Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
File: Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft (raw, json)
Hash identifier: dGnJvW1gETWCfHv86/WRLhMP5MYeAJuEmiHUYt1HfPY=
Subject key identifier: 09:F3:96:F3:87:D9:60:EC:F2:02:3B:11:E4:F8:1D:49:D4:E5:74:0E
Authority key identifier: 43:72:4E:61:E3:BA:2F:94:66:59:17:33:9E:6D:AC:2B:68:0A:18:CF
Certificate issuer: /CN=43724e61e3ba2f94665917339e6dac2b680a18cf
Certificate serial: 019F939236F3734A2FF372C19F40BBF41DE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
Manifest number: 03F8
Signing time: Fri 24 Jul 2026 10:01:00 +0000
Manifest this update: Fri 24 Jul 2026 10:01:00 +0000
Manifest next update: Sat 25 Jul 2026 10:01:00 +0000
Files and hashes: 1: 1FnTssY12YHbRtY_nsWuk0wHwHY.roa (hash: Wp9yiHSm5oosC+1oWAnqkh1+AZR6IesD358xtq9/l6c=)
2: Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl (hash: i8jOSx5w+HTyWow9aGxOMJIjKIZ5v/SoSs+J9GJaorU=)
3: jGh-wNW6Bb8Ek-tElbdvocTw07w.roa (hash: U9B8vDsky1QCNLRt1e+ai6h13YxOH7cX6zl+1cv2MFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:36:f3:73:4a:2f:f3:72:c1:9f:40:bb:f4:1d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43724e61e3ba2f94665917339e6dac2b680a18cf
Validity
Not Before: Jul 24 10:01:00 2026 GMT
Not After : Jul 25 10:01:00 2026 GMT
Subject: CN=09f396f387d960ecf2023b11e4f81d49d4e5740e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:09:df:bf:55:01:4c:d0:80:7e:54:a1:dd:48:
72:e6:6f:8a:d9:91:1e:70:94:4e:db:2f:26:43:a8:
ca:43:3f:67:51:a6:67:e5:68:0d:c7:b5:48:cd:b1:
f7:05:55:5a:8a:7e:06:b3:c0:16:9b:1b:2d:dd:52:
7b:28:c6:27:d8:b3:f6:fc:8b:06:4b:2d:f2:69:8b:
59:0a:8d:65:ba:4a:e8:ec:6a:8f:99:83:84:d3:14:
5e:b8:2f:bc:91:a7:94:11:5b:a9:de:f0:53:3b:0b:
2d:b4:96:06:30:42:e4:da:8e:06:b0:66:3a:78:90:
4c:f9:32:52:4e:76:28:79:3f:cc:62:af:cf:4f:e5:
14:5b:af:37:c3:98:f1:6e:10:16:8c:50:e7:e5:f2:
3b:7b:1d:7b:f6:29:42:c4:18:01:8e:2b:c7:e0:68:
03:9d:d2:1e:69:34:59:fc:02:bb:2c:d3:2e:d2:15:
5d:95:7f:53:ef:a3:a8:f8:44:87:15:3d:a7:76:61:
54:be:55:ca:5f:7b:13:a0:39:08:e0:19:ea:52:56:
cd:e5:9f:63:40:a9:ce:93:3d:c6:a4:eb:f0:47:d1:
d9:d7:b9:fe:53:53:ad:bb:f0:a8:81:05:8a:a1:2a:
74:fe:26:42:2f:1e:51:27:92:9a:37:28:da:5a:99:
af:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F3:96:F3:87:D9:60:EC:F2:02:3B:11:E4:F8:1D:49:D4:E5:74:0E
X509v3 Authority Key Identifier:
keyid:43:72:4E:61:E3:BA:2F:94:66:59:17:33:9E:6D:AC:2B:68:0A:18:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:4c:5b:61:a3:95:a6:65:10:f0:01:47:7f:e1:0d:60:28:6b:
7d:f1:75:12:19:6d:ff:51:0a:04:d8:a0:01:76:76:cd:b6:3e:
60:28:1a:72:6b:b1:6b:c7:f9:16:c3:14:42:fa:a6:05:96:c1:
14:11:c3:42:a2:42:1e:7a:dd:13:72:a4:36:2a:e2:e7:3d:7d:
ec:5e:2a:1a:1b:62:7f:da:39:2d:ad:55:e6:05:88:0e:8d:19:
8d:c4:68:c0:92:be:5e:04:89:88:13:e9:cd:cd:86:ed:ef:e9:
05:18:e6:3e:49:76:43:74:38:d9:90:9b:dc:d0:4b:7a:c2:ad:
e2:dc:ed:14:5d:dc:07:c2:92:46:1f:c6:f8:46:b8:9b:0e:62:
78:f5:44:c1:42:67:c7:23:65:a6:ce:33:39:0a:96:62:e0:e7:
b1:87:5e:27:05:1e:51:f0:e0:4b:d9:a1:03:88:6b:a2:aa:f4:
d4:dd:9c:bb:c2:8a:83:e3:12:c1:e9:6c:08:81:72:61:e1:33:
95:50:8a:56:0f:48:4e:01:52:a2:1a:77:3c:4c:46:75:11:0e:
ae:aa:f3:f8:a0:10:fa:a7:93:28:00:36:06:13:cf:1e:ff:06:
66:e0:c2:b1:0b:e4:87:00:6f:e4:f9:37:b5:84:41:5c:b2:81:
38:81:f6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:40:28 2026 by rpki-client