Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
File: Q34DDURmGkwgHroD3kUrBLjn2eU.mft (raw, json)
Hash identifier: TX/2s34Qg/LLofA+9tQvL1znh7RZPQ8xY1abfXDFv04=
Subject key identifier: 28:DE:A9:F2:55:24:72:CD:05:CD:F2:6F:E3:1F:C7:39:22:68:3D:E9
Authority key identifier: 43:7E:03:0D:44:66:1A:4C:20:1E:BA:03:DE:45:2B:04:B8:E7:D9:E5
Certificate issuer: /CN=437e030d44661a4c201eba03de452b04b8e7d9e5
Certificate serial: 019FAA50DF981B274A3F4694CD00BAE06F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
Manifest number: 1919
Signing time: Tue 28 Jul 2026 20:00:54 +0000
Manifest this update: Tue 28 Jul 2026 20:00:54 +0000
Manifest next update: Wed 29 Jul 2026 20:00:54 +0000
Files and hashes: 1: DsEiDbdONX-wlDkZ_X-1g9jpCQg.roa (hash: OA/21KHBKcEIJSTWxQCJ0tkhioZ536fK4ENW6PbwjpI=)
2: Q34DDURmGkwgHroD3kUrBLjn2eU.crl (hash: W9hsFMxH5PYwSCZO726i4OsnHQm0m1BaSf3uZBlHKBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:df:98:1b:27:4a:3f:46:94:cd:00:ba:e0:6f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437e030d44661a4c201eba03de452b04b8e7d9e5
Validity
Not Before: Jul 28 20:00:54 2026 GMT
Not After : Jul 29 20:00:54 2026 GMT
Subject: CN=28dea9f2552472cd05cdf26fe31fc73922683de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:18:62:7a:04:85:f0:0f:97:3b:8a:12:24:5b:
8b:44:d3:b6:c9:7f:2c:b5:e5:bb:20:2d:b8:a0:7c:
8d:b5:1b:5e:11:66:3c:f1:df:d1:ad:21:92:b9:d2:
c5:9b:d8:15:66:6c:68:37:cf:48:de:7f:52:be:74:
c7:a3:de:28:0d:a1:73:8c:a2:50:5e:b3:2c:9a:62:
de:6c:bf:12:97:e0:42:94:f2:5d:6c:37:90:a8:d8:
3e:f0:75:f9:ca:86:6b:56:da:1b:b2:44:44:60:bd:
2d:91:20:0f:6d:9c:87:9f:30:4b:ac:43:c6:f5:3d:
57:c3:13:de:d1:fa:1f:42:f8:72:1e:35:f9:18:5e:
8e:00:57:8b:b3:c2:2a:15:fa:2d:11:b7:14:ea:60:
f1:1c:2b:3a:3d:34:82:92:70:18:eb:57:9e:f8:6e:
08:dc:20:2f:64:62:cb:96:55:65:55:b1:dc:3c:b9:
f9:df:66:51:5e:9f:fe:ee:e8:d8:75:1a:57:b6:fb:
f2:c8:d9:80:9d:63:91:63:a4:47:8c:a7:d2:d2:a2:
4a:e1:39:31:2c:8c:7b:a9:7b:00:71:5b:b6:5f:6e:
f5:31:34:24:95:49:89:0f:fc:9f:7c:33:6f:25:58:
93:d1:ec:30:f4:92:9c:41:3d:34:7a:39:93:fb:d7:
32:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DE:A9:F2:55:24:72:CD:05:CD:F2:6F:E3:1F:C7:39:22:68:3D:E9
X509v3 Authority Key Identifier:
keyid:43:7E:03:0D:44:66:1A:4C:20:1E:BA:03:DE:45:2B:04:B8:E7:D9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:5c:c2:8c:0b:dc:04:29:48:f2:02:18:56:4d:96:de:8a:65:
74:21:0d:cc:ea:d7:73:cc:71:83:6e:aa:4d:0f:29:a8:dd:1f:
a0:f6:11:8f:af:b9:c7:31:2e:b9:c0:55:59:f7:0d:9f:53:88:
cf:a3:fc:3d:86:82:3c:43:79:0f:c3:3f:72:e2:8e:04:23:de:
be:2d:12:d8:8d:d9:55:22:43:5e:08:29:0b:87:fc:42:41:ba:
14:6a:b6:be:07:be:ed:aa:ca:35:43:d9:75:ea:de:6a:9e:ec:
ac:6c:4a:c5:ad:7a:5b:15:81:45:84:5d:e7:b3:a2:df:93:72:
a4:9f:82:75:86:e0:03:84:31:5e:78:cd:6c:1a:d8:34:96:3b:
a9:96:ce:d3:03:1c:20:00:9d:bf:c5:9f:c2:46:07:b5:d7:54:
f2:a6:88:41:21:1c:49:6a:a9:6d:15:c0:b1:9a:59:fe:de:c5:
0f:3d:bb:06:ee:95:d8:54:88:7b:37:7d:28:e3:62:63:8b:c7:
aa:9a:90:24:67:d4:c7:e8:8b:61:8a:f9:49:75:03:fd:6d:5f:
5d:1e:5a:52:38:26:3c:8d:4b:09:42:9d:c3:bf:5e:c6:1b:b5:
15:66:ab:7e:b3:d8:99:c2:9b:c7:1d:b0:85:43:71:5a:bf:51:
56:d1:e8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:42:26 2026 by rpki-client