Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
File: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft (raw, json)
Hash identifier: 4NPB86xo8gXnO9ufs/N11IztGrR7WdiuBN5mBbo8NXk=
Subject key identifier: D7:92:43:52:4A:B1:A2:C0:04:6D:3A:90:D7:E1:B4:FF:5F:CC:78:2F
Authority key identifier: 43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
Certificate issuer: /CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Certificate serial: 019FA9E275510274BD8F3894038BDA40C99A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
Manifest number: 0EBA
Signing time: Tue 28 Jul 2026 18:00:18 +0000
Manifest this update: Tue 28 Jul 2026 18:00:18 +0000
Manifest next update: Wed 29 Jul 2026 18:00:18 +0000
Files and hashes: 1: ICnXf_-P4YXpOb6ZjyXTZ_msN-k.roa (hash: 3D4zEGy/FsPIqxHMTFOVIKU0MUectvNEvVPQNjn9vUM=)
2: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl (hash: rDus9WdGE1XlULDj6MR1LZ9POCgQVOc4ImOMQa6furI=)
3: uIHF2AQ7vp5Pre5Cme0Crtl9d0U.roa (hash: ubz0GfoUcPQy67DfcRHCrIrq2GX41LDxGEaEZ6xFYHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:75:51:02:74:bd:8f:38:94:03:8b:da:40:c9:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Validity
Not Before: Jul 28 18:00:18 2026 GMT
Not After : Jul 29 18:00:18 2026 GMT
Subject: CN=d79243524ab1a2c0046d3a90d7e1b4ff5fcc782f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:de:62:3c:b2:6b:a3:2d:f2:dd:dd:2d:b7:c0:
52:b6:19:a5:d8:5b:ef:c2:f1:5d:d5:cf:77:83:49:
9d:55:8a:79:dc:ce:91:90:87:9c:3d:a5:b7:09:fc:
e6:61:bf:7b:d0:8c:bb:6c:e2:e5:db:f0:17:79:87:
30:a0:5a:59:db:5c:88:36:e9:5b:9e:9c:fa:bb:af:
ac:be:ab:72:aa:61:11:ed:09:b5:28:06:71:99:af:
51:ca:51:06:d2:a4:07:9e:52:da:17:59:9b:d0:b0:
f8:81:53:30:39:17:73:b9:7d:3c:eb:33:db:4a:2e:
4e:70:c8:7a:66:6b:a8:5f:1e:01:d2:64:0b:e1:94:
9a:a8:54:6a:de:aa:6f:6d:4a:93:04:71:a6:9c:ea:
cf:df:73:1f:da:6a:ec:bb:f7:aa:9c:ad:cc:2e:da:
04:8b:ea:5d:2a:25:ae:aa:a4:46:cb:a8:ad:ba:45:
3c:bc:05:58:0b:37:45:f4:f5:5f:5d:00:66:e5:a4:
06:30:85:14:bf:49:a8:a4:91:01:e4:13:97:2e:df:
6c:3f:4f:9c:e0:0f:ca:a9:0a:c7:d6:0e:26:bb:7a:
c0:15:b0:3f:6b:a3:21:19:f5:ce:5d:f6:56:74:15:
0c:ce:85:27:e6:af:b1:41:aa:62:fc:e5:31:1e:78:
dc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:92:43:52:4A:B1:A2:C0:04:6D:3A:90:D7:E1:B4:FF:5F:CC:78:2F
X509v3 Authority Key Identifier:
keyid:43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b9:0e:fc:1a:17:d8:67:a5:c7:4c:f4:14:36:68:c1:c2:bf:
bc:d2:16:f6:78:b5:18:b6:ad:50:66:d7:33:fa:78:6b:ef:fd:
d6:9f:a0:85:e2:90:7d:f8:ff:4e:b8:34:59:b4:84:c7:4d:2b:
f2:f6:26:d1:6d:b9:c0:39:dc:3d:98:71:29:2d:63:34:44:af:
ff:14:63:e9:61:94:8a:bf:94:fc:8c:b8:a0:4d:0f:50:47:b9:
6d:93:5c:9f:11:3e:ad:6f:52:07:65:d7:f6:99:c7:01:d3:bc:
72:83:ac:13:dc:d8:bf:f4:15:8e:34:cc:16:88:1a:60:44:ef:
e6:68:4e:bf:d9:5e:a8:d4:8c:6d:48:fc:a7:98:b9:1a:6b:92:
19:8f:5b:57:9a:1e:23:af:22:80:36:c8:df:c5:27:5d:cb:66:
ca:fd:3f:71:93:c2:20:91:1d:8f:63:5d:4a:67:8d:87:7e:a1:
f0:46:22:b0:9a:e4:af:f6:ec:dc:6f:7b:6d:26:d4:07:a7:92:
e0:25:45:79:71:be:e6:a1:5f:7d:37:88:11:54:57:40:5b:27:
ae:dc:93:74:12:a5:3c:e1:53:f7:91:0b:d6:27:a8:01:78:75:
27:0d:00:a0:80:bd:a5:70:8c:1c:ef:13:d8:5f:f6:f6:94:a8:
24:01:51:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:10:36 2026 by rpki-client