Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
File: qT4365yxmDJdZWZzKJJY0o6587g.mft (raw, json)
Hash identifier: 23ZMo/v8zzqgMeXOTYZ/8EGqqCA1Q665QqLEYotbpxc=
Subject key identifier: 8E:A8:B8:46:1B:FA:52:84:AF:D8:43:BF:78:FB:75:C1:EF:27:77:D5
Authority key identifier: A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
Certificate issuer: /CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Certificate serial: 019FAD51942627D0BDA2A1228B975A29980A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
Manifest number: 196A
Signing time: Wed 29 Jul 2026 10:00:32 +0000
Manifest this update: Wed 29 Jul 2026 10:00:32 +0000
Manifest next update: Thu 30 Jul 2026 10:00:32 +0000
Files and hashes: 1: qT4365yxmDJdZWZzKJJY0o6587g.crl (hash: X5DHhu1FXlA394fYqThMRfqK/AGrTgQ/gAPxRT7oxfE=)
2: zkS0MtUwrQ_h652IdJT_LVppRJ4.roa (hash: SXClzu9ACUlrsWWr12HFWPaz9CkpTAyEDwuny+Lvk9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:51:94:26:27:d0:bd:a2:a1:22:8b:97:5a:29:98:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Validity
Not Before: Jul 29 10:00:32 2026 GMT
Not After : Jul 30 10:00:32 2026 GMT
Subject: CN=8ea8b8461bfa5284afd843bf78fb75c1ef2777d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2c:5b:00:7f:38:7c:47:ba:a3:f8:9c:23:01:
08:c4:55:79:dd:50:82:d4:42:34:1a:e3:ab:7a:3b:
fc:20:b0:34:03:54:67:6b:50:a3:2e:de:c5:1b:aa:
89:ec:1f:13:0d:9d:7c:d5:5e:06:9a:9c:71:68:34:
b7:81:cd:c8:0c:00:5d:ba:14:3c:a6:96:34:22:2f:
7d:3c:2c:4e:05:0c:c7:63:62:86:56:b5:74:ae:4b:
97:af:47:de:61:1c:88:b0:da:de:b9:93:c8:94:2f:
46:ea:52:a8:33:5e:82:71:fb:c2:20:02:43:13:05:
57:0e:1c:49:c8:f8:19:b6:d8:78:3f:e2:ef:23:80:
c9:45:94:5b:0d:ca:e2:30:fe:81:60:6f:52:9e:5f:
a0:90:a0:8d:a9:7f:07:32:9c:2c:75:dc:43:c6:d9:
56:39:de:51:0c:92:d2:57:07:b1:91:20:2f:d1:1b:
2f:80:68:ac:4f:4e:c7:1e:e3:15:77:f3:82:60:45:
59:af:03:1d:81:e5:22:23:4a:85:1c:94:cf:8a:4e:
e7:6d:1e:15:e8:68:82:a9:23:69:cd:69:32:ca:da:
37:5d:5d:51:d2:a9:ad:31:46:d1:a1:5c:c9:c6:d3:
8a:9f:8a:49:a4:fa:d8:ce:50:a1:74:11:f3:72:ce:
89:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A8:B8:46:1B:FA:52:84:AF:D8:43:BF:78:FB:75:C1:EF:27:77:D5
X509v3 Authority Key Identifier:
keyid:A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:f5:6f:34:fe:17:f0:2a:40:91:4b:72:de:d6:ca:a7:18:1c:
12:80:25:66:7d:0f:0a:dc:0b:e7:23:a2:a6:c1:d6:06:aa:3d:
a1:c2:8b:50:3d:85:a4:0c:e8:44:6a:ac:e5:78:73:ed:e7:32:
6c:ea:f1:e1:f2:29:ab:33:26:62:cc:24:d7:8a:96:c9:e8:19:
14:17:4f:8f:5f:b2:8d:01:d6:ff:94:78:bd:27:c0:e0:02:52:
68:59:5c:4a:d3:ab:99:13:1c:3b:a4:a0:fe:43:3c:78:fd:68:
15:5e:b3:fe:e9:79:5a:61:49:8c:28:fb:41:8c:52:5e:51:38:
4d:1c:59:e3:9c:08:4d:6d:7d:43:32:81:b8:15:8f:f4:c7:53:
35:cc:de:01:ed:d3:c7:34:b0:9f:b8:1d:88:07:4d:5f:4d:ed:
2e:4d:e8:6a:ef:9f:39:c6:24:7c:80:ec:a3:84:5a:d2:cb:20:
ad:fe:d3:68:a2:4c:b1:4b:30:eb:ee:84:ea:d4:b2:8e:c8:ca:
94:93:df:c5:32:28:56:81:01:06:ab:c7:1d:41:7a:f5:48:0b:
98:68:f9:09:d2:bd:77:21:b3:87:0e:cf:e2:05:b2:68:c3:66:
b4:df:fc:a2:8a:94:a1:27:39:bf:db:c6:1b:1a:45:24:8d:06:
02:8c:06:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:12:00 2026 by rpki-client