Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
File: Q9CWU4TcREh6gxcabV0FqUpq1nw.mft (raw, json)
Hash identifier: UBK9TzFcpTTsRif6lGR+SFtThQp42y5DpdybRUsUU8c=
Subject key identifier: 36:8A:D5:53:2E:D5:17:B3:22:76:38:F2:CF:E1:C8:BD:E3:75:CE:F8
Authority key identifier: 43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C
Certificate issuer: /CN=43d0965384dc44487a83171a6d5d05a94a6ad67c
Certificate serial: 019FAABEEABFBF11FC8B1B024EE710DC2DE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
Manifest number: 0474
Signing time: Tue 28 Jul 2026 22:01:06 +0000
Manifest this update: Tue 28 Jul 2026 22:01:06 +0000
Manifest next update: Wed 29 Jul 2026 22:01:06 +0000
Files and hashes: 1: Q9CWU4TcREh6gxcabV0FqUpq1nw.crl (hash: ey/DZYYDChQzymLAPZJyU8AjeRPZlDYNVe7Bba2a6Ac=)
2: m_rKth0WblNoPGrjkNfcn6MmMxc.roa (hash: S0D1n4kwGONLCb2yvnuQTTGiDLAbMsWlgwxGBJpbiPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:ea:bf:bf:11:fc:8b:1b:02:4e:e7:10:dc:2d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d0965384dc44487a83171a6d5d05a94a6ad67c
Validity
Not Before: Jul 28 22:01:06 2026 GMT
Not After : Jul 29 22:01:06 2026 GMT
Subject: CN=368ad5532ed517b3227638f2cfe1c8bde375cef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b0:7a:32:17:f7:f5:6a:0b:07:cf:3a:cf:29:
fa:61:4d:5d:af:f9:61:81:39:0c:47:d5:df:3e:e6:
4c:ac:12:2a:5e:40:81:e5:9d:11:38:8a:45:84:e8:
a4:b6:3a:c1:b1:30:36:6e:ea:15:db:2e:80:5e:ab:
52:f0:d9:53:b6:46:81:94:fb:5d:54:eb:ce:c2:89:
e1:0b:54:b0:68:6e:18:3c:65:44:94:ea:2b:ef:7b:
a6:b6:5f:25:82:c6:7b:9e:b7:95:ae:a3:4e:9d:97:
0d:e7:f3:45:b1:98:e6:6d:7c:bc:cb:37:f3:44:49:
c2:5d:99:97:e4:6e:fc:10:5e:04:1a:86:9e:52:b7:
c7:0c:00:90:fb:a4:10:15:2e:8d:fb:a0:27:96:b3:
c2:f5:b5:fe:ab:66:f9:ae:e5:d7:76:4e:d7:69:c9:
0a:7b:c2:53:f3:30:1e:e3:76:c0:11:95:e5:5a:7b:
41:9c:38:5f:50:1a:c5:f4:91:e3:4c:02:ee:dd:66:
4d:b9:43:f9:bf:e5:cd:7b:15:47:e9:b2:9b:13:7a:
71:d6:cf:47:ae:f3:af:6e:1a:46:3b:ac:fc:b0:90:
ff:2e:56:11:18:2e:ea:61:8d:76:5e:54:12:2a:af:
a1:0b:29:c9:d5:14:be:15:3f:ba:5e:0e:21:64:d6:
72:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8A:D5:53:2E:D5:17:B3:22:76:38:F2:CF:E1:C8:BD:E3:75:CE:F8
X509v3 Authority Key Identifier:
keyid:43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:90:17:df:1b:7d:6a:c4:65:a9:76:e5:1c:ef:9d:c4:26:db:
53:cd:e6:e2:94:c9:1e:5e:1c:1b:34:49:70:c5:ee:4f:cc:c1:
4f:49:2d:ae:b2:9d:63:42:52:9c:b9:3d:63:37:fe:b0:85:84:
b0:1f:18:ca:11:25:69:47:57:4b:e6:d2:73:9d:9e:63:ac:2a:
63:8f:f9:3a:d3:48:5e:af:5b:89:f4:e1:c0:11:3e:0a:2f:04:
f2:af:cc:7b:c3:f6:3e:96:39:2f:0e:e9:af:c2:04:67:b5:00:
7a:89:4a:36:d5:64:8f:0f:48:42:e8:ce:5e:83:be:10:d8:90:
2a:ac:52:ed:11:3e:b3:43:75:a1:cb:aa:7f:e4:f3:a3:90:16:
bc:a3:9d:20:ac:b8:cc:4a:c8:0e:e3:46:25:58:46:39:37:c7:
e2:9c:7d:a3:17:9a:04:e0:b5:e3:66:73:f8:48:b6:ab:5d:60:
86:da:09:8e:f4:82:a3:d7:ef:3c:f8:b5:2f:ac:69:6a:a3:b7:
47:31:e5:5d:88:f2:b0:e0:af:00:87:c2:1b:a2:80:fc:7f:a2:
e0:38:c6:36:57:48:d3:58:d0:ab:4e:00:09:6c:51:7d:ba:e5:
c7:64:b2:30:e4:09:f3:f8:3c:66:6d:b9:7f:dd:8f:09:6a:a6:
21:ef:2d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:33:17 2026 by rpki-client