Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
File: Q68umH0rY63apa3BePMekNh2qqc.mft (raw, json)
Hash identifier: hH4qruFzb5hE+4YVZ8x0n35ST3ELLIYvqqDHNLHjGmw=
Subject key identifier: AC:5A:A0:6F:CB:95:19:90:E3:DC:F7:F8:1D:A8:9A:B3:1A:9E:64:E7
Authority key identifier: 43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
Certificate issuer: /CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Certificate serial: 019FA93E82999AA2E98FEC4C112EE3A225A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
Manifest number: 19D9
Signing time: Tue 28 Jul 2026 15:01:13 +0000
Manifest this update: Tue 28 Jul 2026 15:01:13 +0000
Manifest next update: Wed 29 Jul 2026 15:01:13 +0000
Files and hashes: 1: 6h1PvR00lCR4R_OK63mWuUNm8Ow.roa (hash: nK88CLEdk1ROq2MFGTRKCThSy5zWr4KCZ19shw/qtOU=)
2: Lc1jl7QVxqLwMWxBrIVxsneb__U.roa (hash: E1vTmbk4SrydL0KXJtJee0AsNy8nI/ShD3+SVqKy/u4=)
3: LkGDyqDRG7mHRocUIkDmSuw1vWQ.roa (hash: J9hPT1FhbaaEOwCdYHU6hR/yFBmZm/8O5bYD8Dyfv0Y=)
4: Q68umH0rY63apa3BePMekNh2qqc.crl (hash: mqRFYVnVyAr8chO5mSVIKu7seDn+cKuI7UFRkyWBY6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 15:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:82:99:9a:a2:e9:8f:ec:4c:11:2e:e3:a2:25:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Validity
Not Before: Jul 28 15:01:13 2026 GMT
Not After : Jul 29 15:01:13 2026 GMT
Subject: CN=ac5aa06fcb951990e3dcf7f81da89ab31a9e64e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:46:bf:e2:c0:20:14:ef:45:b3:48:37:2d:ab:
4c:5a:3b:ea:92:f7:35:a7:37:cf:b6:28:90:83:a9:
a6:8e:9e:76:91:93:5f:31:3c:e2:44:08:63:d3:cd:
e5:a8:93:75:6f:b6:a1:90:27:ff:3a:59:e3:84:22:
37:16:ab:d1:e1:93:26:ef:9c:9e:5c:f4:c1:dc:39:
e4:86:74:3f:5b:59:b9:5b:78:72:17:04:59:0b:0d:
bb:0f:a7:b0:96:bf:1a:43:36:73:a0:13:b9:5c:f9:
52:cd:62:48:e5:70:ac:1c:0d:7e:95:9d:05:63:e2:
c1:4e:0d:0a:70:57:43:64:69:37:79:c9:32:99:03:
82:5a:ed:c6:b2:f5:19:fc:47:96:a5:74:85:ad:ec:
f2:f6:07:3b:da:d1:70:59:94:c1:b3:88:0e:62:ef:
39:3c:9c:57:82:a9:8a:40:cd:82:2d:3f:e2:06:fa:
2c:7c:9a:1b:d8:75:bf:b2:15:fc:fa:02:70:dc:3c:
1b:d7:14:eb:95:90:51:5d:10:cf:14:55:93:d1:b2:
07:ba:27:35:eb:6b:2a:1c:e2:87:80:f9:48:ac:21:
9f:e2:83:6b:d5:59:fb:c7:0c:82:b7:29:1d:97:43:
be:84:c4:73:07:1d:77:94:63:5d:10:d3:6c:5e:71:
60:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:5A:A0:6F:CB:95:19:90:E3:DC:F7:F8:1D:A8:9A:B3:1A:9E:64:E7
X509v3 Authority Key Identifier:
keyid:43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:83:08:4e:4f:01:3d:15:04:0e:c1:f8:a7:81:41:57:bc:46:
96:c3:d7:db:11:cf:62:f9:7d:38:a1:b2:79:c2:9b:4a:5d:88:
b3:1e:dd:89:d8:e4:87:27:da:f3:8a:a5:ba:04:7f:1b:87:55:
42:3d:75:b0:52:14:01:b4:cc:78:0d:6f:3b:5d:55:0c:63:04:
7f:e9:35:21:1e:1c:07:27:7e:82:92:c4:6a:16:09:05:81:91:
71:16:16:1c:dd:d9:74:2c:7e:e2:b3:7b:b9:e8:ca:3b:28:41:
b3:79:f9:ce:89:6c:d1:cd:68:aa:44:8d:8b:77:eb:39:c8:1f:
f0:3a:28:14:15:14:40:e2:8a:a2:28:da:a1:72:19:48:bf:f4:
4a:b5:dd:3f:60:6a:10:07:c9:a5:a4:f1:aa:9e:33:0e:cf:77:
a9:95:2f:e2:72:5a:4e:5c:fb:7a:a4:61:94:91:a5:69:fe:51:
4b:82:a8:71:05:94:ba:83:70:bf:12:fe:cf:51:88:14:c5:be:
9a:98:8c:cd:a1:ef:27:4f:e3:64:5e:30:f1:e6:6d:5e:85:ae:
2d:0e:82:7a:b1:63:1f:6c:7e:2b:26:29:47:1f:a4:63:5c:fb:
e4:41:fa:90:c5:a6:c3:15:48:f4:f1:9f:3b:e9:c1:40:6d:be:
02:32:42:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:04:07 2026 by rpki-client