Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
File: QsMDcZht9dVk7mcHRxe2agL_VxI.mft (raw, json)
Hash identifier: txe2VnQS7cjWuBOJinWKuDjFymVtJLPr4OcJj7p4UX4=
Subject key identifier: 22:CF:DF:AB:A1:E2:D6:EA:B2:0D:39:86:56:6A:E4:85:BB:64:9E:34
Authority key identifier: 42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12
Certificate issuer: /CN=42c30371986df5d564ee67074717b66a02ff5712
Certificate serial: 019FAB63A1FEFE02833CDC9AD63A2BC6B505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
Manifest number: 18C5
Signing time: Wed 29 Jul 2026 01:01:00 +0000
Manifest this update: Wed 29 Jul 2026 01:01:00 +0000
Manifest next update: Thu 30 Jul 2026 01:01:00 +0000
Files and hashes: 1: QsMDcZht9dVk7mcHRxe2agL_VxI.crl (hash: HPSMKMMCgeqJJWmPqXUgDBiYcR0N6Z+6nahHbVI2Xxg=)
2: kIdKfcVB8xoU-jL0GS61sHZEdFc.roa (hash: 0PfvIN3m+RMyfBShY3gPVZh53Z/48yCnaRs0eMSULZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:a1:fe:fe:02:83:3c:dc:9a:d6:3a:2b:c6:b5:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c30371986df5d564ee67074717b66a02ff5712
Validity
Not Before: Jul 29 01:01:00 2026 GMT
Not After : Jul 30 01:01:00 2026 GMT
Subject: CN=22cfdfaba1e2d6eab20d3986566ae485bb649e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:47:90:91:26:9a:3b:39:7e:bf:07:cf:08:b8:
f1:fd:ef:2d:93:f4:cd:10:35:74:39:d1:a3:5a:03:
5c:30:fa:1a:17:af:78:b5:1a:1f:dd:21:c7:a5:ca:
81:74:16:bc:6d:c1:8c:b5:51:bc:3f:4c:cd:a5:5e:
69:d6:0f:b8:62:1d:6c:72:f0:56:f1:ff:c9:49:35:
71:8c:6f:bf:b1:24:62:8b:15:42:7d:19:77:7f:60:
23:f1:bb:0b:2b:7b:d5:1d:cf:db:86:e0:81:12:b9:
09:65:f9:ad:6a:fd:30:a0:48:36:69:94:c5:46:ff:
c6:0a:6e:db:28:1a:7d:2a:da:b6:d9:c0:64:01:ca:
f2:62:de:16:72:ab:11:57:1e:31:8e:03:bc:f7:ad:
17:16:6d:1d:82:44:41:f9:61:be:a6:60:67:92:92:
aa:0c:1c:21:4d:e0:48:03:1a:88:f8:cd:e7:d4:07:
e9:6b:8b:14:c2:9e:8d:4f:31:17:b0:f2:56:26:1d:
77:04:30:06:77:15:b1:8b:37:f1:85:39:b5:9e:e5:
91:e0:6d:81:11:ce:22:8d:65:ba:a4:b1:f7:69:45:
38:56:3f:bd:a4:cf:64:d1:51:0c:5c:8e:2a:19:ce:
b5:57:c6:15:4f:e7:86:e9:ac:1a:78:fc:26:e2:05:
f4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CF:DF:AB:A1:E2:D6:EA:B2:0D:39:86:56:6A:E4:85:BB:64:9E:34
X509v3 Authority Key Identifier:
keyid:42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:bc:7c:5b:bf:6a:39:27:45:97:b4:c5:e6:36:76:22:1c:aa:
0f:8e:e1:4c:44:b6:d6:e7:85:bd:5a:72:da:56:79:da:c6:c6:
bb:e7:dc:d0:9a:bd:2d:f4:0c:16:8d:95:9a:9f:93:56:aa:99:
b9:46:55:56:77:19:75:0c:9a:f2:2b:3a:ae:69:ee:04:64:7d:
a1:4c:99:06:be:17:ba:f4:d9:29:40:f4:dc:a2:e6:87:45:ef:
49:3c:9e:f9:44:db:c0:e2:c6:a4:55:0e:d4:a9:f2:6e:f9:d5:
0b:eb:34:7b:7c:1c:19:86:49:a2:28:83:ff:1a:03:f1:3d:b1:
26:03:0a:77:fb:16:19:ce:c8:43:c4:3d:dd:b9:16:41:47:c6:
11:58:0b:7e:2c:7f:23:ef:21:52:9d:e0:b7:7f:60:24:99:46:
75:f3:92:ea:8c:70:5e:f8:cb:a4:2f:72:13:eb:15:3d:c7:83:
69:4b:8c:3f:7a:4a:fc:0b:e9:91:79:71:91:80:79:42:13:1c:
f7:0b:5e:49:8d:27:78:4b:fb:6d:a4:a9:3b:b1:79:ae:65:b7:
49:f7:bb:2c:8b:5e:ad:06:a4:03:22:d7:26:66:ea:d4:78:4b:
f6:c8:5a:35:48:58:f9:2e:9d:13:23:ae:94:57:ac:55:0a:89:
fd:61:59:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:41:22 2026 by rpki-client