Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
File: sQw889xTylScA-T19G2RzpC44HA.mft (raw, json)
Hash identifier: wdpns5qCE4tz66rZ1guDI1KkgFoKfVz+qHOAVPXGyn8=
Subject key identifier: 73:28:01:CB:0A:EA:12:2C:B8:18:0D:E2:88:65:9C:DF:65:F8:4D:50
Authority key identifier: B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
Certificate issuer: /CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Certificate serial: 019F93242B5F421357D50EAE67EC2DEBE0A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
Manifest number: 19DD
Signing time: Fri 24 Jul 2026 08:00:48 +0000
Manifest this update: Fri 24 Jul 2026 08:00:48 +0000
Manifest next update: Sat 25 Jul 2026 08:00:48 +0000
Files and hashes: 1: o40VleOLDva4l-Hlse3BxkX262M.roa (hash: vt1iL3MNmGtBJoVTbi5X0cqEnKhYSdktMc3RDciLR8w=)
2: sQw889xTylScA-T19G2RzpC44HA.crl (hash: IV/Z+CxVEiSSAzxk3WsZNj0VJWmspzB7UgNEhF8scmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:2b:5f:42:13:57:d5:0e:ae:67:ec:2d:eb:e0:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Validity
Not Before: Jul 24 08:00:48 2026 GMT
Not After : Jul 25 08:00:48 2026 GMT
Subject: CN=732801cb0aea122cb8180de288659cdf65f84d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8c:c6:b4:b0:8c:de:2d:a5:ad:f6:f4:09:7e:
0b:80:d1:92:75:62:5e:b2:a7:fc:c6:f2:29:c4:71:
fb:14:bf:6f:66:1e:1d:ef:e1:ad:1a:16:b0:4e:61:
08:3b:e2:48:58:ee:97:4b:10:e7:c8:37:95:15:94:
84:82:b1:6a:93:ec:49:3d:0d:bf:62:6f:93:85:a9:
18:58:3e:39:aa:41:b6:6f:c4:c6:c5:c5:e5:49:88:
72:2c:67:62:2e:a4:da:93:3e:44:d3:2e:8e:f8:f0:
d6:d3:ac:cb:b3:d6:2a:e9:0b:ca:e8:77:08:67:d5:
d5:53:7b:fd:dc:8b:fe:8e:40:19:e4:b1:c4:d5:d7:
42:73:76:08:c5:59:4c:51:f4:20:52:2a:fd:1b:f3:
cf:ba:ee:66:15:e4:34:6a:dd:aa:81:8b:da:d4:15:
60:97:db:10:1a:42:f5:82:1f:1d:90:2e:db:2e:75:
ae:8e:cc:c4:30:ff:92:d5:ed:f2:4c:f7:93:82:35:
80:e9:b3:61:e5:95:93:40:cf:d5:5d:2a:ec:bf:ce:
34:31:b7:72:45:50:8c:4d:17:bf:97:d6:c3:ba:58:
98:08:18:96:d5:ce:81:6f:b1:92:d1:cb:b4:33:ba:
2b:c1:98:22:b1:8f:4b:4d:33:75:12:6e:cd:f9:93:
c0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:28:01:CB:0A:EA:12:2C:B8:18:0D:E2:88:65:9C:DF:65:F8:4D:50
X509v3 Authority Key Identifier:
keyid:B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:25:6d:eb:17:6e:f9:17:35:7d:ce:db:b1:2a:c3:48:2a:6e:
01:c2:18:ba:e2:d3:88:38:79:05:05:71:65:32:a2:d7:ea:cf:
eb:cb:b2:9f:26:99:46:57:b9:77:5d:ae:2c:6d:36:92:18:6b:
6c:b0:00:2f:ac:f8:5e:c2:bb:0e:82:63:fb:f0:1d:e1:7f:22:
bb:13:8a:b7:36:21:86:01:e7:cc:38:10:90:9e:00:38:92:82:
8f:a1:42:8b:df:d6:60:54:93:c0:11:4c:84:a5:06:cf:88:dd:
6e:b6:e2:91:0d:cf:e4:30:d8:33:49:be:fc:01:51:d5:6c:d3:
88:90:0e:46:db:c2:e7:7a:b2:ae:01:c9:96:ca:d3:f3:b9:f0:
2c:35:5d:f0:b9:b2:1d:9a:1a:11:6e:9e:71:14:a4:63:0f:f7:
9e:c9:94:d4:ef:25:18:88:52:12:be:4c:e7:1a:6d:57:22:a3:
36:b6:b6:ea:50:ba:d2:f0:f2:7a:6f:f4:6e:08:55:6d:a3:37:
9c:94:86:54:d5:01:73:23:36:99:aa:fa:90:6f:36:3f:ee:9c:
ce:00:88:39:1f:34:70:98:26:9a:af:36:25:09:df:9c:92:3f:
48:79:af:ce:2e:92:c3:39:a7:86:69:45:8a:8d:cb:bf:df:9f:
b9:bb:ba:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:19:57 2026 by rpki-client