Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b43857-021c-4262-b183-1d77cf2a7100/1/QY1UtVsZKiSLhHI026US-XYMq_o.mft
File: QY1UtVsZKiSLhHI026US-XYMq_o.mft (raw, json)
Hash identifier: i3ShrjTeCRC2E7dnrHLFq9Xr5bQmPvOaKsohw665n0s=
Subject key identifier: 8B:A0:AD:3A:47:BC:C8:66:EE:C6:D9:59:CE:88:EA:C4:6A:9D:15:65
Authority key identifier: 41:8D:54:B5:5B:19:2A:24:8B:84:72:34:DB:A5:12:F9:76:0C:AB:FA
Certificate issuer: /CN=418d54b55b192a248b847234dba512f9760cabfa
Certificate serial: 019F9624F0692DE595D2502E7807D3DE9368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QY1UtVsZKiSLhHI026US-XYMq_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b43857-021c-4262-b183-1d77cf2a7100/1/QY1UtVsZKiSLhHI026US-XYMq_o.mft
Manifest number: 0D4D
Signing time: Fri 24 Jul 2026 22:00:30 +0000
Manifest this update: Fri 24 Jul 2026 22:00:30 +0000
Manifest next update: Sat 25 Jul 2026 22:00:30 +0000
Files and hashes: 1: QY1UtVsZKiSLhHI026US-XYMq_o.crl (hash: Nou2VBX7lnAoFm5E3CBXG05NlLPaeAHhavUhzxJ5W5c=)
2: SD4DOOe1Q-YfVl5PpC2wzjneINo.roa (hash: rAueVU0HnCRC0myAX4koUuZ65An0z5mJknuS+tLrJrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b43857-021c-4262-b183-1d77cf2a7100/1/QY1UtVsZKiSLhHI026US-XYMq_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b43857-021c-4262-b183-1d77cf2a7100/1/QY1UtVsZKiSLhHI026US-XYMq_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QY1UtVsZKiSLhHI026US-XYMq_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:24:f0:69:2d:e5:95:d2:50:2e:78:07:d3:de:93:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=418d54b55b192a248b847234dba512f9760cabfa
Validity
Not Before: Jul 24 22:00:30 2026 GMT
Not After : Jul 25 22:00:30 2026 GMT
Subject: CN=8ba0ad3a47bcc866eec6d959ce88eac46a9d1565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0d:50:2b:25:90:97:64:e1:4f:d8:f2:75:a7:
06:80:ff:0e:9a:50:89:0f:64:e4:fa:34:4d:75:d7:
f7:3e:88:3b:90:ec:c0:8d:5e:98:1d:8a:58:3d:4c:
ce:f3:f4:d4:7d:d9:00:94:61:ea:09:40:d3:92:b8:
f7:35:bc:4b:7c:74:f2:01:81:40:dd:f6:e0:52:9e:
c1:11:de:47:e4:57:a5:b2:1d:59:01:50:78:9a:eb:
c4:0d:33:8f:5b:40:75:99:9c:32:3e:91:17:57:e4:
a1:fe:3d:36:a2:8f:7f:f8:a6:4e:4c:40:3e:f3:d6:
b5:9e:5c:9e:d5:1f:bf:96:2d:f7:a6:71:70:4d:cb:
af:26:a9:ff:9b:cf:e8:4f:6d:ca:ba:cc:07:70:7b:
12:9c:75:e4:bc:21:fc:0b:54:7a:95:5b:fb:bc:ec:
1e:fe:e2:fa:bf:ac:61:a9:83:51:77:aa:b1:05:91:
b2:d8:66:63:4b:d7:d7:09:8c:a7:78:e2:73:30:06:
78:c6:89:74:2b:34:40:c1:bf:8a:19:1d:ac:68:47:
10:d3:aa:07:74:01:55:3d:ba:38:ad:0d:f7:41:95:
e1:68:87:e6:e4:87:63:a4:d3:fd:32:7c:d7:ba:31:
97:34:2b:af:65:82:55:50:86:8f:e4:62:b2:20:4c:
ea:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A0:AD:3A:47:BC:C8:66:EE:C6:D9:59:CE:88:EA:C4:6A:9D:15:65
X509v3 Authority Key Identifier:
keyid:41:8D:54:B5:5B:19:2A:24:8B:84:72:34:DB:A5:12:F9:76:0C:AB:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QY1UtVsZKiSLhHI026US-XYMq_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b43857-021c-4262-b183-1d77cf2a7100/1/QY1UtVsZKiSLhHI026US-XYMq_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b43857-021c-4262-b183-1d77cf2a7100/1/QY1UtVsZKiSLhHI026US-XYMq_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:47:42:c4:1b:eb:6b:a6:4e:53:69:02:e3:e4:4e:36:94:00:
19:d5:18:fe:f0:64:6a:9b:92:ea:43:c4:9d:62:b3:eb:cb:dc:
03:ba:40:bb:cc:1f:a0:ed:6b:1f:de:ea:42:0d:ef:18:27:6c:
c1:46:e8:8a:70:a5:5b:f4:2e:32:f8:9c:a0:95:77:3c:86:16:
46:48:57:e8:2c:a6:c0:b4:48:3c:d2:87:0e:6d:b1:ec:d4:14:
ec:c8:50:49:8f:35:7d:97:82:f0:10:11:e5:c1:b6:ed:83:2d:
73:8b:f2:d4:c9:d2:e5:7b:62:99:d4:e1:1d:13:f6:8b:ba:74:
d8:18:7d:41:f9:e3:81:ad:9f:cf:b2:bd:a7:ef:2b:a3:54:92:
48:37:83:84:29:e9:83:70:12:32:d6:9a:23:a6:59:f5:26:0a:
2e:c5:5c:39:77:26:6f:4d:3c:2d:e0:f9:47:80:dc:cd:da:67:
44:55:97:8f:a4:e5:42:e9:9c:12:05:f6:b0:84:9a:8e:38:8a:
95:60:6f:3d:28:8e:3c:f6:a4:28:ea:f7:b7:77:b4:00:93:d2:
cd:db:e9:c4:7c:c6:75:38:08:df:5a:f8:8f:e1:c2:78:0e:41:
65:32:aa:13:80:70:f9:54:95:59:52:01:a0:a2:ca:65:91:b2:
53:ab:29:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:50:07 2026 by rpki-client