Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
File: qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft (raw, json)
Hash identifier: HvhweNfxKpggGK4fAJviBZ3nAqm4ZqlV8WG5oNzoT7k=
Subject key identifier: C3:F4:43:F3:F8:7C:B1:8A:05:F4:A2:CE:AA:EF:6A:E2:A9:9B:DE:17
Authority key identifier: A9:BE:16:CE:7D:B3:BE:69:05:B1:AB:EF:8B:E2:1A:23:19:B0:E4:3E
Certificate issuer: /CN=a9be16ce7db3be6905b1abef8be21a2319b0e43e
Certificate serial: 019FAAF5D1793736646ADA99A4FBF3559200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 23:01:04 +0000
Manifest this update: Tue 28 Jul 2026 23:01:04 +0000
Manifest next update: Wed 29 Jul 2026 23:01:04 +0000
Files and hashes: 1: blLvX2-SqKRxgzfg9csWt9Te5CU.roa (hash: Nyn58GOogqZkbGAVvyp/qEbfXu/9YSuSkYbo5ZUxKIg=)
2: qb4Wzn2zvmkFsavvi-IaIxmw5D4.crl (hash: fRWeI+fm5kHn/QZW/Ks5j72O8CxTC40RrMzoQO7vN84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:d1:79:37:36:64:6a:da:99:a4:fb:f3:55:92:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9be16ce7db3be6905b1abef8be21a2319b0e43e
Validity
Not Before: Jul 28 23:01:04 2026 GMT
Not After : Jul 29 23:01:04 2026 GMT
Subject: CN=c3f443f3f87cb18a05f4a2ceaaef6ae2a99bde17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3d:da:25:c6:aa:dd:b6:1a:88:23:b0:b0:82:
db:dc:97:f2:3b:b9:b7:3b:12:56:db:fe:ec:99:96:
e2:7f:9b:fb:b9:8e:fb:8d:23:de:d3:4e:8d:6a:fc:
9e:fa:96:cb:9e:56:ec:23:55:15:2b:27:d1:79:ff:
e1:73:55:39:f3:b4:5e:07:32:92:19:fc:9a:81:44:
31:47:7d:8e:24:97:14:48:3b:3f:49:fb:69:37:35:
f9:d6:a4:f5:a9:2c:5c:50:b5:97:2f:de:cd:e2:ff:
84:68:8b:2c:3b:81:ab:f6:51:48:e4:df:8f:c3:d1:
6b:fd:d9:12:54:7d:76:3b:9a:f9:46:5d:c7:85:83:
13:66:98:9c:51:6b:44:13:4d:12:2f:da:3d:91:58:
d2:c1:6c:9d:3e:2a:cf:3c:fe:c9:0c:ce:fd:47:51:
31:d8:42:94:01:ab:11:0d:a0:9f:8f:9e:c5:61:70:
e0:d6:cf:00:d3:24:f1:0e:04:60:28:ec:78:f5:1e:
f4:13:de:0c:6b:25:ad:e4:b7:ad:ce:53:42:1a:0b:
f8:5a:a0:9f:5a:5f:2f:20:43:14:c0:49:36:d7:b2:
43:52:c7:61:8a:e7:d6:29:5b:ae:49:95:31:c7:94:
0f:29:73:53:00:ac:5f:ae:08:f2:32:47:24:ac:32:
32:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F4:43:F3:F8:7C:B1:8A:05:F4:A2:CE:AA:EF:6A:E2:A9:9B:DE:17
X509v3 Authority Key Identifier:
keyid:A9:BE:16:CE:7D:B3:BE:69:05:B1:AB:EF:8B:E2:1A:23:19:B0:E4:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ed:31:7e:b8:a4:10:d2:b9:7d:ce:91:19:dc:ea:d9:6f:7a:
33:91:44:af:3a:80:67:56:67:94:ef:0d:44:8a:dc:48:4a:a5:
0d:a4:db:ee:78:44:ca:b8:e3:e8:a8:2f:97:00:1d:80:2c:6b:
77:70:64:9f:e0:ff:b5:96:f1:a9:99:64:9b:0c:34:5f:49:a3:
01:43:13:7d:80:94:84:7b:3f:ae:95:f8:b1:90:44:4a:e3:1f:
3c:63:03:00:8a:b3:18:4c:c8:9f:aa:d4:02:8d:59:9f:84:bd:
34:23:dc:cc:b6:eb:8e:7c:7e:14:11:ad:87:8a:42:ff:aa:ff:
c4:fd:19:be:13:30:04:69:cb:74:f5:46:78:d1:d9:d1:21:58:
60:0d:c7:46:7b:0b:ed:27:70:c2:b5:86:ac:20:b4:33:42:07:
cf:7c:d7:38:22:6c:07:98:99:92:db:5c:15:27:8b:ff:49:75:
5d:4a:3d:f9:94:2a:14:5e:59:62:c0:56:29:35:06:b2:b0:ae:
3f:b2:e8:58:46:2e:f3:65:10:14:c0:fe:d9:d5:a4:b9:a7:cb:
35:fb:34:3b:98:e8:d0:a8:8e:dc:c3:03:6f:a8:9c:85:ee:22:
99:d6:bb:c0:83:44:5b:fa:88:d6:cf:b3:8d:0e:10:b5:df:d7:
63:e3:fb:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:29:04 2026 by rpki-client