Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
File: QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft (raw, json)
Hash identifier: bK98eNqizQyEvAwghl4wLckz9jHz6/YJKsGShCSYLFw=
Subject key identifier: 03:E8:88:43:09:27:40:CD:83:29:0C:80:2E:14:DB:01:76:B5:E2:AC
Authority key identifier: 41:8D:F8:68:F7:D9:E9:8D:4F:D4:1E:6D:A5:97:A2:83:C9:14:1B:44
Certificate issuer: /CN=418df868f7d9e98d4fd41e6da597a283c9141b44
Certificate serial: 019F935AF3474E35651C54B5DE7AE2C6F11B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
Manifest number: 19CC
Signing time: Fri 24 Jul 2026 09:00:38 +0000
Manifest this update: Fri 24 Jul 2026 09:00:38 +0000
Manifest next update: Sat 25 Jul 2026 09:00:38 +0000
Files and hashes: 1: 16Of3nkjMP8UdSS9id5ZJPl_uic.roa (hash: 3kAPeMDB74ONzDFPUBPrWjZx5ADHmGueRoPekMbbEgg=)
2: QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl (hash: sPVJIE+RmUDMt2RYzuVv0Z6CDKq0NFy3wpDSCdioPv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:f3:47:4e:35:65:1c:54:b5:de:7a:e2:c6:f1:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=418df868f7d9e98d4fd41e6da597a283c9141b44
Validity
Not Before: Jul 24 09:00:38 2026 GMT
Not After : Jul 25 09:00:38 2026 GMT
Subject: CN=03e88843092740cd83290c802e14db0176b5e2ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a4:3f:ef:c5:b4:f1:f7:40:e7:c9:1c:d1:bc:
9e:61:75:9b:bd:fb:7b:42:48:42:d4:c9:ff:e5:df:
50:09:51:93:27:29:d6:36:20:33:be:ae:13:fb:59:
f0:f0:30:86:8c:6e:eb:d2:b0:77:54:88:a0:ff:03:
e8:c3:57:6d:1f:85:84:ad:b4:11:87:ae:dd:38:1e:
6d:3d:c6:0f:b2:6c:02:6b:1f:75:4f:4d:b4:84:a1:
0a:0a:34:4a:ec:9c:af:f9:71:01:19:72:58:ed:79:
c2:56:98:97:8c:e3:8c:71:29:d7:dc:54:20:79:ef:
30:26:e0:c0:ea:38:8f:e1:26:27:39:d5:99:08:c5:
7f:64:ec:ab:bc:a9:70:2d:d6:0d:d3:0f:b7:2b:56:
a1:1c:bc:03:d6:73:5a:2a:3c:45:7b:8d:5a:6b:e2:
ef:16:e4:7c:99:22:fc:82:d2:ee:f2:35:da:e9:01:
26:0a:c9:5f:eb:7c:66:a8:05:12:cc:17:24:86:25:
f1:ea:d0:57:16:34:9d:40:0c:b5:2e:89:7a:b9:b5:
f6:6d:f7:1b:47:1b:ea:8e:a5:6c:f0:c7:92:49:c7:
95:14:be:32:67:b6:71:03:b3:d6:b7:d5:67:9e:eb:
67:dc:f8:57:8b:68:4a:e6:f5:e1:27:df:f5:1e:57:
df:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E8:88:43:09:27:40:CD:83:29:0C:80:2E:14:DB:01:76:B5:E2:AC
X509v3 Authority Key Identifier:
keyid:41:8D:F8:68:F7:D9:E9:8D:4F:D4:1E:6D:A5:97:A2:83:C9:14:1B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:4e:5d:17:54:91:a2:ab:e2:18:5c:6d:e0:5a:b2:87:bb:e5:
a3:b1:16:70:d7:11:db:ae:6d:70:a3:cc:91:a4:b0:66:56:00:
b4:16:f8:4f:3b:98:b9:0d:cf:c2:92:16:d8:e2:c0:c0:18:a9:
5e:93:25:a7:08:9a:83:68:4c:f3:53:d5:c0:67:91:3a:3b:95:
8d:2b:91:61:5f:40:d7:02:e1:85:3a:a5:24:39:e4:67:9f:26:
4a:b5:5f:cc:85:e5:39:3d:0a:e8:4f:cd:37:e2:8d:8b:86:da:
e6:c8:87:d5:43:bb:07:1e:f5:59:f1:c5:47:73:1a:60:58:02:
89:ba:a7:d8:dc:e2:36:a3:68:99:1e:5a:20:35:6c:ad:78:d9:
0a:4c:c8:1b:2b:86:67:84:24:8f:c8:50:dc:2f:6a:07:5c:e3:
e5:60:bc:32:6a:58:c7:fc:44:71:83:98:07:f8:88:4e:f3:90:
06:bd:a7:96:8f:5f:d0:8f:e7:fc:d0:ff:1f:0c:8c:cd:10:07:
74:fe:5e:e9:f5:34:62:e6:04:bd:95:8b:c9:1c:34:16:7c:cc:
9f:1f:1d:2a:b9:d4:f1:4a:48:f8:8e:21:cd:c8:26:d8:6a:87:
8a:3f:fc:1f:47:8c:38:ba:4e:13:18:19:8b:03:1d:f8:0e:10:
f4:5b:64:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:39:30 2026 by rpki-client