Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/679033-5b74-48b1-8d7f-cc153468e198/1/qwGK2gxETq14L6SLw3_Q-I__pXY.mft
File: qwGK2gxETq14L6SLw3_Q-I__pXY.mft (raw, json)
Hash identifier: tuzH0oePuwpzO4c0U+46hlIxDD8FbLxbvqHnl3B7Ifs=
Subject key identifier: 78:57:21:03:68:99:49:D4:E4:7F:72:86:62:54:60:8E:55:CF:7F:A6
Authority key identifier: AB:01:8A:DA:0C:44:4E:AD:78:2F:A4:8B:C3:7F:D0:F8:8F:FF:A5:76
Certificate issuer: /CN=ab018ada0c444ead782fa48bc37fd0f88fffa576
Certificate serial: 019FA82BD32A56BFDDC2BA26B5EEFA442D34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwGK2gxETq14L6SLw3_Q-I__pXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/679033-5b74-48b1-8d7f-cc153468e198/1/qwGK2gxETq14L6SLw3_Q-I__pXY.mft
Manifest number: 3B
Signing time: Tue 28 Jul 2026 10:01:12 +0000
Manifest this update: Tue 28 Jul 2026 10:01:12 +0000
Manifest next update: Wed 29 Jul 2026 10:01:12 +0000
Files and hashes: 1: CsfJ4beBzCwJq0xUUEN3KAIAoOg.roa (hash: H8thqU9uIxmfJJLIfwRRTbW1/O7obGLOypWNiqyA/nk=)
2: jfC085keId6PPgSN100bJz3yx4g.asa (hash: D12cwI3Gjb7k60jjJhIM7YbS9niQbydMpfO41Z+Y6mg=)
3: qwGK2gxETq14L6SLw3_Q-I__pXY.crl (hash: sM2we4KXoAuJfahJkCictkjhwgVlkYB3OFAbSkua7lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/679033-5b74-48b1-8d7f-cc153468e198/1/qwGK2gxETq14L6SLw3_Q-I__pXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/679033-5b74-48b1-8d7f-cc153468e198/1/qwGK2gxETq14L6SLw3_Q-I__pXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwGK2gxETq14L6SLw3_Q-I__pXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:d3:2a:56:bf:dd:c2:ba:26:b5:ee:fa:44:2d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab018ada0c444ead782fa48bc37fd0f88fffa576
Validity
Not Before: Jul 28 10:01:12 2026 GMT
Not After : Jul 29 10:01:12 2026 GMT
Subject: CN=78572103689949d4e47f72866254608e55cf7fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4f:7a:f1:85:66:0f:4b:9f:39:eb:1a:a5:ee:
cd:20:6e:35:9c:85:6e:fd:17:a2:b3:5f:f4:bd:00:
d3:75:57:f9:4c:e5:3b:af:e1:c4:54:7d:9f:e3:43:
ba:5c:48:a4:11:2e:5c:18:79:b6:ea:2b:9e:c8:50:
00:40:3f:88:9f:d1:46:7d:bf:25:58:7a:e8:a3:5d:
3e:f4:2f:bc:c6:1d:72:f8:a1:c4:40:fe:c0:fc:fc:
af:3f:d3:ff:ce:4a:ae:6a:b9:da:1d:10:a3:6f:33:
12:d3:4f:64:76:04:fc:04:16:13:78:75:1f:a5:a3:
ea:8b:2b:8a:9a:36:35:34:08:56:88:89:2a:46:77:
5f:fd:fb:e5:29:cb:7a:08:8a:d4:c8:f0:24:38:9c:
07:bc:01:4b:a4:40:33:26:59:7e:ab:6c:4d:cd:20:
7f:17:ce:b2:16:2b:61:7c:b3:c1:b0:fa:86:5d:55:
76:64:fe:4f:9b:47:1a:62:c1:d4:4c:3b:04:bc:15:
78:36:20:cd:5d:4c:85:f6:f2:d6:76:83:87:6b:e8:
53:53:e8:f7:bf:df:ba:ac:4d:18:37:a9:56:c0:be:
0e:b3:c8:9b:4c:56:df:b8:da:51:d6:92:9d:90:7c:
4e:5d:5c:fc:81:96:c1:01:6a:d1:fb:29:df:8a:7b:
0e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:57:21:03:68:99:49:D4:E4:7F:72:86:62:54:60:8E:55:CF:7F:A6
X509v3 Authority Key Identifier:
keyid:AB:01:8A:DA:0C:44:4E:AD:78:2F:A4:8B:C3:7F:D0:F8:8F:FF:A5:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwGK2gxETq14L6SLw3_Q-I__pXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/679033-5b74-48b1-8d7f-cc153468e198/1/qwGK2gxETq14L6SLw3_Q-I__pXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/679033-5b74-48b1-8d7f-cc153468e198/1/qwGK2gxETq14L6SLw3_Q-I__pXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a3:2e:b0:46:34:cb:44:de:66:3e:a0:c1:23:cd:de:39:24:
35:45:2a:47:e9:1c:55:47:ba:6d:ce:58:10:6c:03:63:27:b4:
49:86:1e:18:ab:9a:3c:a0:0f:e4:af:58:c7:66:9f:5c:a6:34:
05:cf:f9:63:75:e1:bc:29:db:26:b3:c9:a5:db:2d:f6:84:2c:
6a:a2:ec:6c:8d:a8:84:51:e0:da:2c:cd:93:24:72:be:a8:98:
7c:1b:06:8c:52:7c:fc:7d:85:7d:de:66:4d:dc:cd:9e:e7:9c:
3f:c9:3d:a0:1d:a3:f4:bd:d7:e0:78:3a:9b:0f:ec:78:14:74:
37:67:2e:0a:35:19:90:48:56:9a:2d:ca:2d:8c:31:55:37:20:
ef:2b:90:a4:c5:61:2d:84:6c:61:22:d0:17:1a:21:3e:3a:94:
94:97:2d:46:05:9f:6d:55:27:25:75:b9:47:3a:30:00:50:2a:
ef:1f:6f:70:a7:28:bb:64:27:50:03:7e:e6:10:19:3f:65:4f:
6c:4d:7b:8b:91:29:b2:cb:2c:2c:f4:e6:23:93:20:6d:45:d7:
36:f5:55:2e:f8:29:4b:02:43:5c:e5:9a:fc:43:c3:14:a6:3b:
1d:99:40:90:f7:2f:68:ec:b3:76:15:a1:1f:88:d7:6e:85:29:
e8:8d:8d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:33:15 2026 by rpki-client