Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
File: q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft (raw, json)
Hash identifier: es/8S8eM8fpfnLPOXofGrLle5HeiglPh5jDkcav7fEY=
Subject key identifier: 91:1B:32:EA:58:71:DE:14:F0:3D:2A:BE:40:B5:61:C4:3E:81:45:4C
Authority key identifier: AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
Certificate issuer: /CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Certificate serial: 019FAE2DA4E5C35B7E8171C45CFD4D1553E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
Manifest number: 19D8
Signing time: Wed 29 Jul 2026 14:00:54 +0000
Manifest this update: Wed 29 Jul 2026 14:00:54 +0000
Manifest next update: Thu 30 Jul 2026 14:00:54 +0000
Files and hashes: 1: 8TsXg-XUAk1JE35W5iwCEn8OxHY.roa (hash: wgiKwTO+cQ6amDFPE6cljiPgi+iGvWx/hXbXkD8CRAQ=)
2: q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl (hash: xxaiBtc0buaTCah/tYLXQu81p9p4upmWHo6yCYx0LGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:2d:a4:e5:c3:5b:7e:81:71:c4:5c:fd:4d:15:53:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Validity
Not Before: Jul 29 14:00:54 2026 GMT
Not After : Jul 30 14:00:54 2026 GMT
Subject: CN=911b32ea5871de14f03d2abe40b561c43e81454c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:14:95:e3:0b:37:5c:41:fa:3d:23:1f:5b:0c:
b1:36:38:2d:6b:db:f9:02:d2:13:57:97:e6:af:fb:
8f:66:15:c6:2e:b5:ad:69:cb:43:f3:fd:ce:f1:5d:
ca:77:9d:05:e1:aa:9a:ec:a4:f6:6a:e4:13:7e:41:
bb:ff:85:37:f2:78:08:15:42:45:d7:1b:74:40:05:
50:42:85:8c:8a:77:68:96:37:8e:99:45:2d:67:3d:
e3:78:40:73:79:ff:8e:16:47:45:7d:8f:4e:22:33:
63:b3:de:6e:c5:52:ee:1e:64:17:b4:4d:73:a8:b9:
9c:9e:d8:a6:b9:7b:8c:52:9e:ab:40:c6:c1:a6:90:
cd:ee:96:ec:39:f0:1d:a7:8c:91:80:90:cf:15:13:
8b:d6:c1:93:2b:00:15:88:29:47:17:f7:c0:3b:c4:
77:a1:19:bd:b8:76:f1:21:a9:35:96:22:48:ed:fd:
d8:46:8f:00:bf:22:c0:15:55:a5:eb:fd:36:61:07:
23:50:1f:65:09:42:b1:b1:ef:fc:50:24:69:20:32:
fb:5d:af:4c:ce:03:51:09:6d:13:f4:26:8c:c7:bf:
ee:68:b1:31:a7:cd:1a:8a:87:a9:25:af:ae:5c:62:
3e:41:87:4b:5b:4a:f4:51:c5:eb:0d:1a:d1:4e:7c:
27:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:1B:32:EA:58:71:DE:14:F0:3D:2A:BE:40:B5:61:C4:3E:81:45:4C
X509v3 Authority Key Identifier:
keyid:AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:2b:06:03:cd:93:93:35:a6:63:49:e3:5e:d8:ad:ac:99:58:
64:b2:e8:fb:e8:47:b6:f9:68:18:0c:19:9d:3b:44:f9:4b:8c:
de:05:b3:49:ad:cf:57:d2:94:9d:cf:0f:70:54:cb:49:97:0e:
3a:aa:3d:ad:1c:3f:c1:83:d9:4d:60:12:0c:14:22:db:da:f7:
2e:4d:e9:79:70:9b:13:a7:16:7d:8f:56:68:f6:a2:e1:d0:ce:
c7:7e:75:b4:98:36:73:b2:f8:9e:d1:2e:d2:88:8e:d3:1d:d2:
bf:da:29:2f:b6:8f:84:3a:0c:c5:ec:eb:12:22:b8:84:de:4a:
17:e2:35:7e:3f:43:bb:cd:d0:35:6d:ec:c4:5d:a3:f1:f8:7c:
2f:73:4d:cf:86:94:9f:e6:0c:32:8b:57:0c:12:54:e0:22:24:
b2:50:0c:25:65:5a:e7:d5:11:99:12:9f:bf:7a:6d:46:8e:ac:
b6:62:17:48:26:60:22:0c:80:f6:e3:75:f0:ab:8a:97:3e:fb:
87:1e:c2:70:8d:48:ba:5a:63:67:91:cb:9a:40:97:fa:8f:87:
f1:f9:ee:45:bb:17:a9:77:15:aa:da:e6:90:1d:a7:a1:16:b8:
3c:63:31:ec:09:cb:ed:50:3e:c3:bf:01:6b:f4:91:59:8e:85:
e6:44:f7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:32:57 2026 by rpki-client