Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
File: Q8d7RzY2gTePrORmFB1UzIg5nPU.mft (raw, json)
Hash identifier: TMKMHJ4l5sFOApzhi3Mw3qp4EszChHYuNPs3NtjwPs0=
Subject key identifier: 49:57:B5:F0:C7:0D:76:A1:B5:DD:3C:E1:BF:D2:2F:DB:44:85:BF:F8
Authority key identifier: 43:C7:7B:47:36:36:81:37:8F:AC:E4:66:14:1D:54:CC:88:39:9C:F5
Certificate issuer: /CN=43c77b47363681378face466141d54cc88399cf5
Certificate serial: 019F92ED69DAC2B1EE659D0537CF47314906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
Manifest number: 1959
Signing time: Fri 24 Jul 2026 07:01:00 +0000
Manifest this update: Fri 24 Jul 2026 07:01:00 +0000
Manifest next update: Sat 25 Jul 2026 07:01:00 +0000
Files and hashes: 1: 1XdNFJlYALUGMKogiIBRKN_MGo4.roa (hash: E2oHH/KY2uFlsQZera9X/UCkx0/EdwNbRkr7QYI3dr0=)
2: Q8d7RzY2gTePrORmFB1UzIg5nPU.crl (hash: PUOXiCSOhacvd705+0Y3PfVmTp6di2kTPCLQU29jlTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:69:da:c2:b1:ee:65:9d:05:37:cf:47:31:49:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c77b47363681378face466141d54cc88399cf5
Validity
Not Before: Jul 24 07:01:00 2026 GMT
Not After : Jul 25 07:01:00 2026 GMT
Subject: CN=4957b5f0c70d76a1b5dd3ce1bfd22fdb4485bff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:29:d8:1a:f5:3d:20:74:07:a2:5a:58:07:22:
b9:58:75:38:da:62:17:21:6e:df:f6:1b:29:e8:9d:
72:3a:37:6a:ef:3a:bd:f9:e1:44:f1:70:2e:16:18:
24:cb:86:ff:db:f0:76:01:8a:61:10:5a:58:62:3e:
e1:49:52:26:d9:c5:21:c4:57:2b:b1:01:b6:39:a9:
37:a8:7d:e8:49:63:dc:f5:7e:ce:a4:e9:08:3d:d3:
f9:d5:41:f7:6a:d5:c8:04:06:f2:dd:cf:5b:42:7f:
c6:92:4b:f1:12:63:0a:72:3b:cf:df:36:f0:cf:94:
95:3d:48:f7:f6:1c:33:2a:43:6c:85:a9:ed:ea:fa:
34:b0:d2:1f:75:6c:1d:d5:ec:da:2d:cf:70:dd:d2:
b0:d5:2d:16:73:bf:23:75:d2:68:31:f7:90:76:cb:
7b:e7:7f:24:48:3f:91:3e:10:16:e3:b7:7d:fa:ad:
95:85:62:ac:8d:3f:c3:0a:e1:5b:65:d4:6f:f5:03:
57:be:17:de:38:9e:28:c9:cc:9b:3f:24:31:9a:56:
85:78:71:47:71:1e:34:c3:ac:10:da:7e:cf:42:e7:
1c:7d:23:7b:d4:42:9a:31:c8:20:b8:ad:aa:bf:d1:
95:c6:66:b9:f8:b0:c2:46:c1:fd:65:39:40:67:b1:
9f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:57:B5:F0:C7:0D:76:A1:B5:DD:3C:E1:BF:D2:2F:DB:44:85:BF:F8
X509v3 Authority Key Identifier:
keyid:43:C7:7B:47:36:36:81:37:8F:AC:E4:66:14:1D:54:CC:88:39:9C:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ff:6c:ed:64:d8:e2:a7:27:37:1d:eb:b2:a9:2e:1c:c4:b5:
19:92:06:6e:26:98:4a:b0:14:5b:a2:56:94:97:75:dd:8f:0c:
6c:34:15:6f:d4:3e:dc:62:c1:79:0e:d1:1c:38:cf:98:23:b8:
9e:e6:07:01:b0:4e:75:89:e5:8a:21:46:3a:f1:da:f4:86:8f:
42:c9:a0:dd:c3:9a:62:44:9e:1d:8b:d0:05:bb:9b:6f:35:ef:
f4:e2:f5:b2:79:bf:46:04:ab:1e:c3:ea:7d:63:00:bc:50:db:
7f:70:5b:78:34:0f:24:59:59:23:5f:61:6d:44:27:53:8f:cf:
9e:49:44:97:0a:5c:73:ab:3a:33:84:49:32:2c:ae:a3:5e:d0:
13:2f:68:2b:41:96:3a:4f:16:04:3a:f8:ac:43:f8:82:5a:66:
3b:d7:58:66:c1:b1:43:59:1e:f3:8c:29:23:cc:1d:51:c9:e4:
e4:79:05:b8:de:e0:90:a2:62:12:61:63:d6:b3:08:49:6f:89:
79:e8:c3:c9:0e:c8:69:5d:39:20:1d:54:1a:d1:2d:74:2f:f5:
ab:90:6d:4f:24:d1:97:65:0c:2c:33:e8:4b:61:ec:31:2b:3a:
a5:22:ae:bf:7a:26:cf:28:73:62:87:77:df:f0:d7:d7:9b:3a:
77:64:aa:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+S7WnawrHuZZ0FN89HMUkGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYzc3YjQ3MzYzNjgxMzc4ZmFjZTQ2NjE0MWQ1NGNjODgz
OTljZjUwHhcNMjYwNzI0MDcwMTAwWhcNMjYwNzI1MDcwMTAwWjAzMTEwLwYDVQQD
Eyg0OTU3YjVmMGM3MGQ3NmExYjVkZDNjZTFiZmQyMmZkYjQ0ODViZmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqynYGvU9IHQHolpYByK5WHU42mIX
IW7f9hsp6J1yOjdq7zq9+eFE8XAuFhgky4b/2/B2AYphEFpYYj7hSVIm2cUhxFcr
sQG2Oak3qH3oSWPc9X7OpOkIPdP51UH3atXIBAby3c9bQn/GkkvxEmMKcjvP3zbw
z5SVPUj39hwzKkNshant6vo0sNIfdWwd1ezaLc9w3dKw1S0Wc78jddJoMfeQdst7
538kSD+RPhAW47d9+q2VhWKsjT/DCuFbZdRv9QNXvhfeOJ4oycybPyQxmlaFeHFH
cR40w6wQ2n7PQuccfSN71EKaMcgguK2qv9GVxma5+LDCRsH9ZTlAZ7GfBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFElXtfDHDXahtd084b/SL9tEhb/4MB8GA1UdIwQY
MBaAFEPHe0c2NoE3j6zkZhQdVMyIOZz1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUThkN1J6WTJnVGVQck9SbUZCMVV6SWc1blBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8wMTgwOWItNDJkZC00MTM2LTk2YjEt
MWZkMTBkOGUwNzVmLzEvUThkN1J6WTJnVGVQck9SbUZCMVV6SWc1blBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8wMTgwOWItNDJkZC00MTM2LTk2YjEtMWZkMTBkOGUwNzVm
LzEvUThkN1J6WTJnVGVQck9SbUZCMVV6SWc1blBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYv9s7WTY
4qcnNx3rsqkuHMS1GZIGbiaYSrAUW6JWlJd13Y8MbDQVb9Q+3GLBeQ7RHDjPmCO4
nuYHAbBOdYnliiFGOvHa9IaPQsmg3cOaYkSeHYvQBbubbzXv9OL1snm/RgSrHsPq
fWMAvFDbf3BbeDQPJFlZI19hbUQnU4/PnklElwpcc6s6M4RJMiyuo17QEy9oK0GW
Ok8WBDr4rEP4glpmO9dYZsGxQ1ke84wpI8wdUcnk5HkFuN7gkKJiEmFj1rMISW+J
eejDyQ7IaV05IB1UGtEtdC/1q5BtTyTRl2UMLDPoS2HsMSs6pSKuv3omzyhzYod3
3/DX15s6d2Sqow==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:55:49 2026 by rpki-client