Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
File: q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft (raw, json)
Hash identifier: oEnIP+xPp0lGPSVd6rGcIzFRgCraw8zMaPF5jasBvhs=
Subject key identifier: 34:7F:CC:0E:60:73:10:7F:D4:FA:B0:E1:DA:23:48:BF:3A:04:5C:D7
Authority key identifier: AB:91:D5:26:25:61:A9:DD:71:3D:FA:39:16:3D:EC:84:9F:EE:46:36
Certificate issuer: /CN=ab91d5262561a9dd713dfa39163dec849fee4636
Certificate serial: 019F946E2247D4FB26223D79DB9932F4CA5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 14:01:13 +0000
Manifest this update: Fri 24 Jul 2026 14:01:13 +0000
Manifest next update: Sat 25 Jul 2026 14:01:13 +0000
Files and hashes: 1: 1-NlXpS8qOmzJQxvh3Vemv6GfalE.roa (hash: HTFIVkm2pfbCpKdVoGWwpPhxe9WRjwNhw3rsgiBHLbE=)
2: 75AwziJR5w1JmorjN6nm2vuye_U.roa (hash: P4Uobg4aZmz71V7WcJ/2A9j6g9mMLhAaqFQfuo24nE4=)
3: S4NA7oSGgXey3Rldy_KPITNHmFc.roa (hash: pctvbrfIhJmWDmoaj1TcgltdORT390IlR3CQ4CeTHxA=)
4: q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl (hash: SxdaZO4QSNfYZfNsaMytHkqcxuyvNkmJrWtmO1prdrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6e:22:47:d4:fb:26:22:3d:79:db:99:32:f4:ca:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab91d5262561a9dd713dfa39163dec849fee4636
Validity
Not Before: Jul 24 14:01:13 2026 GMT
Not After : Jul 25 14:01:13 2026 GMT
Subject: CN=347fcc0e6073107fd4fab0e1da2348bf3a045cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:76:4d:92:44:2c:a7:63:da:04:8d:38:8d:60:
05:9c:23:ca:56:8b:89:2f:cd:e0:c1:cf:e8:e9:40:
b7:22:f8:69:57:a9:4f:34:65:a2:ae:db:3c:32:be:
39:8f:92:0f:1d:7c:e1:8e:6f:00:6d:5d:d9:49:8c:
1c:ec:fb:c8:ee:8b:1e:ac:a2:87:c0:4a:4a:95:d6:
0b:00:52:91:0f:28:b0:53:8f:7b:25:77:05:ac:a0:
43:be:4a:b4:25:7b:25:cb:2d:c9:79:51:d0:30:2a:
4f:39:7b:66:8a:30:77:f7:75:e4:60:21:ea:23:f7:
96:86:c0:60:a7:5b:99:56:0a:d1:12:35:e6:89:55:
0b:06:5e:23:60:fd:1f:ee:1c:9a:0e:d7:b5:f8:34:
af:5d:8c:37:2c:a5:63:8c:b9:0a:8a:3d:fe:8e:fd:
e6:4c:e7:0e:99:3c:ad:73:c0:7c:86:b7:25:46:08:
60:bd:72:64:3d:38:86:72:29:f1:68:29:b2:2c:63:
4e:5e:b4:11:4c:89:3f:7b:1b:5b:bd:20:c6:2f:fc:
f1:f7:c3:10:d2:3b:ee:d1:32:1f:3b:61:8c:8e:25:
0c:f4:1d:b9:32:7d:3e:36:a7:d7:19:29:29:40:b9:
aa:65:41:e5:f1:63:1b:08:c3:7c:86:35:dc:ab:3a:
c4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7F:CC:0E:60:73:10:7F:D4:FA:B0:E1:DA:23:48:BF:3A:04:5C:D7
X509v3 Authority Key Identifier:
keyid:AB:91:D5:26:25:61:A9:DD:71:3D:FA:39:16:3D:EC:84:9F:EE:46:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:63:3e:1d:bc:eb:59:66:a0:a5:c5:7c:59:b2:ee:be:4a:f1:
a3:9c:b8:fb:65:00:c9:b5:07:87:8c:3a:3e:00:4b:2e:1e:0e:
53:1f:33:4a:a7:62:41:87:6c:96:f5:df:d3:fb:d1:ae:85:13:
ee:9b:3d:24:f2:e2:e3:88:a2:94:f1:e7:ea:a0:3a:13:45:6b:
2c:11:99:76:e9:58:e4:98:8d:e9:e2:1b:8d:91:05:99:06:53:
fe:d3:53:e7:0f:4c:fa:5d:a1:4b:37:4a:16:81:01:6e:ad:7b:
78:91:62:b5:10:41:51:9e:51:a3:ba:c7:20:d0:52:bc:53:51:
d6:32:58:0e:e3:d6:93:5d:4e:55:7f:0e:84:a5:54:c9:64:6b:
3a:f6:b5:c1:b0:dc:4a:54:1f:0f:b7:54:fa:d7:cf:55:70:c3:
a3:38:1e:03:3f:81:f5:51:5c:cb:74:d0:c6:97:00:7e:00:63:
35:ef:c6:94:5b:22:46:b8:92:ba:33:0a:52:5c:f5:80:5f:a6:
1f:f3:29:a6:a6:64:78:80:cd:9e:0a:2a:45:9e:28:02:74:45:
c0:6c:fa:61:e5:9a:82:05:b6:fa:3f:2a:ae:9e:c7:7a:ec:97:
0b:8d:3d:73:79:00:d3:73:98:f7:19:02:1e:5f:39:17:35:ff:
20:79:04:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:06:00 2026 by rpki-client