Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
File: Q664_1W9RlALJ9uc8d7CVidrK2o.mft (raw, json)
Hash identifier: QRrwTCeMSsqhINdaoW3Itqk3u2/iq0Gtgif3quGYRpQ=
Subject key identifier: C3:A8:35:48:A0:F4:3E:98:34:A8:39:7E:EF:AA:B6:C1:43:BC:CE:89
Authority key identifier: 43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
Certificate issuer: /CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Certificate serial: 019FACACCDDB082D6CBF37E618B40169E5D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
Manifest number: 06CB
Signing time: Wed 29 Jul 2026 07:00:33 +0000
Manifest this update: Wed 29 Jul 2026 07:00:33 +0000
Manifest next update: Thu 30 Jul 2026 07:00:33 +0000
Files and hashes: 1: 0jAsd4jHu2P4YiShWU_tmFjG-Xo.roa (hash: 6hlBHdr9FEW88angOioMbp5usn4/nEWFUcWTWPzZueU=)
2: Q664_1W9RlALJ9uc8d7CVidrK2o.crl (hash: Nk/Sxj1M4vrZqVU+xgbeeHWyFYgTNk3Nbw3VnXWTVG4=)
3: kniFntdxPbS1jBvN0hKNK7QT914.roa (hash: Hc1QVDwdt4HeTUIYJSo4nwn3K1JUnhk+8tjIWHMrCAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:cd:db:08:2d:6c:bf:37:e6:18:b4:01:69:e5:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Validity
Not Before: Jul 29 07:00:33 2026 GMT
Not After : Jul 30 07:00:33 2026 GMT
Subject: CN=c3a83548a0f43e9834a8397eefaab6c143bcce89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8c:d4:cb:87:b9:dc:e2:3f:84:82:29:21:82:
01:5b:9b:6b:30:89:c6:4d:20:93:a4:8b:ad:fb:28:
f8:f2:cc:42:20:cc:8d:82:c3:c9:cd:9f:21:99:66:
fa:a4:2c:31:6d:a1:5e:07:2f:fa:46:27:52:2f:4c:
13:94:a1:f5:de:77:be:68:95:b9:33:4e:d9:a5:9a:
d0:e3:4d:bc:af:7f:ab:4f:26:d4:70:95:e5:69:e9:
5e:05:c6:ed:ce:66:c5:22:08:e4:07:7b:92:2c:c9:
47:79:4f:15:19:98:19:52:38:f3:fe:c2:b9:35:e6:
6a:12:77:2a:ad:0c:23:1f:6a:d0:56:3b:34:85:38:
8c:4c:1a:7d:6c:0e:23:b0:da:2a:64:57:2b:08:0e:
48:90:9f:18:7d:58:ba:59:8f:f9:d3:d6:91:62:3c:
14:d8:9e:08:b5:5a:07:55:a7:f2:ff:ca:d3:b0:b2:
28:10:d8:be:37:7b:6a:03:d9:2a:bf:5b:87:70:ff:
d4:6d:73:e1:51:96:c2:60:3e:1e:3d:23:95:47:40:
b6:02:d3:96:aa:f0:3d:0b:0a:07:4c:9e:f3:31:49:
48:7f:30:bd:48:9a:89:ff:fd:f5:fc:44:c7:f2:05:
42:10:0b:ef:45:f8:7d:47:02:ea:ae:ec:c0:2d:56:
d2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A8:35:48:A0:F4:3E:98:34:A8:39:7E:EF:AA:B6:C1:43:BC:CE:89
X509v3 Authority Key Identifier:
keyid:43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:47:b3:3b:53:e4:a8:fc:48:8a:87:d6:bf:e4:88:64:78:5d:
72:a5:5e:44:a1:80:a5:90:a2:79:5a:db:3b:b4:b3:e9:81:7b:
82:32:93:f2:0f:94:0b:31:fc:c2:1a:4a:16:1a:04:9a:f4:64:
5f:d4:08:e4:c8:81:c4:73:c0:79:3c:69:2c:1d:82:e4:f1:f7:
1e:32:2e:6f:18:c8:f0:46:bf:ce:b5:8d:f1:93:6f:50:18:26:
8f:79:02:61:c6:e7:ac:a3:de:40:ea:cd:3d:45:4f:e6:48:63:
12:92:74:1d:55:ad:86:b7:c1:40:1b:19:55:6c:14:c1:1b:5a:
25:00:7f:ce:b6:dd:6c:0a:20:5b:c6:67:7b:50:ae:3e:93:89:
ba:8c:7a:b3:e2:e7:f1:63:9c:a0:9f:60:1a:55:dd:92:ed:c7:
94:02:25:4b:9b:33:be:4f:52:aa:46:cf:a0:20:c7:b3:5c:e2:
c8:7b:67:51:ad:88:d8:c8:78:2a:18:af:8a:d2:fa:e9:f4:2b:
35:d6:47:b5:5d:42:3e:03:20:10:ac:c5:0e:01:7c:5a:b6:36:
cc:e1:94:b1:39:99:33:f9:6b:02:06:9a:31:01:fa:6e:04:62:
61:d1:6a:c2:5f:3b:ed:e2:b8:34:23:60:98:aa:19:10:09:29:
54:bd:2c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:40:18 2026 by rpki-client