Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
File: QsCVkBFifd0NBX1zHo-lpRApZZI.mft (raw, json)
Hash identifier: FX2i4nkP/r8O4He+Hkua7O2Df6I5DbFXlIcB4//nnR0=
Subject key identifier: 09:49:EB:03:3F:B5:C4:CF:1D:F3:C7:99:D9:50:37:BA:2B:B9:5F:D2
Authority key identifier: 42:C0:95:90:11:62:7D:DD:0D:05:7D:73:1E:8F:A5:A5:10:29:65:92
Certificate issuer: /CN=42c0959011627ddd0d057d731e8fa5a510296592
Certificate serial: 019FAC089AD911D673969DE776A66CB88891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 04:01:12 +0000
Manifest this update: Wed 29 Jul 2026 04:01:12 +0000
Manifest next update: Thu 30 Jul 2026 04:01:12 +0000
Files and hashes: 1: QsCVkBFifd0NBX1zHo-lpRApZZI.crl (hash: Fao8T7elHsJBaHxN1uNJMKCQhV1oNEPJL0R6613umdM=)
2: RMmBnfd1TCGUmEC2O6JokpnQVQ8.roa (hash: wPMgtMcsG/KMNrN9/altEtQua2Hm0vaKQpeGiiY5B3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:9a:d9:11:d6:73:96:9d:e7:76:a6:6c:b8:88:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c0959011627ddd0d057d731e8fa5a510296592
Validity
Not Before: Jul 29 04:01:12 2026 GMT
Not After : Jul 30 04:01:12 2026 GMT
Subject: CN=0949eb033fb5c4cf1df3c799d95037ba2bb95fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:91:de:8e:0c:b9:43:ef:a7:62:83:37:ba:e2:
f7:e2:c5:b0:d8:d3:99:3a:f1:6f:10:f3:a1:0e:45:
4e:67:ad:1f:38:fa:ad:71:b3:aa:9c:2c:24:93:b4:
12:95:36:60:02:32:49:b1:a6:f5:a8:7c:40:82:1a:
56:3e:e6:01:34:0c:88:86:d3:76:75:03:ac:8c:1c:
fc:84:f9:73:da:53:c6:08:7e:66:81:b9:4e:4b:a3:
5c:73:60:c0:9e:ba:be:ec:f4:5a:7d:10:c3:f3:4d:
e6:c1:cb:a5:63:5d:71:de:df:1d:f0:aa:18:ee:3e:
17:f9:57:9e:d8:6e:f7:b3:98:fb:16:30:9a:3b:b3:
f8:4b:7b:5e:36:ea:fd:b9:e7:d8:14:c2:6f:de:29:
ce:65:06:49:1e:c2:e6:b3:4d:34:6f:82:05:26:f6:
e2:9e:7e:73:88:23:29:0f:0d:81:7d:a8:34:03:60:
a3:ec:dc:46:cc:5e:7b:c9:41:b8:25:6d:51:c4:66:
aa:1d:a3:ff:ef:02:2a:70:f6:d2:6c:51:b6:14:22:
d1:3c:53:89:26:22:ff:41:f5:db:39:ef:91:79:70:
96:ae:d4:ed:15:16:e6:24:45:35:c7:88:35:d7:b6:
bd:5d:d7:1c:3e:6d:81:50:97:f0:38:31:b5:4b:7e:
40:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:49:EB:03:3F:B5:C4:CF:1D:F3:C7:99:D9:50:37:BA:2B:B9:5F:D2
X509v3 Authority Key Identifier:
keyid:42:C0:95:90:11:62:7D:DD:0D:05:7D:73:1E:8F:A5:A5:10:29:65:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:05:ec:4c:f1:f1:14:5d:05:3b:69:9c:56:cc:1c:13:57:f0:
48:df:85:78:2b:fb:fa:cd:89:00:a2:f3:c8:99:f5:4c:fe:07:
bc:4c:27:8d:02:3d:9c:3a:7c:af:aa:45:a6:66:e8:24:a8:d0:
d4:c6:34:ae:36:1c:01:65:c3:84:92:09:a6:03:26:db:10:07:
6f:97:f9:dc:2f:02:e0:35:72:83:4a:91:09:2b:7b:78:b0:f7:
40:03:04:6d:de:c7:c7:11:21:33:ea:16:e3:c3:19:87:ea:da:
3b:10:33:8f:60:ee:a9:29:68:bf:df:15:77:ce:ce:98:f5:a4:
00:a6:2e:e9:20:66:60:b3:4f:b9:1e:29:63:06:9f:2b:5f:82:
06:11:0a:e6:ca:c2:f3:cd:3a:77:89:8f:5c:30:c7:be:9a:04:
92:d4:9f:a0:bd:e6:5e:e2:e7:cb:09:e2:cc:bd:08:65:41:95:
3e:d9:a4:4c:f5:dd:01:ee:72:9d:83:a7:aa:70:dc:c8:ea:9c:
2d:d0:c1:16:31:bf:11:9b:68:71:52:be:3e:17:22:a0:d3:1d:
03:82:54:1f:19:0d:4b:19:f4:8f:c5:26:6a:4d:75:95:ff:f6:
94:a2:e5:ca:8d:bc:61:87:be:da:fe:2e:ee:ca:5c:e1:8d:ee:
41:96:89:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:28:42 2026 by rpki-client