Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d27826-3838-4c2b-af93-e86811120c19/1/Q16al_74NTuEg1I3YEaVLdoPq9g.mft
File: Q16al_74NTuEg1I3YEaVLdoPq9g.mft (raw, json)
Hash identifier: QqP+hrJgNJM5i52JDutP652S4RP9tiWBDWwRsK+pbvc=
Subject key identifier: AD:2A:FB:5A:15:DD:70:D4:7B:0E:E0:0E:BC:21:11:1E:52:25:07:40
Authority key identifier: 43:5E:9A:97:FE:F8:35:3B:84:83:52:37:60:46:95:2D:DA:0F:AB:D8
Certificate issuer: /CN=435e9a97fef8353b848352376046952dda0fabd8
Certificate serial: 019FA7BDFB95B9EDC57CF2CB8A4D4C40FB78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q16al_74NTuEg1I3YEaVLdoPq9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d27826-3838-4c2b-af93-e86811120c19/1/Q16al_74NTuEg1I3YEaVLdoPq9g.mft
Manifest number: 0181
Signing time: Tue 28 Jul 2026 08:01:13 +0000
Manifest this update: Tue 28 Jul 2026 08:01:13 +0000
Manifest next update: Wed 29 Jul 2026 08:01:13 +0000
Files and hashes: 1: Q16al_74NTuEg1I3YEaVLdoPq9g.crl (hash: dxic2cVwIU0E+3PKhD7BSkQmBumd3+QaTwVL5Xz5wuY=)
2: l3PqaLSxh6k9vrvUCKmbE6gQmkY.asa (hash: x39hNYyR5CBqNRDFZRAkQxFcTurTxnv+dKIdTKAhhhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d27826-3838-4c2b-af93-e86811120c19/1/Q16al_74NTuEg1I3YEaVLdoPq9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d27826-3838-4c2b-af93-e86811120c19/1/Q16al_74NTuEg1I3YEaVLdoPq9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q16al_74NTuEg1I3YEaVLdoPq9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:fb:95:b9:ed:c5:7c:f2:cb:8a:4d:4c:40:fb:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435e9a97fef8353b848352376046952dda0fabd8
Validity
Not Before: Jul 28 08:01:13 2026 GMT
Not After : Jul 29 08:01:13 2026 GMT
Subject: CN=ad2afb5a15dd70d47b0ee00ebc21111e52250740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:34:c8:86:fa:8d:d3:08:0f:a3:fb:56:cd:84:
b0:4d:c9:f2:bd:24:e6:e7:72:3f:34:e0:1c:7a:08:
42:19:b3:a8:6b:e1:86:98:db:25:08:56:8f:90:db:
9e:36:19:39:e5:24:60:e5:45:00:fb:66:23:63:44:
89:02:1f:e0:1d:8e:79:5a:69:b9:95:2e:33:80:3e:
3a:25:a8:c1:30:de:85:51:1f:5e:55:e0:e4:9b:ff:
a0:60:d2:67:40:9d:26:26:d8:47:36:ab:97:be:c4:
dd:07:96:13:f3:02:42:de:58:1e:06:38:5e:02:49:
33:16:ee:69:28:d4:34:79:be:e4:50:be:bb:f5:f2:
ea:9a:18:ba:78:32:35:b8:16:68:0f:45:f2:fa:98:
6d:5e:51:00:dd:3f:ab:34:50:a3:13:c0:1b:0e:be:
68:cf:33:b4:63:5a:90:ee:a7:63:4e:5e:ba:fe:dc:
27:ec:37:72:66:a4:97:35:40:e5:79:2a:21:b9:92:
05:9f:11:28:8d:9e:d3:c5:09:41:08:2c:28:9f:a6:
47:ed:11:d3:40:65:96:ed:14:de:81:d4:06:69:c4:
d1:ad:b4:82:b1:6f:a5:b1:bf:33:73:c1:51:f0:10:
59:61:bd:3f:10:ef:57:5f:2b:76:c2:f9:d9:0b:a2:
85:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:2A:FB:5A:15:DD:70:D4:7B:0E:E0:0E:BC:21:11:1E:52:25:07:40
X509v3 Authority Key Identifier:
keyid:43:5E:9A:97:FE:F8:35:3B:84:83:52:37:60:46:95:2D:DA:0F:AB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q16al_74NTuEg1I3YEaVLdoPq9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d27826-3838-4c2b-af93-e86811120c19/1/Q16al_74NTuEg1I3YEaVLdoPq9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d27826-3838-4c2b-af93-e86811120c19/1/Q16al_74NTuEg1I3YEaVLdoPq9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:14:b3:51:4c:70:9d:1b:f8:81:0b:f5:a1:ed:89:18:89:27:
3b:2d:d3:e0:22:83:e5:62:fa:4c:61:39:bf:8a:6e:59:1a:4b:
1e:76:14:b0:3e:18:53:a8:0a:d1:2e:6c:bc:ff:c2:d4:6d:f5:
35:a0:22:f4:b2:e3:9a:f1:14:a4:35:75:0c:95:d3:29:3e:c8:
02:21:00:9d:ca:f6:0e:fb:ce:ad:91:95:64:0e:f7:a7:13:8d:
3e:d2:c7:d1:91:65:9e:6d:23:a0:e6:9f:d8:f9:0f:67:50:b3:
3d:bb:77:a2:49:d7:17:73:01:48:43:12:b8:f5:89:41:0b:72:
c5:f1:fc:cd:17:f2:bd:92:4d:7c:6e:96:c9:de:59:65:fa:99:
df:d7:27:bb:86:a6:cf:d7:e9:cc:06:44:4b:0c:d7:30:cc:3f:
69:25:0f:13:ba:7d:48:6f:d2:23:f0:00:6e:8a:23:1b:01:f5:
b0:a8:02:c4:cf:99:43:ca:d6:e2:01:6c:0b:d4:c3:23:b1:8d:
78:c7:46:94:b3:c7:e1:d6:81:f7:e7:9f:3e:d7:e3:43:da:08:
f7:b2:b6:81:51:eb:21:91:e7:91:75:73:f4:74:16:91:f2:67:
2a:ed:8c:23:12:9b:75:6a:8a:7d:11:1e:dd:e9:2c:5f:07:36:
8b:ee:a2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:05:29 2026 by rpki-client