Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
File: Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft (raw, json)
Hash identifier: bLk7r7NEDDwhfpFQN8zGyRgioRA1bIMVBzZpeeGD6dg=
Subject key identifier: E1:9C:DF:39:BE:AA:62:D5:C0:B2:DB:0D:F2:D9:25:6B:C5:CC:A1:1F
Authority key identifier: 42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
Certificate issuer: /CN=428df99824ce67b0cb5f87fc46599e13adea5702
Certificate serial: 019F92ED45AF815AB263A66E228A07FCA999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 07:00:51 +0000
Manifest this update: Fri 24 Jul 2026 07:00:51 +0000
Manifest next update: Sat 25 Jul 2026 07:00:51 +0000
Files and hashes: 1: PwXZ36ew-cUGZEoEjPsdiwlwGDg.roa (hash: nvE+bb5C5rtF8YiUnSsjumFKZwx9bfJMyTTo8X52rsc=)
2: Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl (hash: 03s5vgPU4TZcX5EqnlGDJL3IuErMUKgNAxQFn+F9zms=)
3: xtfoGeIECTpdCbZHNkFP50BN1MA.roa (hash: Z1lBrIMUzn5W9YhrUqvcchRAFUBJEphcXoXllZ4p86k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:45:af:81:5a:b2:63:a6:6e:22:8a:07:fc:a9:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=428df99824ce67b0cb5f87fc46599e13adea5702
Validity
Not Before: Jul 24 07:00:51 2026 GMT
Not After : Jul 25 07:00:51 2026 GMT
Subject: CN=e19cdf39beaa62d5c0b2db0df2d9256bc5cca11f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:09:f7:dc:b4:40:9b:ee:10:43:60:a1:59:41:
7b:f0:0d:22:f3:23:00:1c:74:f6:82:65:7a:11:1c:
68:11:bf:55:c8:05:18:9b:29:d2:d6:6c:34:43:1a:
ed:3f:01:58:ed:21:56:09:f4:91:e7:0f:fc:53:96:
68:7d:82:f3:40:23:8a:4c:e4:04:a0:f2:7f:bf:4f:
67:27:1f:d1:4d:1a:33:8b:8d:33:fd:bc:c7:80:e2:
9e:5f:b9:62:67:93:f4:8d:5c:04:d3:00:05:2a:34:
81:5d:51:06:5a:bd:25:7b:8f:ee:8a:38:aa:53:59:
4a:f6:f1:23:4d:87:d1:46:cf:dd:ac:72:f6:60:32:
21:40:5c:f5:ca:40:68:7d:40:13:9f:6f:6c:66:e6:
38:89:ba:25:12:f9:31:56:bd:5a:b0:33:43:d6:39:
9a:f3:c3:76:ce:e3:7f:f8:88:1f:9b:60:34:14:7a:
d0:d7:e0:49:13:ea:d5:d5:ab:2e:d0:66:2c:7b:c3:
37:dd:5a:1c:69:1f:9d:75:be:99:ee:a5:d2:2b:a2:
6e:7e:a8:1f:b5:eb:76:13:17:cf:28:42:cc:e9:6a:
f4:8e:02:b8:97:4a:ed:ae:d3:28:d7:a1:9a:9e:40:
66:a2:4f:1b:af:2e:df:73:79:63:d3:be:58:35:3c:
38:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9C:DF:39:BE:AA:62:D5:C0:B2:DB:0D:F2:D9:25:6B:C5:CC:A1:1F
X509v3 Authority Key Identifier:
keyid:42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c1:3d:d7:bb:86:6b:1a:73:7d:90:1a:84:ce:91:54:c2:6e:
f4:ae:d7:86:51:6a:27:61:ff:ab:ed:6a:74:20:7d:c8:5e:27:
fa:6e:fa:ea:d3:d6:9b:55:e2:7e:ff:f3:11:c5:06:ec:f2:be:
4d:57:af:6b:aa:28:7f:42:8d:2e:83:f4:de:85:46:3f:5a:e7:
4c:73:ac:39:4e:78:7b:de:cc:af:d4:a0:30:6e:78:73:d8:60:
35:cb:be:57:60:bf:bc:61:40:09:af:52:ca:7e:a6:c9:87:75:
4a:af:02:38:df:0d:1f:95:4a:19:b8:2c:e1:06:d9:0f:27:bc:
5a:4b:c2:d6:29:b9:67:e0:c3:f1:ac:aa:60:c2:7b:f7:01:b5:
55:db:e9:3d:e1:62:55:de:0c:22:c2:8e:a7:ea:18:ff:99:1f:
b9:14:64:20:00:9b:41:7f:17:e4:8c:ab:b8:cb:dc:21:3c:95:
ad:a0:76:1d:0b:9b:8a:48:5f:54:73:5e:aa:c1:17:75:8e:01:
6a:b0:14:59:f7:cc:d2:c6:ed:d7:f9:f6:5f:b4:d3:fe:07:25:
e7:a8:26:d8:98:95:8e:1a:d6:95:5e:2e:eb:90:ca:f8:23:9c:
6d:36:44:80:41:58:52:1d:8b:22:d5:a7:3a:6d:1f:a1:f2:ea:
b5:66:fd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:21:54 2026 by rpki-client