Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
File: q9PisS9HkZgpT69gxuNqCht7_VQ.mft (raw, json)
Hash identifier: 7V1DlVabvxpuMRgs8wwMB6Pzt9uNxc1BfWmXrFcRyLU=
Subject key identifier: 9C:49:0B:46:C5:3E:60:D8:62:F1:08:FB:41:E6:72:2F:A1:AD:6C:15
Authority key identifier: AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54
Certificate issuer: /CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54
Certificate serial: 019FAA199D39167401F21DC8640225A7C702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 19:00:33 +0000
Manifest this update: Tue 28 Jul 2026 19:00:33 +0000
Manifest next update: Wed 29 Jul 2026 19:00:33 +0000
Files and hashes: 1: e6rt8CL4Tt23u6mnF3HX9gILLdw.roa (hash: 0VKltNMP0fVwSJth+lSOjHYVHCR+JxiPMU1thfnFsLc=)
2: q9PisS9HkZgpT69gxuNqCht7_VQ.crl (hash: OHP4+TsI04/kdLI8KcadVDEy5aMqG5FOBqpquz+PffY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:9d:39:16:74:01:f2:1d:c8:64:02:25:a7:c7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54
Validity
Not Before: Jul 28 19:00:33 2026 GMT
Not After : Jul 29 19:00:33 2026 GMT
Subject: CN=9c490b46c53e60d862f108fb41e6722fa1ad6c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b9:7a:f5:99:0f:10:36:71:1f:41:fd:d9:fb:
43:48:32:46:cd:85:94:cf:c5:ef:f6:7f:0f:66:0a:
8d:90:ea:5f:72:04:af:f4:26:e8:42:15:da:b1:62:
96:fc:a6:9f:5f:51:1b:70:50:9b:c3:fb:1a:7e:72:
df:0a:86:69:8e:ed:16:86:ae:7c:6f:31:ff:0c:8c:
27:50:6a:7a:64:c1:15:70:fa:b2:b6:3c:38:a1:4f:
34:a7:37:03:72:54:cb:a8:72:94:55:66:90:e5:03:
a7:9e:82:68:58:d6:25:42:8e:66:0c:e6:88:38:2f:
69:65:61:06:4f:24:7b:35:a3:06:ac:b8:dd:36:11:
99:f5:99:d7:8c:38:fa:97:2c:4b:b6:e4:84:a0:0f:
2a:e6:14:13:33:cc:32:1c:a4:e2:73:c9:36:f7:2d:
a8:d2:33:69:4c:fc:08:d6:00:97:c2:dd:5c:af:97:
bf:1b:b4:5f:c6:8b:d0:ed:f0:89:c9:50:c9:7e:22:
50:24:e2:67:d3:4a:a3:63:7c:f8:ef:3e:06:72:1e:
6e:a0:26:9e:e6:ea:d6:a4:4e:2f:f6:24:77:17:b7:
a8:f1:b1:e2:22:cf:28:03:fd:e4:01:95:20:78:1f:
a3:fd:95:c0:48:37:bf:9c:70:98:f4:69:c6:7c:bd:
a6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:49:0B:46:C5:3E:60:D8:62:F1:08:FB:41:E6:72:2F:A1:AD:6C:15
X509v3 Authority Key Identifier:
keyid:AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:51:52:f7:4d:78:f9:01:c8:46:e0:77:d5:c9:9f:04:3e:9b:
c4:0f:4c:4d:94:d8:7a:ad:77:3c:8e:f6:5c:56:a1:90:fd:e5:
0d:60:65:5a:20:49:42:54:f9:26:54:a4:6c:6c:a2:e2:dc:1d:
65:34:43:42:0c:e9:ac:db:99:f4:6f:55:2c:d7:a1:ba:4f:88:
6c:0e:00:b6:a7:a4:bc:7d:2f:1f:e5:e8:76:5f:11:7a:2e:33:
ff:59:81:35:2d:7c:bc:09:3e:30:66:2d:ad:1c:5c:e8:89:7c:
c0:da:45:0c:43:d2:5e:13:54:a7:af:1a:58:64:68:46:84:03:
76:c6:91:93:a8:c3:fb:2c:d3:2b:f7:fa:6a:75:37:2b:c8:03:
5b:d9:59:34:32:1d:88:5f:d4:5f:a7:cd:36:b8:62:7f:65:8a:
8f:23:0d:56:b5:dc:15:47:0b:1e:b2:c0:42:59:3d:87:40:c2:
b4:49:c1:dc:30:f5:58:97:a3:6f:4c:dd:f0:91:f8:a5:e4:12:
d2:f5:d6:ce:c1:a2:37:19:59:63:87:72:0a:37:f8:04:9a:d2:
7a:67:ab:6a:71:1e:3c:a6:d2:55:10:40:95:48:01:e6:60:f0:
3e:43:fa:05:11:6e:65:d4:95:90:60:6f:c8:2a:f8:b3:e7:29:
6c:7c:61:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:07:48 2026 by rpki-client