Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
File: Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft (raw, json)
Hash identifier: aGa1VT7mVHJhkSA2t1CAUoOdCkhXjNio2BSIBMw3P6I=
Subject key identifier: F5:26:B5:3B:F6:AB:A9:D2:2D:E8:25:08:72:6D:C2:5A:A1:AC:BF:18
Authority key identifier: 42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
Certificate issuer: /CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Certificate serial: 019FA1BB5088C2E22366A8BAB81675D7AAD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
Manifest number: 19D7
Signing time: Mon 27 Jul 2026 04:00:35 +0000
Manifest this update: Mon 27 Jul 2026 04:00:35 +0000
Manifest next update: Tue 28 Jul 2026 04:00:35 +0000
Files and hashes: 1: Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl (hash: hHbvDXsQBBVmRxATDYzjRYJOTcbJ4O1aeyqqPheAhXU=)
2: wSVDY4D_BTNkmAglY_HeZ285NQM.roa (hash: ZEnBPvLpoohK2SLbOe4ksZss1TrPkGCglvZY4UbgGD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:50:88:c2:e2:23:66:a8:ba:b8:16:75:d7:aa:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Validity
Not Before: Jul 27 04:00:35 2026 GMT
Not After : Jul 28 04:00:35 2026 GMT
Subject: CN=f526b53bf6aba9d22de82508726dc25aa1acbf18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a1:4f:97:36:8b:33:d0:ef:a5:2d:29:70:e7:
66:0b:85:95:da:88:a5:3f:22:99:e7:63:a3:33:df:
58:6c:fe:8c:a9:07:18:06:f5:18:71:13:cf:13:a9:
37:f8:81:8a:53:20:62:b5:c0:67:d6:56:9f:47:24:
70:90:9e:9b:e0:2f:90:e0:7c:64:62:04:e1:70:ef:
ea:61:88:43:e4:17:17:68:f7:93:73:db:9b:b2:ca:
03:1d:c1:57:f9:c4:cf:33:68:c4:69:30:fa:ea:f5:
21:0e:dc:83:bd:b8:01:5c:ef:0f:88:98:a1:06:cc:
d2:11:a7:fc:ea:31:ce:4e:15:f5:88:b4:76:87:19:
af:00:ff:9c:ff:80:12:90:60:a0:be:c0:8f:10:e9:
20:90:e4:69:6c:39:8f:15:91:ec:39:73:5e:94:d8:
52:3b:e6:67:cf:f9:57:1a:32:df:24:88:03:7c:24:
8e:26:60:39:25:8f:6e:f9:e2:e2:ee:cc:8f:97:b2:
cc:6e:d5:4a:f4:6b:f2:64:7d:31:6a:f8:69:fa:80:
38:f9:f1:95:25:dd:18:c2:8d:2f:a1:e9:01:fc:8d:
a0:c0:54:89:6f:38:a3:e9:9f:06:c9:2e:cb:0d:47:
e9:95:42:c0:1f:ce:c4:f0:12:cc:de:75:ad:71:08:
d5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:26:B5:3B:F6:AB:A9:D2:2D:E8:25:08:72:6D:C2:5A:A1:AC:BF:18
X509v3 Authority Key Identifier:
keyid:42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:71:7c:81:cb:71:3e:ea:86:4b:a8:0d:0a:3c:16:ca:c7:b3:
10:ca:79:f2:0c:b6:85:f5:c3:87:b5:73:be:93:97:16:ca:f9:
14:b6:c3:72:a3:5c:a3:8c:db:03:4f:07:0b:a0:e7:bc:68:85:
f5:42:86:2d:4b:fc:32:1d:b1:9a:38:98:49:06:d6:7e:97:8c:
2a:63:dd:f9:e1:43:58:91:fe:49:bc:ad:e4:05:07:24:10:58:
90:31:11:40:14:66:5d:88:dd:bc:ce:dd:6b:b6:0c:bf:25:d2:
0d:0d:a1:b4:f0:18:71:85:e5:0b:e1:e4:71:2a:41:80:e3:2d:
67:56:86:5b:72:80:7a:12:dc:de:f3:45:1c:78:06:b9:1a:b3:
3c:a1:fb:0f:e4:7b:0e:3f:61:1b:15:01:b1:10:0b:22:6e:49:
04:1f:85:75:59:e5:73:cc:6f:93:fe:aa:f4:bb:36:8c:dc:cd:
95:d3:50:25:68:c5:11:18:95:c4:0f:54:84:67:74:e2:c4:7b:
89:37:ea:0e:02:27:b4:91:4c:5a:88:ad:fa:0a:4a:9d:da:8a:
bf:52:87:96:d7:ba:d3:0a:47:54:6f:2c:ee:ca:2f:b1:4a:dc:
c3:cd:a3:7e:b7:2c:1c:06:b7:38:c9:9c:02:01:20:30:58:59:
f0:7c:9b:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hu1CIwuIjZqi6uBZ116rZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyY2RlMzY1ZDdkMmI1ODUwNmU0ZDRhYmYwYzJlZjdjZDVl
M2I0NjIwHhcNMjYwNzI3MDQwMDM1WhcNMjYwNzI4MDQwMDM1WjAzMTEwLwYDVQQD
EyhmNTI2YjUzYmY2YWJhOWQyMmRlODI1MDg3MjZkYzI1YWExYWNiZjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKFPlzaLM9DvpS0pcOdmC4WV2oil
PyKZ52OjM99YbP6MqQcYBvUYcRPPE6k3+IGKUyBitcBn1lafRyRwkJ6b4C+Q4Hxk
YgThcO/qYYhD5BcXaPeTc9ubssoDHcFX+cTPM2jEaTD66vUhDtyDvbgBXO8PiJih
BszSEaf86jHOThX1iLR2hxmvAP+c/4ASkGCgvsCPEOkgkORpbDmPFZHsOXNelNhS
O+Znz/lXGjLfJIgDfCSOJmA5JY9u+eLi7syPl7LMbtVK9GvyZH0xavhp+oA4+fGV
Jd0Ywo0voekB/I2gwFSJbzij6Z8GyS7LDUfplULAH87E8BLM3nWtcQjV1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPUmtTv2q6nSLeglCHJtwlqhrL8YMB8GA1UdIwQY
MBaAFELN42XX0rWFBuTUq/DC73zV47RiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXMzalpkZlN0WVVHNU5TcjhNTHZmTlhqdEdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC81NDAxOGMtMDFlOC00MTdmLTg1NmEt
MDJlMWJkNjA1MGU1LzEvUXMzalpkZlN0WVVHNU5TcjhNTHZmTlhqdEdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC81NDAxOGMtMDFlOC00MTdmLTg1NmEtMDJlMWJkNjA1MGU1
LzEvUXMzalpkZlN0WVVHNU5TcjhNTHZmTlhqdEdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhHF8gctx
PuqGS6gNCjwWysezEMp58gy2hfXDh7VzvpOXFsr5FLbDcqNco4zbA08HC6DnvGiF
9UKGLUv8Mh2xmjiYSQbWfpeMKmPd+eFDWJH+Sbyt5AUHJBBYkDERQBRmXYjdvM7d
a7YMvyXSDQ2htPAYcYXlC+HkcSpBgOMtZ1aGW3KAehLc3vNFHHgGuRqzPKH7D+R7
Dj9hGxUBsRALIm5JBB+FdVnlc8xvk/6q9Ls2jNzNldNQJWjFERiVxA9UhGd04sR7
iTfqDgIntJFMWoit+gpKndqKv1KHlte60wpHVG8s7sovsUrcw82jfrcsHAa3OMmc
AgEgMFhZ8HybJQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 09:17:14 2026 by rpki-client