Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
File: Qj2TBU8GPPiikYYXNfkAWauewWk.mft (raw, json)
Hash identifier: sPya4rNn2Sa7jTF74A4AJ5lYyFBAOO9OvqTiseAtVGo=
Subject key identifier: FD:DF:A3:CA:AB:57:79:BE:4F:98:F2:54:4E:28:CD:05:AF:58:F0:86
Authority key identifier: 42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
Certificate issuer: /CN=423d93054f063cf8a291861735f90059ab9ec169
Certificate serial: 019FAB2CC1C958FEF773424271712543A1D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
Manifest number: 19DB
Signing time: Wed 29 Jul 2026 00:01:04 +0000
Manifest this update: Wed 29 Jul 2026 00:01:04 +0000
Manifest next update: Thu 30 Jul 2026 00:01:04 +0000
Files and hashes: 1: 1mX8w6XwA7woU8wmLAJ5ZXky2sk.roa (hash: O4FxQ+GxB8UXGvgtMf5kwgBczUX5jVwN68R45/WuCz8=)
2: Qj2TBU8GPPiikYYXNfkAWauewWk.crl (hash: +t14nahO30BgM9RccGI2DXLkBlalSzBVlpPQDccIvDo=)
3: viJ7gwHZZkl8aycoxbcENmaZJk0.roa (hash: kFhg4Qul4VuaLn8GNiNuWw7f2bf4xMblv/3oeMcLjc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:c1:c9:58:fe:f7:73:42:42:71:71:25:43:a1:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423d93054f063cf8a291861735f90059ab9ec169
Validity
Not Before: Jul 29 00:01:04 2026 GMT
Not After : Jul 30 00:01:04 2026 GMT
Subject: CN=fddfa3caab5779be4f98f2544e28cd05af58f086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f6:d0:c4:a9:7f:12:2a:7b:35:d4:aa:d7:c5:
79:82:ae:08:b6:a2:7d:3c:eb:17:f9:3d:bd:6b:0a:
e9:7a:db:17:a5:a8:57:61:17:20:d1:b8:82:2e:f4:
35:ba:b5:ac:9f:bd:ea:41:90:4b:a3:9f:cf:00:0b:
31:ea:cb:08:b6:14:52:36:ec:fb:10:87:82:cf:9c:
e4:5a:c2:e9:a3:37:ef:ba:a8:de:ba:28:09:c9:7e:
6a:fe:92:bd:f3:6f:80:9a:1f:3b:cb:f7:27:45:dd:
0f:06:df:d3:ba:88:be:cf:b6:18:86:67:f2:2d:04:
a6:7e:34:06:76:d5:61:ce:d0:d9:92:2b:4c:42:3f:
6f:76:3e:a7:b5:06:59:4d:7d:c3:f3:23:19:e8:63:
9d:bb:d9:ac:8f:ec:e4:01:01:3e:43:c7:f4:71:81:
14:6b:36:62:99:6c:9a:f0:b2:eb:e8:bc:88:14:d8:
f5:07:80:bb:3c:62:d2:c8:02:99:d3:aa:7f:6a:f9:
87:80:26:d0:e7:6c:9d:20:83:42:c9:40:5e:1f:b2:
3b:24:2c:25:8d:dc:b8:f2:6a:91:eb:bd:01:e8:90:
19:f2:3d:15:ea:d7:b7:ff:fd:88:6b:d8:2d:8d:7d:
2f:e5:26:ef:76:53:dc:7f:4d:5f:9b:7d:8d:4d:88:
bc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DF:A3:CA:AB:57:79:BE:4F:98:F2:54:4E:28:CD:05:AF:58:F0:86
X509v3 Authority Key Identifier:
keyid:42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:0b:0a:1e:12:17:7f:77:5f:f5:cd:94:02:0d:78:e6:8e:0d:
c5:58:ac:4c:d9:ab:ea:76:d8:b4:d7:c9:d1:8f:b4:b1:f9:0a:
91:db:5d:8f:73:4f:e1:4d:7c:a7:f7:9d:3d:bc:a5:33:21:02:
6a:a6:d3:0c:e9:ca:aa:71:74:04:3c:0d:48:57:0b:7d:5e:76:
14:e3:9b:07:d3:be:3c:07:6d:69:99:13:52:b8:82:e2:34:75:
3c:a4:80:3f:16:3c:ed:12:e1:70:c9:db:87:73:5c:00:ff:1e:
25:da:36:25:6e:0e:05:9b:5f:d0:ff:d2:20:9c:03:cd:67:af:
ed:7a:36:d1:0c:89:59:51:76:ee:6d:1b:ce:22:4b:64:ca:5c:
ca:af:13:3b:af:cb:c6:51:5a:c3:61:94:6a:6a:03:74:f1:d9:
ce:9e:3a:15:65:cf:78:37:76:95:fb:d2:a1:9a:d0:f6:fb:5a:
7a:75:04:93:49:9a:66:8a:dd:5e:1c:bb:18:7f:e1:1a:6e:f0:
b2:09:d6:d1:a9:7b:5b:49:1c:0a:3a:fa:07:80:f8:15:19:fb:
fb:40:2a:cf:6d:61:a9:8d:32:5f:d3:ef:47:a0:5c:28:fd:d8:
58:31:2f:1e:79:2b:f3:7b:8c:dc:b5:91:cc:71:b0:af:19:4f:
2e:94:35:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:47:20 2026 by rpki-client