Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
File: Q3DTtpmsWu_y24ily8HJ2NCccjE.mft (raw, json)
Hash identifier: Oegbz4+EFG758zdSqsiBCLHWwXU3Yf8/LJl6rDbOvkY=
Subject key identifier: 24:08:2E:17:AD:98:F3:3D:A7:55:63:10:0C:B6:EF:3A:59:F2:C2:1D
Authority key identifier: 43:70:D3:B6:99:AC:5A:EF:F2:DB:88:A5:CB:C1:C9:D8:D0:9C:72:31
Certificate issuer: /CN=4370d3b699ac5aeff2db88a5cbc1c9d8d09c7231
Certificate serial: 019F93241074A4E0DC5115B140BC5C70C18C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3DTtpmsWu_y24ily8HJ2NCccjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
Manifest number: 033E
Signing time: Fri 24 Jul 2026 08:00:41 +0000
Manifest this update: Fri 24 Jul 2026 08:00:41 +0000
Manifest next update: Sat 25 Jul 2026 08:00:41 +0000
Files and hashes: 1: KfqeRMQbo9-WE5c784VU-n3hC_I.asa (hash: l9etNGwbPXfHNmZoYUkg6QSJpv1oeeKxarGjMBX/E4Y=)
2: Q3DTtpmsWu_y24ily8HJ2NCccjE.crl (hash: u1rb3zBS8jGFpYY1JZV52Y4Nb5PLs8Jf1+ZyPpLwz48=)
3: UjLpUOdjwMQzw9SBpAhHgAxfg7U.roa (hash: 7CpWMJq8SzwdLsA8hN+1xJucf/Pqf3jlz9jzHMKTOX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3DTtpmsWu_y24ily8HJ2NCccjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:10:74:a4:e0:dc:51:15:b1:40:bc:5c:70:c1:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4370d3b699ac5aeff2db88a5cbc1c9d8d09c7231
Validity
Not Before: Jul 24 08:00:41 2026 GMT
Not After : Jul 25 08:00:41 2026 GMT
Subject: CN=24082e17ad98f33da75563100cb6ef3a59f2c21d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:26:76:16:68:91:de:3e:34:ce:42:df:e7:a9:
d9:39:75:5f:0d:d8:ef:62:7b:18:14:21:4b:94:23:
7a:fb:c3:48:3c:db:04:44:19:fb:9a:ed:4b:9d:ab:
67:78:a5:09:59:74:82:84:98:85:47:00:b8:16:e5:
01:6a:76:90:31:34:2f:47:0f:20:50:82:2d:b1:ea:
aa:33:b8:5b:d1:36:54:c7:17:55:5b:57:a0:60:0c:
83:a7:22:ca:60:eb:6c:a7:a6:14:d5:04:59:2c:9d:
cc:fd:3e:71:14:7f:06:01:19:5a:56:c8:87:95:f1:
c7:01:f4:15:11:67:a2:ff:73:df:06:da:01:7c:9e:
46:6a:e3:1d:4d:b5:be:eb:31:8a:8d:2e:7f:1c:63:
da:04:39:da:d1:1c:bd:15:f6:3e:af:3e:11:93:08:
d1:d9:b8:f1:da:a9:67:b6:97:d5:a1:ae:53:8d:f0:
7c:34:0d:22:19:8b:92:dc:60:db:78:fe:0e:de:d6:
d5:79:44:00:39:17:93:e1:9b:6b:f1:c6:b7:9f:3d:
05:24:98:3e:89:7c:1f:93:a3:a2:ea:71:8b:25:a8:
6b:bc:29:dd:cf:3b:dd:75:5a:59:32:28:99:fd:85:
c9:01:ba:8f:69:1a:17:0c:05:57:e0:11:c0:68:62:
e5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:08:2E:17:AD:98:F3:3D:A7:55:63:10:0C:B6:EF:3A:59:F2:C2:1D
X509v3 Authority Key Identifier:
keyid:43:70:D3:B6:99:AC:5A:EF:F2:DB:88:A5:CB:C1:C9:D8:D0:9C:72:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3DTtpmsWu_y24ily8HJ2NCccjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:65:7f:3b:02:09:d5:7e:cc:f5:4b:b5:8e:08:0b:b7:f6:e0:
69:06:cc:0b:0b:64:30:d1:fb:97:d2:92:37:bc:99:51:31:03:
44:82:7e:3a:da:90:52:52:bd:65:da:a0:f3:82:24:0b:95:14:
2a:cf:9d:50:72:9a:dd:7c:c7:2b:0b:b3:09:52:f9:a4:da:40:
6d:e9:77:7c:57:0d:77:8f:d4:d4:f9:bc:9e:25:70:76:f7:9b:
76:5f:90:90:05:2a:50:96:09:ca:21:60:f3:8b:cf:33:c3:26:
47:73:24:a5:34:2d:f8:2f:f8:25:e5:8f:fb:9f:f9:d3:fa:6b:
38:fd:77:b1:f0:2e:bd:54:6f:4f:0c:01:50:be:ea:1e:ec:db:
bb:a7:86:98:23:49:94:76:bf:cf:34:ce:5d:d1:a3:49:cf:3a:
a8:2d:80:cb:d0:f4:c5:cf:b8:6a:a6:a0:66:e3:a0:2d:26:d7:
05:68:8e:3c:3b:f3:ee:7a:bb:27:d9:d5:88:fe:bd:c5:f4:4f:
65:16:95:bf:43:e3:56:e4:b0:e8:e1:62:26:e0:65:f2:23:e4:
58:2e:ee:2f:58:0b:49:8f:cc:e7:28:ac:c1:9a:4a:76:9a:3c:
44:4a:6b:3c:12:ad:54:41:a0:f1:eb:06:d2:78:a4:98:e4:d8:
68:ae:36:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:50:38 2026 by rpki-client