Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
File: Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft (raw, json)
Hash identifier: IKthVwvZQpqORYXnQE/rZdFMBRU0W/0v/3bfRGqndQE=
Subject key identifier: 02:BF:CC:3C:E6:9E:F5:B0:78:0C:18:BF:5F:58:B1:7A:F5:55:29:5D
Authority key identifier: 43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
Certificate issuer: /CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Certificate serial: 019FAC0838CD4DFAA128CDF8C8E24D98320A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
Manifest number: 19EB
Signing time: Wed 29 Jul 2026 04:00:47 +0000
Manifest this update: Wed 29 Jul 2026 04:00:47 +0000
Manifest next update: Thu 30 Jul 2026 04:00:47 +0000
Files and hashes: 1: 9jc69vVsdWk6bDgFshwFaPkQiW4.roa (hash: vJY4PURpp9zlGE8vkcu9TTy5SV3ZXYUmKNEh03HjHbE=)
2: McRpwaQnqqZOGTag3hww5pMg2ZA.roa (hash: S2MuhIxLoEt0UYzfR1rcMJ/qgJF6eA4a0C2qNQuo9nk=)
3: Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl (hash: +pxJ2/LP0xhRKe1Tz4HbMfGp8pCxy/mJnOmObmWEEHg=)
4: tDspM2jjSgEGhc8BloKM8cbAdEU.roa (hash: yKxOJy53jyvQOqMbQzES6V6OdCvwq23pAU2NRVmp2OI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:38:cd:4d:fa:a1:28:cd:f8:c8:e2:4d:98:32:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Validity
Not Before: Jul 29 04:00:47 2026 GMT
Not After : Jul 30 04:00:47 2026 GMT
Subject: CN=02bfcc3ce69ef5b0780c18bf5f58b17af555295d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0f:72:a6:2d:fc:9e:8b:7e:22:3f:51:01:2b:
4c:68:2f:88:d5:b3:c6:80:cc:21:bc:5c:2d:30:88:
2d:8d:40:65:a4:a2:b4:a3:80:4a:12:e2:4a:86:be:
8f:d2:b8:2b:33:b4:36:8f:67:1b:78:f3:86:1e:a0:
98:0b:42:50:3b:6e:6e:27:41:a8:c6:b2:c1:13:c1:
66:de:08:b2:02:3f:26:44:cf:f7:80:68:a3:d8:7d:
6d:65:b7:69:60:8a:cf:18:e3:99:89:db:ac:a6:da:
4f:27:48:b1:ee:e3:bd:8d:72:3f:ae:09:e6:61:32:
50:90:e9:36:63:a2:98:a3:9c:f7:29:c2:d9:0b:5f:
ad:eb:97:4a:05:cc:c5:ab:0c:43:f4:da:3d:bd:f1:
82:fc:c8:20:a4:50:50:22:a6:f9:f5:fe:c4:2e:4e:
98:24:b3:db:63:ec:b8:70:86:2f:ce:10:e3:36:40:
e8:0b:4b:e5:fb:66:e5:33:4c:38:b3:be:a6:ac:1f:
ac:29:2b:29:3b:d1:50:d2:8c:ca:b1:08:63:5e:31:
f3:ad:51:af:5e:31:30:e7:ce:cb:b5:ab:53:6c:dd:
cf:96:b0:7d:ec:9f:91:a8:66:28:b3:cd:f3:db:c2:
44:09:54:a3:86:78:3f:9d:a9:0b:25:c8:2a:dc:57:
ad:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BF:CC:3C:E6:9E:F5:B0:78:0C:18:BF:5F:58:B1:7A:F5:55:29:5D
X509v3 Authority Key Identifier:
keyid:43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d3:62:14:91:f1:e1:dc:ec:4b:80:ed:f4:06:24:73:20:48:
04:4c:9a:ce:aa:88:18:96:87:92:94:ce:1b:6a:2c:c5:6c:b8:
4b:17:41:ca:69:0c:bb:1e:61:d8:a5:bd:3d:c7:43:c3:15:b3:
d4:37:7c:c5:f9:92:14:09:14:b4:10:3f:81:e5:00:a6:63:df:
c6:99:1d:28:6c:7b:7f:06:94:ee:ba:1a:8e:b3:77:90:8c:a5:
1d:ca:a4:f1:2c:e3:57:9e:44:ac:7e:d7:6e:d6:47:7f:61:08:
db:45:7c:a8:87:dd:58:b7:91:c0:24:78:30:bb:36:ea:ce:38:
9b:c3:51:cf:9b:96:55:4e:af:db:26:87:61:1b:88:da:5e:5c:
98:44:05:57:f8:93:07:7e:f2:60:5f:cc:b1:e6:e3:87:b8:d7:
6b:fd:54:56:fd:ff:51:f2:f5:55:e2:0f:02:7a:9d:57:73:7c:
8e:23:bf:fa:fa:2e:ef:c8:7c:27:d7:d5:21:74:0b:15:68:5e:
7a:10:39:4d:ca:8b:77:6b:d9:d2:50:a1:dd:f2:12:68:fb:ce:
cc:e6:58:04:ce:4e:74:98:9c:e4:4d:6d:4e:8e:92:b0:cd:d3:
7e:3a:77:12:ff:57:8c:79:3c:9b:3e:99:06:80:2a:df:9e:93:
22:49:18:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sCDjNTfqhKM34yOJNmDIKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzOTY1ZGQxZjZmMjRhNDZkN2NjNGJjY2ZlY2Q0MTUxYzZk
ZDFiZmIwHhcNMjYwNzI5MDQwMDQ3WhcNMjYwNzMwMDQwMDQ3WjAzMTEwLwYDVQQD
EygwMmJmY2MzY2U2OWVmNWIwNzgwYzE4YmY1ZjU4YjE3YWY1NTUyOTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg9ypi38not+Ij9RAStMaC+I1bPG
gMwhvFwtMIgtjUBlpKK0o4BKEuJKhr6P0rgrM7Q2j2cbePOGHqCYC0JQO25uJ0Go
xrLBE8Fm3giyAj8mRM/3gGij2H1tZbdpYIrPGOOZidusptpPJ0ix7uO9jXI/rgnm
YTJQkOk2Y6KYo5z3KcLZC1+t65dKBczFqwxD9No9vfGC/MggpFBQIqb59f7ELk6Y
JLPbY+y4cIYvzhDjNkDoC0vl+2blM0w4s76mrB+sKSspO9FQ0ozKsQhjXjHzrVGv
XjEw587LtatTbN3PlrB97J+RqGYos83z28JECVSjhng/nakLJcgq3Fet9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAK/zDzmnvWweAwYv19YsXr1VSldMB8GA1UdIwQY
MBaAFEOWXdH28kpG18xLzP7NQVHG3Rv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTVaZDBmYnlTa2JYekV2TV9zMUJVY2JkR19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jNzMxYzQtOTE4My00ZGIzLWI3MGEt
MzM5ODBjMDNmMDhlLzEvUTVaZDBmYnlTa2JYekV2TV9zMUJVY2JkR19zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9jNzMxYzQtOTE4My00ZGIzLWI3MGEtMzM5ODBjMDNmMDhl
LzEvUTVaZDBmYnlTa2JYekV2TV9zMUJVY2JkR19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPdNiFJHx
4dzsS4Dt9AYkcyBIBEyazqqIGJaHkpTOG2osxWy4SxdBymkMux5h2KW9PcdDwxWz
1Dd8xfmSFAkUtBA/geUApmPfxpkdKGx7fwaU7roajrN3kIylHcqk8SzjV55ErH7X
btZHf2EI20V8qIfdWLeRwCR4MLs26s44m8NRz5uWVU6v2yaHYRuI2l5cmEQFV/iT
B37yYF/Msebjh7jXa/1UVv3/UfL1VeIPAnqdV3N8jiO/+vou78h8J9fVIXQLFWhe
ehA5TcqLd2vZ0lCh3fISaPvOzOZYBM5OdJic5E1tTo6SsM3Tfjp3Ev9XjHk8mz6Z
BoAq356TIkkYXQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:04:28 2026 by rpki-client