Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
File: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft (raw, json)
Hash identifier: EBkdr+x3Ydzm8LHGapN3pKCXAK/nEW5w3UIwDLSJeg8=
Subject key identifier: C4:D5:28:DB:86:D3:57:1F:67:2E:12:09:73:AE:BC:9C:B3:CD:4C:B1
Authority key identifier: 43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
Certificate issuer: /CN=43a438813750133e55001bf89670a0db3ae5be1f
Certificate serial: 019FACAD40331914844D728B2F337785D8DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
Manifest number: 19D7
Signing time: Wed 29 Jul 2026 07:01:03 +0000
Manifest this update: Wed 29 Jul 2026 07:01:03 +0000
Manifest next update: Thu 30 Jul 2026 07:01:03 +0000
Files and hashes: 1: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl (hash: ZSlPqW3WRp3kzwJ9fi5y1a1VRxPE8XHv00Fjvu4X+dU=)
2: TooDCGrMmE8TWOWnC74K3nWuV3A.roa (hash: GIzJZl3HOD2NAFRpAxSwsyFue5zuRGFN1EKt60XvdLE=)
3: _Fbs2myjlyXM3gZy6ijAia4ZHT4.roa (hash: 8ZiAikGkRwLzcArbFm/2YKSLA5m5mnQdWj1FO5Wjvcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ad:40:33:19:14:84:4d:72:8b:2f:33:77:85:d8:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a438813750133e55001bf89670a0db3ae5be1f
Validity
Not Before: Jul 29 07:01:03 2026 GMT
Not After : Jul 30 07:01:03 2026 GMT
Subject: CN=c4d528db86d3571f672e120973aebc9cb3cd4cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1c:19:79:93:a9:b3:da:5a:e4:35:2e:a2:00:
89:96:15:e3:50:dd:ea:e7:45:c1:36:9e:e7:8b:85:
ec:b4:c1:6a:e4:68:dc:4d:9a:ae:19:c5:03:5d:2a:
14:7e:44:92:94:75:d1:ec:10:fb:90:eb:99:be:30:
c4:c6:6c:13:23:55:62:81:86:bb:45:4c:c4:4a:e4:
8c:a5:98:fb:7c:67:35:73:e1:9c:87:73:fa:1a:11:
5d:b2:96:2b:81:66:35:d0:b4:96:5f:10:1b:9e:d1:
2f:46:b2:12:de:4f:2a:d3:93:1e:db:78:31:58:44:
5f:8c:c9:da:10:7d:a1:20:0f:49:75:8d:af:00:34:
ad:99:10:f9:6f:10:45:08:cd:d7:7a:5e:2c:6e:6e:
8a:a5:d6:6e:c4:21:a4:fa:72:56:fc:a5:52:75:27:
4a:5c:cf:ed:d6:19:31:b9:6c:b7:4f:7d:3c:98:3c:
f2:71:9c:27:8d:c3:c5:f1:f8:bb:ea:bc:55:22:18:
67:38:5c:d1:e9:03:4d:60:58:f6:8a:e6:62:3d:c3:
79:ac:80:80:cb:59:71:89:7a:cd:3b:95:38:34:e0:
53:5a:c0:98:e2:78:00:98:c0:49:58:09:ff:17:f5:
52:56:f1:c2:22:ae:e4:58:f1:e0:a7:68:27:ec:2e:
c8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D5:28:DB:86:D3:57:1F:67:2E:12:09:73:AE:BC:9C:B3:CD:4C:B1
X509v3 Authority Key Identifier:
keyid:43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:e2:9e:11:5a:ac:99:3a:33:1b:90:62:8a:93:e5:04:c2:4f:
a0:e0:0d:f1:26:b1:f2:e1:3b:d6:59:7e:6e:c0:9d:91:2f:71:
52:2d:d5:da:23:6d:78:d4:53:f8:6e:7f:8a:7d:69:d6:2a:3e:
80:4a:e8:dd:de:57:e7:50:3a:20:8a:ad:e0:1a:9d:c2:21:9f:
1e:5d:66:42:a4:db:e9:6e:36:3f:fc:58:fc:59:20:04:0c:da:
e2:63:a3:0a:19:ee:94:dd:17:8c:15:1b:d1:c1:7c:cc:e0:a3:
f6:36:6b:86:f9:6a:77:8f:5c:c9:70:ca:26:7e:94:ec:e2:42:
f9:c7:9c:ed:9f:26:b0:ce:b6:ed:5d:eb:78:6e:fa:7d:3a:dc:
2a:06:57:cd:41:da:49:57:73:2f:e1:2a:22:e0:58:b8:c2:bb:
66:4d:d5:c6:2b:c4:00:47:41:88:03:a3:ff:3f:3f:0a:e1:26:
11:b7:ca:34:6a:34:72:52:31:cc:ef:e6:15:85:15:df:01:10:
5a:67:98:ce:47:93:03:6e:b9:3d:bc:bc:94:02:97:de:f3:e8:
be:c2:24:ea:86:ad:fa:9b:f6:c4:74:12:77:51:a7:db:d1:ea:
27:93:bb:5d:f8:c6:cd:00:04:6f:22:05:b1:9b:3c:64:b7:85:
b8:67:0a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:10:37 2026 by rpki-client