Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
File: Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft (raw, json)
Hash identifier: /FnSkntE/ARNbKoXWfhVD8sqWoHNcqjXh/EjohfXloo=
Subject key identifier: 4F:11:11:F0:5D:5D:E7:E3:DF:A4:BF:66:8B:CC:11:4A:1F:F7:BE:4C
Authority key identifier: 42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
Certificate issuer: /CN=428df99824ce67b0cb5f87fc46599e13adea5702
Certificate serial: 019FAC08489D3F662DAF8766922CB598905A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
Manifest number: 19D8
Signing time: Wed 29 Jul 2026 04:00:51 +0000
Manifest this update: Wed 29 Jul 2026 04:00:51 +0000
Manifest next update: Thu 30 Jul 2026 04:00:51 +0000
Files and hashes: 1: PwXZ36ew-cUGZEoEjPsdiwlwGDg.roa (hash: nvE+bb5C5rtF8YiUnSsjumFKZwx9bfJMyTTo8X52rsc=)
2: Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl (hash: XrmoqJt6zwr8UpIirh7K1NNSzUiNIEh9muoPu/m2ivM=)
3: xtfoGeIECTpdCbZHNkFP50BN1MA.roa (hash: Z1lBrIMUzn5W9YhrUqvcchRAFUBJEphcXoXllZ4p86k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:48:9d:3f:66:2d:af:87:66:92:2c:b5:98:90:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=428df99824ce67b0cb5f87fc46599e13adea5702
Validity
Not Before: Jul 29 04:00:51 2026 GMT
Not After : Jul 30 04:00:51 2026 GMT
Subject: CN=4f1111f05d5de7e3dfa4bf668bcc114a1ff7be4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d0:e8:56:a3:6d:17:f3:0c:f5:ac:99:c1:9b:
15:58:e4:4e:4b:03:f8:d2:e1:04:63:12:e6:49:d4:
48:9b:d6:03:0d:c4:fb:59:35:9b:93:5f:23:8b:6e:
51:2b:6f:fc:a0:cf:25:af:e1:06:00:54:74:3d:4f:
df:36:c0:21:b7:7e:3b:62:c7:3f:63:45:f2:58:81:
c1:ba:2d:47:8f:80:76:54:5f:6d:aa:51:08:d2:ad:
9c:8f:ce:56:f8:04:27:06:9c:96:4e:94:71:27:81:
e9:8c:d9:25:83:95:5c:4e:0f:26:eb:74:e7:75:25:
e8:75:02:97:32:c3:e3:ae:a1:10:1c:57:d2:90:82:
cd:e9:e9:66:ec:ab:04:1e:9d:10:70:10:75:32:8b:
e2:6f:6b:92:f9:27:f9:44:53:fe:a3:06:3a:a0:9a:
99:b7:c2:75:d9:79:c4:d8:7a:58:6b:b3:35:25:73:
d2:b9:8e:2c:e7:97:04:5c:a4:d0:51:1d:9a:59:5d:
06:df:06:e2:ba:14:df:b7:a4:83:9e:67:4b:b9:fc:
0b:8a:75:44:ab:6b:f7:bd:72:4b:d4:14:22:bf:48:
04:ba:6e:41:44:d4:f6:fd:1b:68:0e:ec:bb:f8:c6:
fc:a9:9d:8e:6f:41:f1:81:1d:e3:fc:f0:10:b9:18:
6d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:11:11:F0:5D:5D:E7:E3:DF:A4:BF:66:8B:CC:11:4A:1F:F7:BE:4C
X509v3 Authority Key Identifier:
keyid:42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:55:ed:fa:a7:99:26:85:82:3b:a2:9d:e5:ca:b4:cb:bc:ef:
0d:05:bd:2d:77:49:d7:a1:8d:f7:52:97:63:b6:d4:8d:06:67:
9c:79:13:c9:7e:2f:58:e8:64:79:fa:f3:8b:5d:7e:59:69:78:
78:7d:7a:b8:12:11:94:4a:b3:b4:95:14:90:bb:23:4c:4a:71:
04:49:20:42:9a:d7:06:1d:6e:7a:7c:2e:44:e7:17:27:7b:d4:
91:74:eb:fd:87:e0:3b:07:e2:e7:be:03:7c:95:93:19:aa:c9:
ec:2d:81:50:a3:f6:fe:c0:4b:52:d9:4d:36:a6:a6:1e:96:82:
87:7f:45:8e:26:c7:22:8e:f1:d7:9e:7c:6b:b3:f6:e8:cd:55:
97:86:02:85:1e:ac:67:d8:e7:94:e2:12:00:08:11:fa:2b:1e:
41:d0:de:fc:f9:18:40:d5:46:c4:63:6f:8d:e7:17:d2:a2:5e:
a9:48:63:50:54:95:ae:a6:73:e5:5a:45:5e:be:0f:bc:3c:01:
cd:28:07:94:d2:ec:9b:cf:03:78:d3:15:cc:b2:d0:7d:f6:c7:
54:ad:02:40:f3:e5:c1:8f:14:95:16:79:6b:49:54:f5:b5:01:
87:fd:8e:03:57:7e:9d:df:aa:ea:3b:a0:7e:6a:31:58:e0:96:
69:33:90:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:39:40 2026 by rpki-client