Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
File: Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft (raw, json)
Hash identifier: AlVI7F6DxqAKuyQnaHb7hU7F2Q3O2/loHN9e3gStdxk=
Subject key identifier: F7:37:FB:19:76:12:9F:84:5F:B7:8A:F9:B8:51:53:CB:D7:D7:58:38
Authority key identifier: 43:67:54:7D:85:1E:3C:D7:76:CD:33:29:0B:24:54:AC:C0:E8:51:BB
Certificate issuer: /CN=4367547d851e3cd776cd33290b2454acc0e851bb
Certificate serial: 01A024A099CCAB5A5F8B0E65A7CC431FE8BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
Manifest number: 069B
Signing time: Fri 21 Aug 2026 14:01:39 +0000
Manifest this update: Fri 21 Aug 2026 14:01:39 +0000
Manifest next update: Sat 22 Aug 2026 14:01:39 +0000
Files and hashes: 1: 5sjVZOffDC3SdMXl3xj-LISTTRA.roa (hash: NgYO+E9uip8I6LBuV26/SjtRZiAA/mIEsqO23fxRKZo=)
2: Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl (hash: qQX+XOm0LqT9I4jkdGaQYhsuHp7R5jZ5391wOYXU3q8=)
3: UZ8MoagtWKlsIsRGsjso-iozLGw.roa (hash: dnetz1uWniSUYV1OlTPjy0Ix9dXrnsa95CDJdNzqlUI=)
4: _PN_oCivSa6SCwOfHRvwn1IYBgQ.asa (hash: 2M4AXv8yl0hWjN/wepg6vu4DidwOliFRGd1ExPxEg/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 14:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:a0:99:cc:ab:5a:5f:8b:0e:65:a7:cc:43:1f:e8:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4367547d851e3cd776cd33290b2454acc0e851bb
Validity
Not Before: Aug 21 14:01:39 2026 GMT
Not After : Aug 22 14:01:39 2026 GMT
Subject: CN=f737fb1976129f845fb78af9b85153cbd7d75838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:37:9e:ad:28:af:fe:68:f9:a6:39:0c:88:d5:
e2:66:cc:34:fe:20:68:3f:f2:9d:49:fa:d0:f6:67:
67:cf:72:4d:6d:61:ad:ab:97:c7:6d:69:cf:b4:73:
4e:0c:c6:19:d5:a5:9e:55:cd:2a:e1:85:40:9a:2f:
ad:2c:9e:20:53:6b:92:24:6a:b5:f0:81:58:4e:75:
e6:f8:8d:1f:eb:5b:cc:7d:f0:5e:07:8e:83:30:a6:
8c:7e:63:9d:01:f5:58:bc:07:c7:2e:a0:bc:30:8b:
f1:b4:3a:0d:4b:18:2b:b2:8e:86:b7:84:37:ca:98:
e0:f9:79:ca:49:85:ef:a9:b5:bc:77:29:84:b9:3f:
77:27:39:a4:76:ea:10:12:c7:d1:b6:eb:8d:d8:71:
ff:d1:d2:5d:f5:d9:45:a9:79:8d:e7:2a:8a:ce:ce:
e0:0f:43:9b:16:31:30:42:e7:15:f3:cf:62:72:58:
af:ea:5e:af:28:2e:a6:bd:ff:e3:76:fa:bb:c4:64:
cc:65:cf:17:73:51:7e:da:e7:d4:92:48:16:ba:25:
24:a8:16:34:44:80:6d:6c:06:b3:42:5b:32:9c:89:
f2:8f:8b:0f:99:18:d9:79:42:a3:ce:1c:3a:9b:02:
cf:46:02:c4:95:d4:05:21:f7:f4:bc:ff:30:ac:9f:
0c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:37:FB:19:76:12:9F:84:5F:B7:8A:F9:B8:51:53:CB:D7:D7:58:38
X509v3 Authority Key Identifier:
keyid:43:67:54:7D:85:1E:3C:D7:76:CD:33:29:0B:24:54:AC:C0:E8:51:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:49:87:3e:fc:a1:02:ce:9b:d3:86:1a:46:ec:7e:f2:04:42:
f3:51:6e:3d:8e:9e:f7:3d:c0:0d:29:28:99:8c:8b:5d:e4:12:
e0:ba:c9:c9:b0:27:92:60:5c:d6:72:80:a3:3b:f3:30:51:71:
9e:2d:89:3e:6f:15:53:76:0b:e2:68:a3:05:df:c7:c3:8c:a2:
0f:91:a1:73:8e:19:45:af:2d:df:98:1d:8c:bc:0d:71:58:d0:
5e:35:8d:ee:36:a2:70:4f:43:01:15:13:bd:41:10:d0:d7:bf:
d6:6a:1d:92:bb:8d:e9:f6:92:a9:90:5c:d9:54:99:66:0c:a7:
03:49:4b:73:e8:7c:d0:9e:29:a7:e5:17:5c:68:15:30:79:a5:
ab:10:7b:dd:53:2e:94:06:ce:01:ba:c5:01:df:4b:05:ef:c8:
57:81:2f:cc:93:a1:51:ce:75:f1:49:50:c9:bb:12:95:10:64:
13:e9:99:60:8f:d4:4a:98:2a:af:b4:f5:e0:97:c5:6c:ae:8a:
79:fb:88:37:67:18:6b:09:1d:26:33:e3:c9:87:07:00:1d:09:
d0:4a:34:8d:8a:94:8c:db:2c:d3:b2:48:89:26:17:c9:10:77:
e8:8d:b4:dc:5f:90:f3:2b:fc:07:7e:8b:88:fd:5c:b2:6b:62:
05:1a:7c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:08:27 2026 by rpki-client