Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
File: QSasSvr9JpiBwQrS7KL03vjtvSE.mft (raw, json)
Hash identifier: 4uzFf2gtIPR4ZtFzYMCAzcdEihHmBySV2dDOKq3qZP8=
Subject key identifier: DD:C6:07:03:F6:56:14:1E:72:3B:7A:3E:81:9C:F7:67:B4:55:8E:9B
Authority key identifier: 41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
Certificate issuer: /CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Certificate serial: 019F916CD7943B3F1770A962E731E095D4A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 00:00:57 +0000
Manifest this update: Fri 24 Jul 2026 00:00:57 +0000
Manifest next update: Sat 25 Jul 2026 00:00:57 +0000
Files and hashes: 1: QSasSvr9JpiBwQrS7KL03vjtvSE.crl (hash: lB7FRtcFu4Rfo5WB+lAbpUtMwVeTn0eid10BWggFlzA=)
2: WWEiiRclZJiJc4Yp9PYYvoQpmSA.roa (hash: hrQ5qgVNUSC0WxamoxJ9EGRyxZYAj1wkc81Qc600uiM=)
3: zXqwVcwlXpQqAoueTVMdXtH7SG0.roa (hash: jcregEqkWYaC2zgOmhpk2TEJDFYrMRRaV054ziFvW/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:d7:94:3b:3f:17:70:a9:62:e7:31:e0:95:d4:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Validity
Not Before: Jul 24 00:00:57 2026 GMT
Not After : Jul 25 00:00:57 2026 GMT
Subject: CN=ddc60703f656141e723b7a3e819cf767b4558e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bf:bb:a5:6e:4c:b1:f9:19:2a:b9:21:1a:96:
59:a8:72:d1:47:42:4a:df:b3:56:22:29:e4:c0:cc:
60:66:1d:f3:34:3a:78:47:76:d9:b7:0f:07:33:dd:
5e:d7:27:d1:9b:72:f6:ee:fe:26:b3:ad:f8:f9:ac:
2a:28:23:bc:4d:aa:0b:71:d9:6d:e9:cb:5b:3b:e8:
d1:ac:76:cd:e5:46:59:89:01:8c:9e:21:bb:88:51:
eb:32:b1:ec:36:a1:97:2d:8c:6d:b7:1d:4a:6c:8a:
b2:c3:cc:70:cd:f8:d0:dc:9e:de:94:68:98:7c:56:
e4:55:a2:f2:13:59:c6:08:f1:a6:ef:63:07:c3:5c:
b6:ed:8c:c2:42:ef:e7:12:88:1e:a6:fe:87:fd:94:
89:67:2d:47:c9:8e:3b:55:68:25:36:2a:51:c1:cc:
1b:f1:6c:2f:c5:74:bf:9c:14:4d:4e:e9:14:14:03:
4e:b7:08:60:7c:8b:0c:12:3b:67:01:d1:b8:03:2f:
9a:47:05:01:0c:e3:f1:33:18:29:ad:89:63:29:dc:
16:8d:c7:a9:98:99:3a:a9:60:1c:5f:5f:a8:73:9d:
cd:13:b1:6d:bd:af:72:6c:e4:82:75:72:32:80:21:
9a:4e:1a:42:ea:9c:0f:a5:fa:12:87:33:22:66:c4:
b0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C6:07:03:F6:56:14:1E:72:3B:7A:3E:81:9C:F7:67:B4:55:8E:9B
X509v3 Authority Key Identifier:
keyid:41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:a5:07:56:43:4f:82:6a:b9:58:26:9b:e7:bf:53:07:a1:fc:
0b:2b:08:31:23:c0:8b:33:a1:f6:46:8a:8f:49:b7:21:82:71:
f7:12:f1:e1:a6:03:22:c9:8b:8d:de:68:37:9c:d4:aa:f6:f0:
b5:5c:06:15:5c:f4:49:3b:c0:c4:03:fa:c6:5a:74:cc:e6:e7:
b0:c0:15:3f:31:28:eb:0e:cc:91:bb:d0:01:cf:22:8f:17:cc:
94:79:0f:aa:3a:06:94:fa:26:fb:c0:d4:06:9b:1d:a0:03:72:
b6:d5:a4:be:cd:2d:5e:51:37:e7:7d:8c:f8:86:20:d2:02:9d:
b5:1a:55:0f:22:e2:70:6c:a2:29:d6:dc:80:f2:fd:db:8c:57:
1c:f3:01:b5:93:58:f3:34:09:ac:55:d4:19:f0:62:3c:3c:12:
45:0e:03:35:51:c1:76:99:2f:d3:88:7a:54:96:4e:cc:ab:7c:
1e:ec:c3:fc:99:d0:8b:e1:96:31:04:d7:1d:22:06:2f:20:16:
8d:72:a5:c9:d3:9b:a8:7b:2c:83:e2:67:81:c3:57:9b:8d:4c:
07:88:04:e5:0a:2f:e0:1d:91:38:d4:f2:1f:44:bb:26:fe:b6:
3f:32:ef:0c:56:40:12:3b:b6:e1:ea:b3:78:ab:6d:1e:ea:8a:
cd:b7:d0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:15:57 2026 by rpki-client