Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
File: Q8FllZZq-wus8deTfyRdagUiIaM.mft (raw, json)
Hash identifier: O1sZduTGUhyadszOV/8eeVATO+GSh/vze0UrbIOuykA=
Subject key identifier: 2A:68:DD:25:48:43:27:A8:1F:F0:ED:F7:38:F9:A2:5C:E5:83:1A:D6
Authority key identifier: 43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
Certificate issuer: /CN=43c16595966afb0bacf1d7937f245d6a052221a3
Certificate serial: 019F92ED43B7CDF4D6AC30E4CC1A25D91EF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 07:00:50 +0000
Manifest this update: Fri 24 Jul 2026 07:00:50 +0000
Manifest next update: Sat 25 Jul 2026 07:00:50 +0000
Files and hashes: 1: 4txRYI484TEAkKZQuGXE7v7kNFE.roa (hash: 0LHuR+m3x801pvrNDlfkYNVRhvh7QTNXeF2avzGdu+o=)
2: 7j99n4d6ANqzBKZIb7AtbN16HNM.roa (hash: rlAo1p9sV9yO7tsi280DXkwJRnsLW38pb6gpoEvvu7w=)
3: Oo3ap3FWMfZFuKT_5X4cPgbvWBY.roa (hash: SClF6a/p5GxrqHhEbYnu5sljGKEXM6UG1fAy0VW6itY=)
4: Q8FllZZq-wus8deTfyRdagUiIaM.crl (hash: WOFdZH4XZ59FIu3l1sbRMrmXWcjFg4LBhxHWDruYuhM=)
5: ZoLYEk24uuNv33EjJ4m1okSNS6w.roa (hash: aOyue5Aqc/KW4Mnoyy7ahJjLtcQmVKEsi36/Y3I9yHA=)
6: aj9euBKzI3NIH66jZPh8bbmGI6A.roa (hash: 8jTNJ61hr37vcKXTL8TlYqDMnFRq1ith6TwEVeBelwE=)
7: nH1OKpXJbAvAHxN6XWdXMd6gZuY.roa (hash: j3S1I730IB3QQneXnDNotR19hJRoRUA2SbUVmp/YndQ=)
8: ottEKlKze703Xucot2ljZZmoong.roa (hash: 1DtEnDgUDcQi4vqWCrTRW5+Lsqb1kTbcbswrOF8wGaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:43:b7:cd:f4:d6:ac:30:e4:cc:1a:25:d9:1e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c16595966afb0bacf1d7937f245d6a052221a3
Validity
Not Before: Jul 24 07:00:50 2026 GMT
Not After : Jul 25 07:00:50 2026 GMT
Subject: CN=2a68dd25484327a81ff0edf738f9a25ce5831ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d0:72:41:8a:e0:b0:ac:7d:b6:d6:22:d5:20:
82:c7:3c:8f:1d:6d:48:d1:e1:e6:5a:dd:ff:2c:01:
24:ae:2a:be:9a:8c:4a:55:e8:48:0c:aa:6e:59:85:
a0:46:cb:bb:71:b1:9b:5c:9d:25:36:4d:a9:72:65:
38:31:25:c8:da:01:9c:56:28:f5:eb:89:d1:a0:3a:
27:23:d3:53:77:a7:98:22:ac:de:96:20:fc:51:f6:
e9:49:77:c8:a4:e8:9e:8b:a7:e3:bb:cb:c5:fa:07:
34:fe:c6:d0:ad:73:22:c0:18:64:d1:d5:d8:ec:02:
51:35:37:17:b6:c5:83:ea:54:e7:97:85:8a:d9:07:
89:ca:a0:de:dc:2b:39:9a:1d:86:04:ab:a7:f4:ce:
0b:5b:ff:f4:d5:af:07:65:f8:5a:92:6d:a1:06:2e:
de:fb:73:60:29:97:0c:97:19:5b:11:3c:72:bd:68:
c9:28:6b:d7:de:ec:cb:6c:6f:62:66:7b:c0:a4:fe:
9b:d3:64:76:7c:22:ee:57:ef:94:6b:1b:25:e4:57:
d8:d0:bc:ac:19:a4:d7:ed:9c:c2:a5:b8:d7:37:ae:
d0:5f:64:f4:86:c0:3d:b4:84:bd:29:30:8d:dd:41:
69:ab:5a:5e:8a:ef:c6:3e:5e:49:2b:b8:37:7c:29:
81:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:68:DD:25:48:43:27:A8:1F:F0:ED:F7:38:F9:A2:5C:E5:83:1A:D6
X509v3 Authority Key Identifier:
keyid:43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:46:0a:50:b0:08:53:4b:20:2b:e1:7d:dc:2b:5a:25:80:af:
48:40:54:75:ba:8f:b9:18:df:25:18:97:7c:3f:88:2a:94:df:
b2:38:3b:e3:48:38:cf:ee:07:7d:82:5e:4e:82:8d:43:84:dc:
a9:2c:0d:6d:d8:d8:8d:16:0e:bb:8a:c0:9c:e5:40:65:be:80:
02:02:31:59:f9:34:8e:76:1f:fe:01:c5:3a:7e:bd:47:c9:17:
aa:45:af:1c:46:e7:35:3d:01:72:18:fc:3a:0a:8a:cc:56:17:
a8:43:75:37:c8:9e:30:2c:6e:c0:c8:6a:61:6d:f2:ae:d8:51:
64:3b:1b:86:c2:fe:27:b2:f6:7c:98:92:cc:fe:86:c1:26:5d:
e5:72:82:2f:72:f9:98:79:75:4b:f4:eb:e2:3f:7d:aa:da:43:
b5:02:77:b1:f5:fc:92:57:da:fd:76:af:fe:c2:5f:68:63:28:
d6:40:fd:0e:04:6b:ae:63:f0:b5:a3:9c:59:fa:70:16:4a:22:
57:d5:65:79:85:90:88:34:7a:f3:54:18:6d:5c:34:60:ed:69:
99:2f:1a:48:38:54:60:74:c9:86:f6:72:58:de:8a:7c:08:66:
6c:ce:e9:ba:0b:82:53:ee:8f:da:93:7b:32:4b:14:03:4c:22:
5c:2c:e5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:54:07 2026 by rpki-client