Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
File: Q6XKFbwjwyXxNB6YidhYuO12104.mft (raw, json)
Hash identifier: IJRi8/8d9ML94LrBmD3YhHHCs6GY333uSWuYHB17HMI=
Subject key identifier: FD:76:77:83:1D:CF:4B:26:6A:EE:0F:96:57:1F:03:2A:BD:14:BE:F1
Authority key identifier: 43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E
Certificate issuer: /CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
Certificate serial: 019FAA50A9B3699D7D0A57EC876DBC0E0222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
Manifest number: 0638
Signing time: Tue 28 Jul 2026 20:00:40 +0000
Manifest this update: Tue 28 Jul 2026 20:00:40 +0000
Manifest next update: Wed 29 Jul 2026 20:00:40 +0000
Files and hashes: 1: Q6XKFbwjwyXxNB6YidhYuO12104.crl (hash: 12y/QEuxTLbmnhKbqJDqj6avAzVLPYK1zrL7mMd20Xo=)
2: WrwILJOkKv94JvYqGUNiy47Tb9E.roa (hash: Bjce6gPk82s+U9N9AWLeoylnd69kztnleXwX8PYNeuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:a9:b3:69:9d:7d:0a:57:ec:87:6d:bc:0e:02:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
Validity
Not Before: Jul 28 20:00:40 2026 GMT
Not After : Jul 29 20:00:40 2026 GMT
Subject: CN=fd7677831dcf4b266aee0f96571f032abd14bef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c7:56:c8:20:40:3f:ce:2b:b7:0a:d1:63:84:
d2:dc:48:46:b7:43:d1:6b:c1:34:fe:c9:c4:51:b1:
55:62:ea:08:24:4c:88:cb:00:9c:0f:23:d0:da:0f:
84:f7:c9:c3:96:c9:c5:90:b4:49:6f:80:d3:78:32:
d5:55:f8:4a:f9:5e:9c:86:cd:4d:ff:ae:52:9e:01:
5c:c0:d7:a1:93:5a:3c:28:65:09:be:71:a7:8a:47:
96:c0:1c:ba:b4:a5:5e:4d:36:f5:a9:a2:41:16:84:
da:c0:fd:da:7e:23:b2:39:07:93:33:f2:df:ea:e4:
d4:8b:4b:cd:9a:bc:a0:de:54:ca:16:1d:85:32:af:
d5:2e:6e:2c:5c:fd:7a:56:b8:46:19:07:78:18:ac:
7a:d4:c1:93:8b:29:ec:65:78:3e:2e:4d:ae:73:a3:
d4:d2:66:ca:a0:a3:7c:3c:eb:29:5e:e7:a5:6e:0a:
32:9c:ab:a0:00:fc:36:ae:6a:fa:bb:72:6c:22:bd:
4a:81:c2:67:55:9b:1a:fc:fa:64:53:98:91:ca:e9:
64:2c:b7:a4:af:ac:dd:ce:65:0b:b5:f2:bd:f9:1b:
0f:f7:52:20:e4:36:33:1f:5a:42:3b:54:c2:35:6d:
1e:01:6c:a1:e7:d7:35:26:3c:d7:67:65:b9:37:53:
0f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:76:77:83:1D:CF:4B:26:6A:EE:0F:96:57:1F:03:2A:BD:14:BE:F1
X509v3 Authority Key Identifier:
keyid:43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:3c:86:a8:77:a8:5d:5f:d0:95:e1:be:72:2a:9b:d6:10:8a:
15:4c:c2:f6:57:02:12:ec:d0:ce:7f:7f:38:d9:aa:24:d5:89:
d7:c4:ba:3e:46:af:c9:52:ed:77:be:d3:d1:ac:b7:00:8a:c9:
c3:67:22:f7:6f:12:bc:10:37:d3:18:ac:ab:88:3e:7c:69:00:
b3:b3:16:d2:6a:49:cf:b0:68:ec:09:f8:bb:a5:de:56:06:40:
55:39:4e:aa:b2:dc:ec:ea:a4:18:5d:ff:c4:90:3c:90:81:8b:
cf:92:87:c8:4d:dd:3e:6b:33:7b:6c:59:d5:4d:ba:ca:0e:b3:
dc:53:19:55:f4:d8:43:04:b3:40:83:8f:81:ed:5c:73:c1:c1:
1d:ca:8b:a8:38:8d:38:e8:78:e0:8f:c6:a2:eb:e1:f2:fe:cb:
4b:85:73:86:a4:00:88:14:ad:ca:aa:a3:92:35:58:70:ab:f1:
4b:d8:37:b1:2b:a7:eb:6c:bf:3e:21:f7:52:2d:ee:57:f3:ec:
c9:4d:68:ea:0a:9f:a1:1c:88:ee:fe:b7:ed:56:9f:c6:41:10:
c8:82:35:82:52:2b:2c:40:60:00:e9:7e:f4:19:3a:1e:d1:78:
53:d5:a3:ad:c7:6f:bd:67:5b:6d:0a:38:48:25:34:6f:b6:96:
52:bc:70:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:37:58 2026 by rpki-client