
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
File: qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft (raw, json)
Hash identifier: +WPwAYyNP087g3/cIQgpMx2mnaq/Mh2mQY21bz6/f4M=
Subject key identifier: 4E:C8:E9:97:5F:2D:A1:0A:9B:4E:B8:AF:D0:89:BE:C8:0A:DD:F0:64
Authority key identifier: A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
Certificate issuer: /CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Certificate serial: 019F927F7E3ADED087E79C6CBEEF2E4669FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
Manifest number: 1552
Signing time: Fri 24 Jul 2026 05:00:56 +0000
Manifest this update: Fri 24 Jul 2026 05:00:56 +0000
Manifest next update: Sat 25 Jul 2026 05:00:56 +0000
Files and hashes: 1: gCXrBFLxOw6kqjD16CuMsL6zWgE.roa (hash: v9RU6FPgMI/ClMLp92GPHhi/v35/JkjC+Xjyrv6zdv8=)
2: gKSA9C01bh9TzjI8socY0aOqSWo.roa (hash: /00W/aM+47tlUTvfcHQg7c95+kNT0zWHs82O05qfa0U=)
3: qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl (hash: u8fKKj1S9mZQQsda/zq1STUb/zK+LWcZYU/SVM3H/to=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:7e:3a:de:d0:87:e7:9c:6c:be:ef:2e:46:69:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Validity
Not Before: Jul 24 05:00:56 2026 GMT
Not After : Jul 25 05:00:56 2026 GMT
Subject: CN=4ec8e9975f2da10a9b4eb8afd089bec80addf064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ba:e3:9a:c9:d2:1e:bc:af:d6:f5:a9:ab:af:
2a:e8:48:c4:ed:97:9e:25:33:40:0b:f4:e2:45:d3:
b7:af:3a:e5:e9:b8:6c:2b:82:d5:54:1d:bb:55:a6:
50:75:c5:38:3f:9f:1f:af:77:61:96:f0:bb:c7:e6:
2d:45:03:06:a4:88:0a:0c:a0:72:b2:8c:57:36:f6:
14:f6:21:0d:7a:a3:46:f9:1d:00:d5:4f:6d:9e:dd:
1c:e0:8f:22:ab:a3:3c:e3:32:64:f0:e7:26:23:c5:
7f:13:ae:6e:53:95:1d:b8:3e:96:ee:4a:e6:2c:d4:
ec:ee:09:9c:e5:8e:07:6a:54:45:23:aa:a8:55:06:
3c:11:b5:36:96:d6:12:e7:67:62:08:c6:d5:a7:d4:
5c:b2:d8:f2:97:a0:73:51:e0:15:35:e5:b4:ef:05:
37:ae:7c:79:96:fd:ef:4e:57:2d:34:0f:59:f1:34:
34:6c:60:66:6b:e4:ea:4a:b1:c2:25:f4:6b:71:f3:
2f:e1:51:db:ba:dd:12:97:64:08:19:0b:36:cc:f3:
db:1f:13:2c:08:4c:13:c2:2f:d0:7b:00:56:c9:37:
f1:c2:af:57:11:40:6b:b2:99:04:fe:b1:0c:cd:c8:
6a:de:fd:6a:65:98:ec:79:45:d8:50:da:07:f7:7e:
a7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C8:E9:97:5F:2D:A1:0A:9B:4E:B8:AF:D0:89:BE:C8:0A:DD:F0:64
X509v3 Authority Key Identifier:
keyid:A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:f8:ed:3f:be:d5:40:a0:b8:61:41:ee:b8:9c:a5:d8:10:8e:
dc:76:d5:c9:eb:e2:9b:32:2d:0f:9a:49:ae:01:90:b1:b2:7d:
9d:ca:c0:40:19:91:2c:d2:ae:15:ae:ba:50:c0:5e:4b:e9:a2:
dd:68:cc:d5:a3:10:f8:32:0f:0b:9a:cb:63:1e:31:63:23:83:
a8:ec:14:d4:ad:a1:3a:54:b1:f3:2f:5c:d9:94:09:c8:73:61:
6b:05:33:bd:86:14:bc:2c:f2:e5:c0:85:c5:e8:70:b5:cd:8c:
8e:b5:f8:6f:60:3d:de:24:ea:fb:9f:86:03:92:56:56:57:7e:
80:7c:d5:1b:39:ad:a3:e6:39:55:ad:4b:0a:33:90:aa:f4:13:
8d:42:b9:6b:2e:76:13:ce:e9:91:d9:b0:78:04:26:b8:f4:87:
fd:b6:e0:9c:6a:6c:0a:f9:91:80:48:59:eb:45:e0:47:bc:17:
55:00:25:5b:fc:97:68:59:f2:90:82:eb:30:94:f5:88:8e:2e:
6d:ff:98:81:d2:a6:02:66:1f:9b:d6:be:e2:f3:97:e8:62:5f:
80:89:1c:b4:86:d2:50:e7:84:33:2c:03:fd:bf:1a:2f:16:86:
9a:3f:00:cf:82:17:70:57:60:cd:99:ef:4a:03:5c:4f:c8:0d:
78:1f:df:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:18:27 2026 by rpki-client