Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
File: q5z9FXRB9pQo3R9jYcpPSuQss4o.mft (raw, json)
Hash identifier: fZ5CPv5K8Je9sCVyhasC9GJdPduTJwYYy67chT2zLr8=
Subject key identifier: 44:8B:3E:41:66:43:AF:BE:A3:04:20:9A:63:6D:5A:94:AA:FE:C0:D1
Authority key identifier: AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A
Certificate issuer: /CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a
Certificate serial: 019F962515081097FAF8842D64BD56275211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 22:00:40 +0000
Manifest this update: Fri 24 Jul 2026 22:00:40 +0000
Manifest next update: Sat 25 Jul 2026 22:00:40 +0000
Files and hashes: 1: ml7gG0A_mVQfOFzP3FHFwuQkr2A.roa (hash: wWznWI3pS+Ln2wiCRlmdeHQDHSW6bkqR14q4qqXsCjc=)
2: q5z9FXRB9pQo3R9jYcpPSuQss4o.crl (hash: 9JdKzOiKZo9E+dPdobExOKZk/LKwzRsuiE11kFiQXdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:25:15:08:10:97:fa:f8:84:2d:64:bd:56:27:52:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a
Validity
Not Before: Jul 24 22:00:40 2026 GMT
Not After : Jul 25 22:00:40 2026 GMT
Subject: CN=448b3e416643afbea304209a636d5a94aafec0d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3b:7e:5d:dc:46:80:cc:cb:b9:6a:d4:9a:7e:
bb:25:11:60:03:d7:20:94:d8:15:90:04:7d:71:99:
67:f1:96:be:2d:08:18:04:e8:f1:12:47:14:c3:95:
fb:74:c0:c6:d9:03:14:e9:89:52:01:45:44:f7:67:
b4:67:1b:e2:31:28:ca:92:f7:62:05:fb:b4:fe:cd:
76:c8:0a:ed:30:ee:f7:17:3b:fc:fb:3f:00:fa:30:
6b:ae:d0:0e:88:52:66:ae:0b:ee:09:63:32:81:de:
52:50:55:76:15:b6:44:e9:c6:e8:b0:fa:41:1b:9e:
f6:94:3f:bb:47:6a:18:75:4a:a0:13:33:8a:a7:78:
d0:e9:c3:b5:25:04:43:4b:8c:35:3a:6e:c8:6d:f2:
86:12:46:e9:76:33:f8:e9:70:cf:8d:2b:59:aa:c2:
36:5f:ac:29:12:3c:1a:4c:27:9b:4f:09:ef:c1:69:
04:8b:2f:5d:0a:8d:19:ed:f2:df:3a:02:73:e8:4d:
3c:85:bb:b1:38:20:7e:4c:9a:8a:0f:74:df:fe:11:
f8:67:93:8e:f0:f2:9f:8a:64:51:4b:de:ff:93:43:
a1:47:4a:30:07:52:9a:29:89:37:42:58:e0:93:be:
9b:fd:a5:aa:97:c4:98:e2:c3:a0:72:ae:46:ee:22:
ca:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8B:3E:41:66:43:AF:BE:A3:04:20:9A:63:6D:5A:94:AA:FE:C0:D1
X509v3 Authority Key Identifier:
keyid:AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:06:f0:12:e7:0b:77:a1:cd:03:74:3f:18:26:2c:4c:f3:c6:
1b:93:c9:7e:c4:c9:eb:97:d4:bf:30:7e:48:f3:28:97:df:db:
a0:2d:64:35:95:b3:0a:ca:f0:f5:54:9a:0f:1b:5f:2b:b4:fc:
8a:f4:15:2a:08:4c:24:dd:95:7b:4d:36:4c:cf:17:1c:c1:5d:
79:9e:ea:d8:0f:0c:1a:15:0f:db:28:08:f8:04:fd:1e:a5:3d:
d0:d1:62:ac:96:7b:e3:c3:2e:c5:fa:46:12:94:97:2f:c1:52:
1c:23:49:12:5c:e7:c5:1b:a0:8c:f4:86:f8:5d:45:11:a7:a7:
e0:fc:2d:27:44:fa:81:78:e7:5f:2f:85:1f:68:94:f5:5c:d9:
b8:a2:d0:31:9d:d8:53:e8:9c:1f:6b:28:71:9f:84:af:b5:b8:
13:c6:89:06:65:47:d2:43:cb:28:ea:c5:ad:c1:8b:47:29:cf:
03:b4:1f:ed:16:a6:fa:4d:b3:e5:3b:2a:79:49:6b:ad:d1:4a:
56:64:11:e2:fa:f7:dc:7a:c4:dc:00:83:a4:5d:1e:99:07:50:
dd:f7:e0:10:ef:eb:a1:00:bf:29:aa:c5:5c:07:73:c4:f5:99:
21:58:43:29:02:70:3d:5e:bc:6c:33:2e:82:8f:36:61:1b:cd:
71:5e:3d:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+WJRUIEJf6+IQtZL1WJ1IRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiOWNmZDE1NzQ0MWY2OTQyOGRkMWY2MzYxY2E0ZjRhZTQy
Y2IzOGEwHhcNMjYwNzI0MjIwMDQwWhcNMjYwNzI1MjIwMDQwWjAzMTEwLwYDVQQD
Eyg0NDhiM2U0MTY2NDNhZmJlYTMwNDIwOWE2MzZkNWE5NGFhZmVjMGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTt+XdxGgMzLuWrUmn67JRFgA9cg
lNgVkAR9cZln8Za+LQgYBOjxEkcUw5X7dMDG2QMU6YlSAUVE92e0ZxviMSjKkvdi
Bfu0/s12yArtMO73Fzv8+z8A+jBrrtAOiFJmrgvuCWMygd5SUFV2FbZE6cbosPpB
G572lD+7R2oYdUqgEzOKp3jQ6cO1JQRDS4w1Om7IbfKGEkbpdjP46XDPjStZqsI2
X6wpEjwaTCebTwnvwWkEiy9dCo0Z7fLfOgJz6E08hbuxOCB+TJqKD3Tf/hH4Z5OO
8PKfimRRS97/k0OhR0owB1KaKYk3Qljgk76b/aWql8SY4sOgcq5G7iLKFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESLPkFmQ6++owQgmmNtWpSq/sDRMB8GA1UdIwQY
MBaAFKuc/RV0QfaUKN0fY2HKT0rkLLOKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTV6OUZYUkI5cFFvM1I5alljcFBTdVFzczRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi83ZDMxNGUtNDJjZC00MmNlLTk4NWUt
OTU0ZjI2OTEzZjQzLzEvcTV6OUZYUkI5cFFvM1I5alljcFBTdVFzczRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi83ZDMxNGUtNDJjZC00MmNlLTk4NWUtOTU0ZjI2OTEzZjQz
LzEvcTV6OUZYUkI5cFFvM1I5alljcFBTdVFzczRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWQbwEucL
d6HNA3Q/GCYsTPPGG5PJfsTJ65fUvzB+SPMol9/boC1kNZWzCsrw9VSaDxtfK7T8
ivQVKghMJN2Ve002TM8XHMFdeZ7q2A8MGhUP2ygI+AT9HqU90NFirJZ748MuxfpG
EpSXL8FSHCNJElznxRugjPSG+F1FEaen4PwtJ0T6gXjnXy+FH2iU9VzZuKLQMZ3Y
U+icH2socZ+Er7W4E8aJBmVH0kPLKOrFrcGLRynPA7Qf7Ram+k2z5TsqeUlrrdFK
VmQR4vr33HrE3ACDpF0emQdQ3ffgEO/roQC/KarFXAdzxPWZIVhDKQJwPV68bDMu
go82YRvNcV492Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 23:13:02 2026 by rpki-client