Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
File: Qj2TBU8GPPiikYYXNfkAWauewWk.mft (raw, json)
Hash identifier: YdWVsnVB3tLdpgtjR1K7JjOLzZdPqBP77bKtQELWRbI=
Subject key identifier: 5F:4C:3F:C8:D2:CD:D2:06:28:30:9B:94:B2:FA:74:3A:5E:FC:44:CC
Authority key identifier: 42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
Certificate issuer: /CN=423d93054f063cf8a291861735f90059ab9ec169
Certificate serial: 019F921189B4C61AF5A6165819D56D5E9928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
Manifest number: 19CE
Signing time: Fri 24 Jul 2026 03:00:50 +0000
Manifest this update: Fri 24 Jul 2026 03:00:50 +0000
Manifest next update: Sat 25 Jul 2026 03:00:50 +0000
Files and hashes: 1: 1mX8w6XwA7woU8wmLAJ5ZXky2sk.roa (hash: O4FxQ+GxB8UXGvgtMf5kwgBczUX5jVwN68R45/WuCz8=)
2: Qj2TBU8GPPiikYYXNfkAWauewWk.crl (hash: SJ3bhG6L4R4CROEvjtvrqmd74JppgxpUmrZ2Xd8zwMo=)
3: viJ7gwHZZkl8aycoxbcENmaZJk0.roa (hash: kFhg4Qul4VuaLn8GNiNuWw7f2bf4xMblv/3oeMcLjc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:89:b4:c6:1a:f5:a6:16:58:19:d5:6d:5e:99:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423d93054f063cf8a291861735f90059ab9ec169
Validity
Not Before: Jul 24 03:00:50 2026 GMT
Not After : Jul 25 03:00:50 2026 GMT
Subject: CN=5f4c3fc8d2cdd20628309b94b2fa743a5efc44cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c3:20:50:dc:bc:86:10:40:79:f9:36:9a:87:
48:7a:00:5e:1c:d8:7a:c4:87:d0:11:62:d8:81:4e:
35:8a:57:f8:2c:4b:ba:22:fb:d7:81:43:f1:b8:51:
0d:5f:4d:c5:ba:fe:9d:f3:69:e6:ef:b1:df:45:a3:
10:20:f5:63:5a:de:ae:d6:74:ea:64:4b:43:0c:ec:
25:df:f8:03:a6:fb:bb:cc:e9:59:cf:e8:fc:f4:e9:
ee:9c:ee:a1:a0:dd:ea:9e:47:b7:c8:e9:44:74:b7:
fc:03:c9:53:f4:a2:54:1f:78:bc:7b:11:df:c9:7f:
56:6a:6e:24:e6:25:90:1b:e2:77:07:88:6b:96:29:
d2:13:60:8b:27:60:25:77:20:ae:a8:4f:ed:31:4c:
29:70:86:da:3f:bc:fb:48:1f:95:29:89:69:69:11:
3b:bc:2f:6d:f6:32:0f:d7:5b:35:e6:9b:eb:e6:62:
af:85:28:3e:e7:fe:b1:1f:3b:8b:4e:dd:c6:de:c0:
49:e5:cd:42:26:33:43:12:60:24:ac:ba:e7:fc:27:
65:d4:e4:09:c5:26:7a:f0:cf:7a:98:b4:83:39:d7:
24:9c:6f:45:ce:8e:24:11:fc:a5:d2:2d:e3:09:61:
eb:18:15:6c:93:d9:cf:b3:c9:a5:43:7a:e6:11:47:
64:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4C:3F:C8:D2:CD:D2:06:28:30:9B:94:B2:FA:74:3A:5E:FC:44:CC
X509v3 Authority Key Identifier:
keyid:42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:b4:ac:a4:ce:f7:e5:5a:34:38:78:30:66:dd:83:38:ac:46:
a5:20:7a:c9:ac:d5:a8:09:ff:33:8d:5f:0c:43:44:60:65:8a:
c7:f0:de:0c:44:5b:d9:e8:ea:4c:53:fb:ca:b7:80:11:78:35:
a3:6d:09:2e:ec:33:1a:e5:18:f6:85:b7:46:6e:1f:f0:d8:33:
2f:83:4b:4e:ed:41:35:c2:80:70:44:ad:c4:bc:43:66:7a:42:
50:32:ce:23:be:ea:29:64:a2:13:84:86:83:c2:dc:5c:cb:7d:
bf:02:3c:fb:94:25:1c:ee:28:c7:4e:87:2d:85:e1:1e:b3:9f:
11:84:66:ed:c5:07:f1:5a:a2:19:1c:aa:ed:ed:58:41:74:73:
58:4a:4d:89:57:8d:b6:27:fa:bc:bf:f4:ea:07:46:46:06:47:
64:36:f0:2f:90:99:b5:2c:34:4e:ce:ff:0a:ba:9e:aa:35:93:
34:8d:4b:dc:cf:91:2b:db:e6:38:c9:e6:ad:a6:96:f2:d9:92:
dc:3e:71:f7:f6:70:e7:0e:da:82:c0:da:73:66:1b:5d:be:8e:
d5:bd:3b:ee:a0:62:8b:9e:7e:11:fb:b3:18:bb:5e:cf:32:f7:
02:ae:99:3b:d7:73:06:27:34:c7:6b:d6:54:e7:84:93:e4:52:
8b:4b:9a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:08:05 2026 by rpki-client