Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
File: Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft (raw, json)
Hash identifier: ih7zL7ioU7TzdVJ3+J3j7oeqEmNTJhuSQ9lhjkUuPt4=
Subject key identifier: 35:10:CD:3E:4C:98:52:F9:0D:3A:A4:E8:9D:ED:8C:0C:65:01:D6:DD
Authority key identifier: 43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44
Certificate issuer: /CN=430e4026ca964cf3512940b26b11e64871c47944
Certificate serial: 019FACE46677575D642275A07F78843FE21A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
Manifest number: 1920
Signing time: Wed 29 Jul 2026 08:01:17 +0000
Manifest this update: Wed 29 Jul 2026 08:01:17 +0000
Manifest next update: Thu 30 Jul 2026 08:01:17 +0000
Files and hashes: 1: 6yATERdiX2wk0GFwUGUYwsoJuDI.roa (hash: KtrtZMXlX/Ho5Lrtg2Wv7jNJ8tmVGjU+3M5mJcyVobY=)
2: Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl (hash: csyrrNK/1Ajr+yDx7L867QgHC6msB0DoVjZdTUDc+Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e4:66:77:57:5d:64:22:75:a0:7f:78:84:3f:e2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430e4026ca964cf3512940b26b11e64871c47944
Validity
Not Before: Jul 29 08:01:17 2026 GMT
Not After : Jul 30 08:01:17 2026 GMT
Subject: CN=3510cd3e4c9852f90d3aa4e89ded8c0c6501d6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1c:57:5d:49:56:4d:69:ac:1e:d8:b2:ff:61:
95:0d:54:07:eb:79:64:71:1e:3c:99:6e:57:27:a2:
1d:23:fe:7a:5a:a3:d4:4a:e9:97:28:a5:1f:1a:da:
72:b1:68:62:66:c0:b2:43:cb:e0:fa:63:aa:dd:15:
11:57:d7:46:3b:fb:e1:91:26:5a:ea:c2:91:44:8f:
25:ae:23:04:20:88:c6:68:da:bd:f1:1e:04:47:01:
64:4f:39:99:82:f6:31:73:44:b8:cf:70:0a:11:92:
b6:bb:13:46:24:b4:88:5b:86:27:e4:e6:f6:e3:db:
ef:ab:43:cd:ae:c9:cb:e7:26:94:b1:9a:56:f9:fa:
2b:20:a3:a5:bf:0d:51:bd:86:be:5a:d4:f9:17:b2:
15:be:62:9e:92:48:1d:5a:c2:3b:0a:42:83:80:48:
b0:e8:51:3a:0b:28:5c:ea:8d:c8:c3:b6:fa:f2:a1:
5b:82:ed:ed:4b:9f:d8:fd:22:ad:1d:ed:e9:e2:6f:
c1:5e:8e:84:85:dd:8e:1c:cf:0d:b4:cc:ca:68:24:
60:92:28:f9:00:02:12:00:f2:1b:2c:46:7a:0b:84:
bc:a2:a3:e1:22:cf:dc:a4:a2:f1:e1:0c:c2:e3:74:
a3:d3:1c:c6:a7:e5:c6:0c:97:e4:b8:de:5d:32:00:
d9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:10:CD:3E:4C:98:52:F9:0D:3A:A4:E8:9D:ED:8C:0C:65:01:D6:DD
X509v3 Authority Key Identifier:
keyid:43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a8:6c:ae:66:4b:8e:55:eb:22:14:c7:69:7f:ed:77:36:7e:
2c:e5:24:94:66:be:71:43:40:65:45:cf:c6:25:80:9f:ee:28:
f4:9c:30:e6:11:d7:a4:88:f4:6f:df:f6:10:55:3a:71:c0:76:
01:d9:00:ad:92:ef:60:41:42:71:5a:db:8b:a4:21:ee:e3:e6:
69:a3:5c:9d:83:e6:f3:b5:7d:e0:1c:c6:a3:1c:4b:d8:15:d7:
2e:b1:bd:d9:4a:3b:9b:18:51:f8:eb:f5:50:45:53:0c:23:e8:
13:37:fd:69:79:87:3e:30:f8:5a:8b:54:02:d0:db:16:0d:b5:
9b:42:ae:61:7d:40:9a:e9:f9:82:98:3c:e6:ec:fa:d4:75:64:
5c:8d:4f:c2:6a:65:34:00:cb:78:54:b0:09:a1:16:db:30:0c:
1c:db:d5:1f:5c:36:85:bd:a9:1f:21:5f:9b:e9:4a:74:bb:30:
11:6e:75:ba:31:c1:05:29:57:65:4d:41:3e:f4:c9:bf:70:ce:
8c:2e:8e:85:1b:d0:38:ec:44:f5:84:bf:dd:12:d5:92:f3:35:
e1:ca:cb:e5:9a:8b:b3:bf:e9:8e:90:9c:19:45:1c:6b:7b:b2:
12:c4:39:c8:83:d4:8b:02:4c:67:7b:cd:e0:cf:27:db:51:8a:
ba:e3:41:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:02:58 2026 by rpki-client