Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
File: QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft (raw, json)
Hash identifier: BkGmn2CtjrghKhjhwHEtXLdZAxN4LGGmRl1waEMDbbQ=
Subject key identifier: C2:EB:91:DD:C7:90:E5:9B:D2:B7:B0:E2:A9:82:41:46:A8:21:02:B9
Authority key identifier: 42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
Certificate issuer: /CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Certificate serial: 019FAA8833D9F2A1F101450CC41B5C60CB18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
Manifest number: 19D6
Signing time: Tue 28 Jul 2026 21:01:20 +0000
Manifest this update: Tue 28 Jul 2026 21:01:20 +0000
Manifest next update: Wed 29 Jul 2026 21:01:20 +0000
Files and hashes: 1: MQeTf0MYRPYw_402BYO3IY08ZTI.roa (hash: ubuWvtB27a2rNunPzQvBhMbVlyiCsPYMuMsDZ/GM8W0=)
2: QC24amafYIiFlBtdr2WUg2xACfs.roa (hash: Ng0ihtKKcM9kRDb9fajNLLNxzOWsbpbjqi/vEHQuY0M=)
3: QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl (hash: hCO29GPGc+7w3h6W0ddse/AR7S8o9gF9UF22c8G4BAI=)
4: sJsFgScidYmjw0Gax5q7KoaUiTs.roa (hash: eLBSlnZ6dXYnxuPFk8J5TGTFkRXIwmeZVoqCZXfPffQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:33:d9:f2:a1:f1:01:45:0c:c4:1b:5c:60:cb:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Validity
Not Before: Jul 28 21:01:20 2026 GMT
Not After : Jul 29 21:01:20 2026 GMT
Subject: CN=c2eb91ddc790e59bd2b7b0e2a9824146a82102b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:63:a3:98:12:15:72:84:12:8d:e8:f4:0c:bd:
fb:10:de:97:e0:d3:9d:b4:12:91:45:40:f4:67:96:
e2:34:60:97:87:77:98:71:22:a9:3f:f3:02:d1:ef:
a9:35:d2:92:cc:7b:4a:c4:cc:ec:de:53:7c:3a:bd:
a3:04:3c:03:1b:04:36:2b:85:63:2a:42:6d:8d:f2:
94:75:21:7a:2c:7b:bd:78:e9:8e:25:59:41:c7:90:
d7:3c:21:cd:eb:65:f7:21:08:67:c0:67:80:a6:f0:
78:ea:ba:6c:fe:5f:a9:ea:9c:ac:f4:54:ba:45:6e:
dc:d6:f9:bd:91:fa:86:a1:a6:ec:e0:fd:60:8d:de:
98:a0:57:49:dd:19:cc:b2:66:e0:ae:1e:e9:35:62:
9e:0f:56:17:ea:0e:79:a9:32:d8:55:b0:bd:bc:61:
3d:16:c5:4b:5c:fc:bb:15:8d:2e:25:3d:a7:5b:40:
7c:ad:1c:bb:db:d3:d8:bc:27:da:ae:c9:f9:17:84:
7e:e1:98:25:e8:85:3e:00:96:79:b8:2c:32:9d:c6:
08:cb:c0:2f:77:f0:4b:b9:a3:04:68:99:3c:05:93:
7c:7c:b8:10:d4:65:bc:2f:e4:0b:6f:8d:d6:ae:69:
27:99:5a:e6:0b:27:7f:22:8d:a2:2d:ec:97:b1:69:
1e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:EB:91:DD:C7:90:E5:9B:D2:B7:B0:E2:A9:82:41:46:A8:21:02:B9
X509v3 Authority Key Identifier:
keyid:42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:86:d0:f4:cf:4a:ab:4f:a9:77:9b:9c:aa:00:7d:3d:2f:2a:
d5:34:fe:6c:ac:f0:b8:5c:01:62:a9:58:e6:b5:67:e5:07:f9:
fc:80:18:d8:a9:43:e0:1c:b7:19:2c:42:dd:8f:7d:5c:be:3e:
24:6b:a1:c0:3d:a0:d4:a3:8a:f2:ab:56:55:84:1d:63:09:5d:
79:cc:c0:d6:34:7b:ca:11:73:de:ff:3f:a5:a8:a6:75:2a:bc:
26:00:1b:dd:7d:ce:61:83:14:a2:d1:aa:d9:83:55:1e:18:85:
e4:44:d2:e5:62:f0:0e:c7:26:38:b7:4e:5e:da:9e:7d:04:3e:
9a:30:93:8f:8c:6b:24:31:d9:f9:7f:f7:65:a8:93:e3:cb:27:
6f:11:fa:ad:e5:3e:3c:88:13:93:d2:5c:dd:e6:d9:18:81:dc:
0d:d2:15:d8:cd:1b:5c:78:0f:05:1a:f9:b9:f1:61:00:81:e6:
fb:c0:da:c6:ca:a7:72:a6:6a:fb:19:16:94:d2:5a:41:28:9f:
0d:cb:a4:15:73:eb:39:08:56:aa:da:70:76:dc:df:3b:d4:6b:
4b:f6:21:ef:05:14:a6:0a:e9:82:ad:80:87:86:fa:fb:b6:ad:
5c:f9:a2:37:f3:7a:5f:dd:b3:29:45:db:ba:8d:37:81:d4:a0:
1a:cf:54:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:42:34 2026 by rpki-client