Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
File: Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft (raw, json)
Hash identifier: d0PJO9K/fV/TvRrZ8aHs/O8HjbGUuFLdm0J3RU5YM9Y=
Subject key identifier: E8:5E:15:23:58:87:8B:49:B4:15:26:47:8F:A6:66:D9:35:96:1F:1A
Authority key identifier: 42:4F:D1:A3:A0:25:8D:CC:A6:7F:C9:DD:DB:F4:E3:61:57:E6:A7:16
Certificate issuer: /CN=424fd1a3a0258dcca67fc9dddbf4e36157e6a716
Certificate serial: 019FAB2C34AA46A69E1B5CEB7CFE4D82BF89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
Manifest number: 19D4
Signing time: Wed 29 Jul 2026 00:00:28 +0000
Manifest this update: Wed 29 Jul 2026 00:00:28 +0000
Manifest next update: Thu 30 Jul 2026 00:00:28 +0000
Files and hashes: 1: NMKwSUUrM8k8eQKWjQoXhVr67Q0.roa (hash: CYXCafl1+25dso4rJFuju+aK/xutXRo5p4nK7eGdbTw=)
2: Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl (hash: 3FiqrDRS1T1k41Mi0+I3b9sck7Yudwz0lo+If+RvJEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:34:aa:46:a6:9e:1b:5c:eb:7c:fe:4d:82:bf:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424fd1a3a0258dcca67fc9dddbf4e36157e6a716
Validity
Not Before: Jul 29 00:00:28 2026 GMT
Not After : Jul 30 00:00:28 2026 GMT
Subject: CN=e85e152358878b49b41526478fa666d935961f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:09:46:66:39:09:05:a7:f9:26:7a:75:2f:cb:
4f:a6:14:c4:44:ce:8a:ed:a9:df:02:e6:53:04:8e:
b3:81:20:ba:51:95:df:c6:3e:bb:99:ef:88:e6:08:
a7:9d:27:b2:a0:c6:b7:1b:99:10:6f:8e:e6:ba:60:
a7:b7:d3:95:49:ed:52:0d:bb:04:b6:89:a3:22:28:
50:14:c9:de:0b:3e:61:78:7c:b5:58:d0:eb:92:ac:
2c:0e:44:62:2a:78:40:7a:bc:15:b8:46:57:77:70:
14:49:e8:dc:69:ec:b6:80:c3:00:37:c9:e0:17:d0:
fc:20:5e:1f:92:59:bc:ec:86:99:13:a3:41:f2:cd:
00:06:4b:44:46:9d:c6:24:f2:31:2d:0b:4f:f8:f8:
86:18:ab:33:1f:2d:62:97:33:e5:cd:f6:b8:fb:b7:
ad:bf:0a:79:47:c6:7b:66:05:a7:df:54:7b:ef:1f:
da:b5:67:88:23:14:ac:71:88:06:69:9d:76:72:96:
bb:48:95:9d:c2:9c:ed:e7:4e:d1:ff:e3:a7:8e:58:
8e:37:b2:06:0d:63:e8:c9:23:6f:fa:d8:96:f7:d8:
ce:92:62:c7:94:ce:ed:7a:fe:8d:ff:cf:52:e6:40:
ca:5a:9e:43:37:95:7f:d5:89:78:1f:12:93:8a:7b:
5a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5E:15:23:58:87:8B:49:B4:15:26:47:8F:A6:66:D9:35:96:1F:1A
X509v3 Authority Key Identifier:
keyid:42:4F:D1:A3:A0:25:8D:CC:A6:7F:C9:DD:DB:F4:E3:61:57:E6:A7:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:02:dd:73:00:77:04:61:1b:f6:93:59:c3:56:8a:43:cc:cc:
e9:a8:15:77:14:ae:41:e7:1a:18:8c:99:3c:a3:7d:6d:e1:81:
e1:5a:b9:e5:7c:ea:8d:56:e8:4e:a0:39:0f:b8:92:f5:eb:1e:
d9:f5:57:2e:2b:e1:68:53:b1:8c:3e:e2:e4:43:13:d0:84:87:
3a:93:69:f6:f5:ee:46:53:a0:d0:2b:5f:43:b3:54:9d:bf:2f:
8f:74:00:3e:22:80:5e:5a:db:87:59:fe:f0:b9:f2:7d:69:01:
c0:e1:8a:f0:32:4c:97:87:60:7b:e9:28:ca:6c:ec:b8:11:33:
7f:64:79:3a:7a:9a:20:35:50:c0:3e:4d:02:c5:fb:e3:a3:5b:
1c:e3:83:87:1e:fc:ac:7a:50:83:bf:07:7c:5c:53:d3:09:f6:
db:10:98:84:54:b6:7b:1e:29:e8:d4:57:38:25:9a:5e:c6:5f:
a4:21:9d:e9:74:a2:e7:1a:b8:52:69:7a:c7:52:8c:1a:01:2b:
10:41:7e:89:9e:8a:ff:8a:f2:bb:24:92:c9:18:ec:ff:e0:6a:
12:16:b5:4e:b5:20:49:2e:b0:7a:7d:f2:78:3a:b5:8b:69:e1:
c4:93:ee:15:36:19:d7:f3:ea:cf:78:7a:b4:92:ea:80:13:52:
e0:1b:3e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:34:43 2026 by rpki-client