2bb875858
Validity
Not Before: Jul 24 13:00:20 2026 GMT
Not After : Jul 25 13:00:20 2026 GMT
Subject: CN=1d97ae824fbf9e7e6926764b05b5a482cfb39bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f6:3b:9a:0d:5b:d7:e8:42:ef:60:60:6d:27:
8a:59:f7:2e:c4:90:e1:ca:ca:3f:9e:18:54:bc:8e:
74:3f:48:b4:bd:ef:82:66:b0:81:3d:d5:c3:f8:b7:
36:fe:d8:c8:25:53:6a:5e:6b:90:1a:f7:d1:90:1e:
11:eb:b1:7c:47:3b:24:81:85:c4:2c:c7:40:2c:76:
aa:a6:69:a7:89:71:78:25:60:ad:89:51:2e:ed:9d:
49:52:b4:f5:c2:31:50:6f:20:04:96:9e:3b:d4:6e:
b1:c6:36:49:fe:82:67:dc:23:6a:00:5d:35:e7:e1:
91:6f:fd:e9:8c:e0:52:7b:57:c6:e3:39:63:7d:63:
30:fa:c1:01:18:c1:86:b5:ba:80:d9:2a:37:8a:f7:
99:11:29:cb:29:08:91:78:c5:47:95:08:23:ab:0f:
02:bb:a6:0e:90:19:6d:5c:14:04:c2:5f:2f:f6:ed:
f1:48:4f:94:85:fa:ad:66:10:78:b6:a9:71:70:dc:
c1:ff:f7:74:e4:ce:3d:ae:77:7d:c0:f9:39:15:81:
40:bb:66:b6:0d:0b:a0:f3:7f:39:90:6c:24:13:03:
92:ec:c1:fd:4b:0f:25:2d:f2:22:50:42:43:28:27:
f4:41:59:af:8d:84:a5:1a:9b:2e:f7:60:da:7d:39:
b5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:97:AE:82:4F:BF:9E:7E:69:26:76:4B:05:B5:A4:82:CF:B3:9B:EF
X509v3 Authority Key Identifier:
keyid:AB:87:73:43:68:D8:83:15:F1:1B:32:93:86:CC:5E:F2:BB:87:58:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:17:9f:24:d6:14:ea:00:b2:70:8b:1c:0c:4f:87:21:5c:10:
19:a2:c9:83:86:6a:3c:95:40:4a:7f:07:da:cb:dc:a5:a7:de:
49:5b:4a:6c:b7:4f:14:59:11:dc:b4:33:82:35:8a:3b:c3:81:
fc:03:e6:ea:48:7e:40:99:c3:5b:5b:65:f5:30:84:8e:c4:92:
e5:55:e7:2e:bb:b5:4e:01:16:11:ca:6d:8b:cd:b0:c5:81:f8:
29:6d:22:59:b2:11:58:fb:e3:23:fd:70:3b:7a:be:f2:59:16:
24:57:16:09:98:3f:a6:a3:e6:67:e9:b4:fc:8e:2c:f2:f8:ea:
4e:f1:6a:6c:32:81:d2:e1:a6:5e:c4:27:b6:1c:68:07:a3:75:
fa:2d:ab:ca:4d:8a:68:5d:2a:8f:9c:0c:08:48:82:9c:37:77:
0c:f1:bb:47:f2:c7:c0:e6:eb:23:fb:96:51:8a:b9:a9:ac:b6:
18:37:98:27:70:73:97:02:ae:fd:c2:c0:03:02:2e:44:a1:a9:
4b:61:c3:b7:26:90:3d:b9:8b:28:23:60:78:43:aa:1a:8b:c8:
1b:99:23:3a:84:e4:f7:29:54:17:ff:ec:cc:4a:f3:25:76:88:
02:ec:e2:9c:5b:7c:1b:c6:ac:7e:f3:03:80:c8:9d:41:5d:35:
2e:1d:5b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:01:11 2026 by rpki-client