Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
File: Q8FllZZq-wus8deTfyRdagUiIaM.mft (raw, json)
Hash identifier: wM38NfKOj8iqhCKTPULGhD2HyeHrimPoH+2wiNQjfRo=
Subject key identifier: 1F:F7:C0:EE:DD:01:9F:02:7D:39:49:FE:75:B7:A9:0A:1B:65:CB:91
Authority key identifier: 43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
Certificate issuer: /CN=43c16595966afb0bacf1d7937f245d6a052221a3
Certificate serial: 019FAA1A224893C1FACF834C42BF0B059069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
Manifest number: 19D6
Signing time: Tue 28 Jul 2026 19:01:07 +0000
Manifest this update: Tue 28 Jul 2026 19:01:07 +0000
Manifest next update: Wed 29 Jul 2026 19:01:07 +0000
Files and hashes: 1: 4txRYI484TEAkKZQuGXE7v7kNFE.roa (hash: 0LHuR+m3x801pvrNDlfkYNVRhvh7QTNXeF2avzGdu+o=)
2: 7j99n4d6ANqzBKZIb7AtbN16HNM.roa (hash: rlAo1p9sV9yO7tsi280DXkwJRnsLW38pb6gpoEvvu7w=)
3: Oo3ap3FWMfZFuKT_5X4cPgbvWBY.roa (hash: SClF6a/p5GxrqHhEbYnu5sljGKEXM6UG1fAy0VW6itY=)
4: Q8FllZZq-wus8deTfyRdagUiIaM.crl (hash: 3FH2QiaC/UWVCA9qbQ/LF7RjJu/F9qhOYcD9o1Ee8Hs=)
5: ZoLYEk24uuNv33EjJ4m1okSNS6w.roa (hash: aOyue5Aqc/KW4Mnoyy7ahJjLtcQmVKEsi36/Y3I9yHA=)
6: aj9euBKzI3NIH66jZPh8bbmGI6A.roa (hash: 8jTNJ61hr37vcKXTL8TlYqDMnFRq1ith6TwEVeBelwE=)
7: nH1OKpXJbAvAHxN6XWdXMd6gZuY.roa (hash: j3S1I730IB3QQneXnDNotR19hJRoRUA2SbUVmp/YndQ=)
8: ottEKlKze703Xucot2ljZZmoong.roa (hash: 1DtEnDgUDcQi4vqWCrTRW5+Lsqb1kTbcbswrOF8wGaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:22:48:93:c1:fa:cf:83:4c:42:bf:0b:05:90:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c16595966afb0bacf1d7937f245d6a052221a3
Validity
Not Before: Jul 28 19:01:07 2026 GMT
Not After : Jul 29 19:01:07 2026 GMT
Subject: CN=1ff7c0eedd019f027d3949fe75b7a90a1b65cb91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cf:84:cc:da:ab:cc:71:9a:e8:69:21:bc:31:
e9:bc:49:3a:7f:53:62:ba:4e:53:24:5e:fd:58:cf:
4a:89:08:dc:a0:d5:36:0e:93:b1:62:1c:0f:59:02:
88:f2:c3:3a:9e:ec:fc:20:73:fb:c3:d7:05:9f:97:
ef:f3:91:68:50:e7:e0:bf:46:3f:71:f6:0c:82:51:
27:79:f4:86:17:43:e8:31:e6:1e:88:70:b5:f3:91:
d6:33:a2:70:62:f7:42:d6:ab:76:03:79:f6:26:51:
e1:67:70:c2:46:66:35:5c:1b:f3:53:8c:f8:6c:f7:
60:5f:bc:12:6d:7d:43:a4:2c:c1:61:4a:1b:71:cb:
5f:13:4c:e9:6b:9d:80:5f:1c:74:dd:26:3c:78:fa:
54:b2:70:28:70:0d:48:4d:15:9f:10:b6:d0:14:42:
d3:f9:ac:d9:82:14:10:ef:69:51:79:3a:25:61:54:
f6:10:64:5e:ca:8d:d7:a0:48:26:c0:95:a0:9b:c7:
5a:d7:ef:68:39:70:34:86:db:1d:ef:73:0b:a0:bd:
04:c3:57:f7:94:52:f0:63:71:31:1b:64:47:20:e4:
76:b5:00:8d:23:07:76:e5:14:1d:d5:ec:9d:15:9d:
97:df:b7:9a:29:01:3b:51:cb:18:b7:6d:2f:3f:cc:
8c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F7:C0:EE:DD:01:9F:02:7D:39:49:FE:75:B7:A9:0A:1B:65:CB:91
X509v3 Authority Key Identifier:
keyid:43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:6d:8e:04:39:8a:78:45:6b:20:e4:6b:77:3e:98:b2:f3:b9:
c4:71:a2:e8:a7:34:4b:83:c6:53:f5:fd:7d:95:39:a0:61:b9:
f8:b9:f5:31:bd:9b:74:67:04:82:dc:e7:b2:63:23:b8:fb:1a:
aa:ae:20:30:f5:d2:eb:fb:53:05:b2:b1:a2:c6:7f:08:ad:54:
ac:30:74:5c:c9:33:7d:8a:9b:ca:84:f2:8f:60:1d:2b:0d:42:
bd:c8:16:23:90:4c:ed:41:c6:9e:15:e6:93:7b:81:06:e7:61:
d1:8c:ca:4e:0a:fc:b1:aa:18:cd:2e:91:ea:15:7c:71:0e:f4:
d2:f7:b6:f0:84:d5:6e:01:ba:8f:c8:e0:72:ec:18:3b:51:a2:
76:84:a1:20:06:ad:a2:bb:1b:d9:6e:76:85:37:1a:cf:6a:7e:
0d:c5:ea:07:e6:06:3d:5d:bb:38:1f:5c:52:9e:99:98:91:aa:
44:0c:c2:02:46:79:c8:6e:02:f7:aa:f4:16:7d:e8:da:35:32:
76:77:ce:3c:37:55:d4:fd:59:e9:60:5b:72:eb:b6:ee:95:36:
7b:0c:26:ab:c0:2e:0d:9c:9b:ca:03:fd:91:18:43:a6:04:28:
1c:44:15:2f:45:4e:34:23:39:c6:d3:b8:c4:e6:1c:04:14:f2:
00:68:5e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:11:24 2026 by rpki-client