Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
File: QIVi4riWGyLinHYtbJkDMbo2Zm8.mft (raw, json)
Hash identifier: k7yAebwNomyt5hqpMUINCz0I6NPM9rojQNU9NYrxOpY=
Subject key identifier: B6:4E:F5:3B:40:E5:AE:6E:E4:94:29:A9:BF:07:44:DE:09:75:89:78
Authority key identifier: 40:85:62:E2:B8:96:1B:22:E2:9C:76:2D:6C:99:03:31:BA:36:66:6F
Certificate issuer: /CN=408562e2b8961b22e29c762d6c990331ba36666f
Certificate serial: 019FAB9A5AE96F72B43D98D436C2A07F4862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
Manifest number: 168D
Signing time: Wed 29 Jul 2026 02:00:47 +0000
Manifest this update: Wed 29 Jul 2026 02:00:47 +0000
Manifest next update: Thu 30 Jul 2026 02:00:47 +0000
Files and hashes: 1: QIVi4riWGyLinHYtbJkDMbo2Zm8.crl (hash: thU+NrCFAolbhhhpTYh0yzQ/Mfgo6nRsmZRPrDJVGo0=)
2: fJkHv2XKmgf3wdAAPhmkHMSymi8.roa (hash: moVcLbH6Jw6NJ/DI/9GEobHmBwmywaAnRhkWYEC9LnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:5a:e9:6f:72:b4:3d:98:d4:36:c2:a0:7f:48:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408562e2b8961b22e29c762d6c990331ba36666f
Validity
Not Before: Jul 29 02:00:47 2026 GMT
Not After : Jul 30 02:00:47 2026 GMT
Subject: CN=b64ef53b40e5ae6ee49429a9bf0744de09758978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:30:e2:ad:0e:26:5c:e9:7d:fd:3a:41:6b:53:
00:fc:6b:c7:3f:4c:05:30:1a:7e:dd:76:a8:88:5c:
9f:0d:f3:f6:9a:ac:d6:11:d0:2b:24:1e:fb:f3:50:
a0:05:25:81:81:6c:4b:2f:5b:0d:6d:5a:d0:db:e0:
42:cf:74:fa:9b:46:72:6b:3b:5a:12:16:b6:6f:19:
7e:7a:3e:7a:fe:fa:58:10:28:31:04:2c:7e:2b:f6:
9c:a3:a9:f5:b4:f3:6d:59:2c:c5:2a:17:a9:13:32:
cf:70:bb:62:3b:82:2f:13:0f:6f:7e:cf:9a:54:b8:
72:41:b1:30:72:20:1f:55:6d:2c:18:37:2f:83:a5:
12:dc:8d:86:a0:de:61:0b:cd:fc:0a:9b:ef:87:8f:
3d:51:a6:06:ce:d0:fd:85:60:bb:80:cc:a7:87:23:
af:83:07:dd:41:f6:ac:d7:13:5b:82:a7:ae:aa:ec:
a8:6e:3f:ad:52:b4:75:df:73:8e:6a:22:90:75:a9:
0b:b6:c4:f6:89:4c:2c:82:58:14:4c:19:11:ce:15:
97:c2:42:20:7e:f6:33:e4:d1:7c:06:55:ed:9d:5c:
68:e5:2e:a3:d4:d2:94:7c:4f:d0:88:5b:25:a3:03:
6b:04:ea:e5:ee:a5:b2:30:bb:da:5b:54:f8:44:59:
3e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4E:F5:3B:40:E5:AE:6E:E4:94:29:A9:BF:07:44:DE:09:75:89:78
X509v3 Authority Key Identifier:
keyid:40:85:62:E2:B8:96:1B:22:E2:9C:76:2D:6C:99:03:31:BA:36:66:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:84:6a:3d:ba:f5:dd:c2:b0:70:b8:86:77:8d:94:12:7f:69:
76:69:62:0d:0d:46:10:67:c1:d3:67:56:fd:b8:8f:63:eb:d2:
00:80:93:75:a3:ba:cd:87:58:06:c6:77:17:ca:86:d7:f8:5d:
25:53:12:95:d1:44:ef:f8:78:be:f9:07:3a:2f:e3:9f:da:a1:
7f:d6:6c:ca:8c:c4:50:ac:49:0e:9a:1b:e8:58:09:b0:6f:89:
06:f7:53:14:54:bc:62:b3:8c:33:19:85:4c:fc:77:2d:44:4e:
b3:f0:8f:b4:bf:61:f0:d7:56:ec:2c:fd:d6:f7:33:10:af:5a:
94:4a:47:a1:0b:75:ef:8d:7e:95:89:3a:ce:d1:69:1d:7e:22:
ed:01:b5:ac:a9:7a:cd:6c:fc:40:85:c6:4f:ac:c2:df:76:58:
9d:8a:20:fe:6a:08:37:9c:72:be:e5:0c:cd:52:2b:75:39:51:
ab:35:dc:16:54:e5:32:fe:0f:1b:46:9c:38:47:07:75:86:4b:
0c:59:a8:35:bd:30:b7:76:ff:41:ea:45:2f:20:28:f3:c5:11:
85:ac:7c:83:6d:52:8c:66:72:9e:3a:c4:40:a2:e0:de:d5:82:
45:78:70:f3:a8:b8:e4:4d:36:03:94:17:c6:a1:9d:f5:68:c8:
11:9d:4e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:02:48 2026 by rpki-client