Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
File: q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft (raw, json)
Hash identifier: J0sx1NPUBEtTSbcemov3pRuiZmTeFSKUSVTENPHwlH4=
Subject key identifier: 22:AA:45:75:D3:45:48:46:A0:22:3A:02:D7:B1:43:2B:8E:F0:19:00
Authority key identifier: AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
Certificate issuer: /CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Certificate serial: 019F9512C2A347EED66287ED5B65451BC34B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 17:01:02 +0000
Manifest this update: Fri 24 Jul 2026 17:01:02 +0000
Manifest next update: Sat 25 Jul 2026 17:01:02 +0000
Files and hashes: 1: 8TsXg-XUAk1JE35W5iwCEn8OxHY.roa (hash: wgiKwTO+cQ6amDFPE6cljiPgi+iGvWx/hXbXkD8CRAQ=)
2: q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl (hash: 2T4dInh3BJ8aPUNE5x7Tnx+yR1Y+ZqOoQJa6eU0aJ2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:c2:a3:47:ee:d6:62:87:ed:5b:65:45:1b:c3:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Validity
Not Before: Jul 24 17:01:02 2026 GMT
Not After : Jul 25 17:01:02 2026 GMT
Subject: CN=22aa4575d3454846a0223a02d7b1432b8ef01900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b4:3f:29:8e:a5:4a:00:d7:09:0a:33:1d:59:
13:29:e2:3e:02:8f:7c:15:e7:37:4a:1f:91:e4:66:
06:95:b0:40:44:9b:10:2c:bb:7d:00:23:1a:cf:c8:
aa:c5:af:53:9d:c9:fc:ce:ff:2e:03:92:5f:2a:71:
7a:b4:5e:dc:96:39:d9:bc:8e:01:bc:49:8d:e2:51:
15:59:19:ea:d7:12:cc:f4:d6:6e:ae:37:91:2e:b4:
cb:cf:7a:48:3f:69:0c:a7:bb:a8:d1:77:b1:21:d8:
93:de:5e:76:c8:f7:07:c7:c7:9f:ed:c0:b5:15:06:
53:a7:c1:4e:6d:91:97:78:01:45:34:93:40:53:6d:
08:d1:02:48:7f:5a:c9:95:44:91:b5:90:10:de:1e:
f1:d3:e4:d9:6d:50:ca:25:18:95:43:85:71:ef:92:
3a:1f:f0:83:c5:41:ea:d6:2b:a8:4a:ef:7b:70:d6:
2d:a2:a9:24:80:9d:37:0a:45:ff:8a:67:c9:1a:26:
a0:7a:20:17:c6:8e:75:f0:ea:00:a1:15:36:ab:b4:
52:76:97:bb:b8:52:e3:d7:08:09:98:33:e8:92:d3:
33:06:65:1f:dd:3f:c1:93:69:56:0e:f9:45:60:48:
1e:b4:f6:1c:88:94:04:71:57:85:e1:2a:85:c8:2e:
cd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AA:45:75:D3:45:48:46:A0:22:3A:02:D7:B1:43:2B:8E:F0:19:00
X509v3 Authority Key Identifier:
keyid:AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:26:7f:ba:2f:43:87:a2:54:fb:1b:d1:b5:14:95:d8:d3:f9:
1d:be:d8:45:a7:d6:9e:94:da:5a:e1:7e:a1:e7:1f:3e:4c:c0:
64:52:dc:54:01:be:a4:8c:f0:22:4d:de:c7:75:87:7c:04:fb:
49:08:d5:30:0f:d0:12:77:15:96:96:82:17:f9:0b:b5:05:8b:
d1:d3:02:e2:7a:9b:ec:90:6c:9e:cc:66:28:0a:6c:f8:0a:ea:
9e:1b:21:61:7f:98:02:e7:4c:d1:2a:a7:c0:a4:a6:1c:29:63:
1c:3b:87:3e:43:39:39:f0:1b:c4:bb:a6:aa:41:67:db:1a:b0:
18:41:cc:33:9f:58:6a:8b:61:12:a3:f9:28:32:74:da:64:a1:
37:e2:7c:d3:0f:c7:1f:c4:b7:65:8b:f5:8c:f2:8d:4a:d6:b1:
65:d1:44:14:71:a1:73:45:14:e0:b7:14:32:6a:6a:c2:c5:09:
02:56:38:7e:49:57:1e:27:e6:60:97:6a:e9:81:0c:1f:b9:f1:
63:0b:a6:4f:5f:69:2c:a4:d7:ad:c1:33:14:4a:06:16:8d:d9:
bd:a3:f6:a0:f7:37:c9:5b:e1:26:ad:90:0c:78:32:3f:71:80:
a6:00:66:0c:b8:ce:a5:d2:4f:45:23:28:ca:37:55:15:83:fa:
b6:75:9e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:06:01 2026 by rpki-client