
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
File: qSskQKfHot_PLkIW2oo73mi5uJg.mft (raw, json)
Hash identifier: 3J7jeimYA6GMp8ocah9ivei/0LXl80vCrk3PTGN6ft8=
Subject key identifier: CB:E6:AD:8B:97:1F:91:77:4F:FF:1A:C7:29:7B:3D:7E:94:0A:9A:C1
Authority key identifier: A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98
Certificate issuer: /CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898
Certificate serial: 019F92486AF79075C22D0243CE2475F54284
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
Manifest number: 195B
Signing time: Fri 24 Jul 2026 04:00:47 +0000
Manifest this update: Fri 24 Jul 2026 04:00:47 +0000
Manifest next update: Sat 25 Jul 2026 04:00:47 +0000
Files and hashes: 1: HJpn_J4PDoFUYqEVCWj0iQM-3k0.roa (hash: VJAIFmjRG0CrMBQmMTvTyvzSn9UbCMce42aoZ7KBzXY=)
2: qSskQKfHot_PLkIW2oo73mi5uJg.crl (hash: aQvsv7pm5DkfrOUrzBA7eOALys8wFUy+8wwHiP+XFxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:6a:f7:90:75:c2:2d:02:43:ce:24:75:f5:42:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898
Validity
Not Before: Jul 24 04:00:47 2026 GMT
Not After : Jul 25 04:00:47 2026 GMT
Subject: CN=cbe6ad8b971f91774fff1ac7297b3d7e940a9ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:74:8c:aa:dc:47:b1:f8:c0:12:0c:ab:27:ff:
b0:fc:a9:c5:b6:44:e8:8b:a7:1c:bc:db:f5:ca:71:
19:bf:a3:4e:4d:75:af:ea:93:13:f8:f5:ec:57:1f:
73:e0:c0:76:bd:f3:65:29:5b:f8:8e:82:1e:8c:b7:
e0:79:6d:44:3a:9c:0a:2a:02:2b:ca:f7:57:a8:8f:
9d:3b:b9:e1:a4:52:87:4a:ba:30:cb:a7:a1:26:7e:
db:1b:d0:01:90:19:0e:a2:e7:05:b6:ba:94:8f:cf:
de:02:fa:3c:41:25:78:46:b9:50:a5:b0:6f:82:f5:
a0:98:5c:4f:c9:d1:cd:c2:6b:16:b3:7b:2c:91:fb:
a8:ab:50:14:fc:86:30:33:40:30:be:66:98:c2:c8:
5b:ef:32:7c:d6:21:e5:af:3d:73:16:4d:8d:e3:42:
ad:6c:8d:d4:14:9b:76:5a:a5:14:3e:64:4b:d2:21:
4a:eb:0a:25:11:fc:b6:51:ad:f5:b3:23:20:e4:a0:
21:73:8f:97:b8:de:3d:05:c4:64:2f:7a:63:b5:b9:
31:aa:f7:45:ec:ef:9d:f8:39:96:d2:ba:64:bc:c5:
af:fa:64:99:77:f4:fb:db:86:ab:d0:85:fc:ec:7b:
25:b9:68:62:d0:24:d7:a2:a4:7d:d1:3e:e4:65:37:
44:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E6:AD:8B:97:1F:91:77:4F:FF:1A:C7:29:7B:3D:7E:94:0A:9A:C1
X509v3 Authority Key Identifier:
keyid:A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:d1:55:9e:f1:cd:ca:76:ab:19:22:06:7f:5a:4d:15:d6:b2:
de:18:4a:e4:12:64:a3:1d:03:b1:b3:b4:71:32:b6:23:ca:9d:
90:b4:d1:53:36:f6:c7:f5:7c:f1:e8:0b:0e:ee:59:ac:7a:90:
3a:c4:f9:12:43:c2:c5:00:cf:ab:33:ad:ed:43:b8:31:7f:5b:
d6:31:06:a9:bc:67:2f:ae:06:d8:28:74:36:6b:10:c4:07:f4:
58:0a:31:75:a4:c6:39:fe:85:d8:45:05:c2:57:26:9c:9a:ed:
67:dd:d9:e9:cd:83:bf:1a:d4:e9:cd:1a:49:61:72:d7:d6:51:
45:c1:c7:ac:bc:8c:a7:e5:a9:77:d5:b3:b1:fe:cf:a9:50:09:
8d:f4:20:3d:ba:53:c1:82:de:57:88:51:22:78:43:1b:c8:d1:
2c:04:30:ac:08:34:4f:02:02:1c:fb:e1:d8:a6:02:77:e4:88:
67:dc:bc:0e:89:07:c4:51:43:2e:7f:c4:be:0f:eb:69:34:7c:
5b:db:46:b8:7f:74:79:65:ed:00:3f:b2:51:46:69:68:42:de:
77:af:15:d8:e3:00:aa:69:de:55:0d:47:3a:7a:70:ae:a1:59:
82:d3:43:74:4d:ab:c7:99:d7:87:75:03:cb:52:1d:64:06:be:
95:3e:6d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:41:44 2026 by rpki-client