Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b3633c-b196-4f46-9203-9b1f59dfc234/1/b0QMAYVEBQ5c7QJSCA9-g0iwCjI.mft
File: b0QMAYVEBQ5c7QJSCA9-g0iwCjI.mft (raw, json)
Hash identifier: iQM6gSfgoWdw2nSPFfhUKh5xJqw1HEAmTpYq8hfxpzk=
Subject key identifier: 36:AF:CF:D8:FD:5D:76:33:1B:F3:D0:C6:E6:29:F1:CE:95:34:59:9A
Authority key identifier: 6F:44:0C:01:85:44:05:0E:5C:ED:02:52:08:0F:7E:83:48:B0:0A:32
Certificate issuer: /CN=6f440c018544050e5ced0252080f7e8348b00a32
Certificate serial: 019F8AFCC3614AF9FEF032A0129DA17C36F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0QMAYVEBQ5c7QJSCA9-g0iwCjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b3633c-b196-4f46-9203-9b1f59dfc234/1/b0QMAYVEBQ5c7QJSCA9-g0iwCjI.mft
Manifest number: 18
Signing time: Wed 22 Jul 2026 18:00:48 +0000
Manifest this update: Wed 22 Jul 2026 18:00:48 +0000
Manifest next update: Thu 23 Jul 2026 18:00:48 +0000
Files and hashes: 1: ZoXrRfWrrJXLAioBfIjygh-8ZQA.roa (hash: G56zwdeM+Qud7Xg+NTn3viHBA8F6OeDVBMXlq493+2c=)
2: b0QMAYVEBQ5c7QJSCA9-g0iwCjI.crl (hash: 5Cnek3M7pFdpCgLrOMqQurctOe9FbKKm6O3pMYKStNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b3633c-b196-4f46-9203-9b1f59dfc234/1/b0QMAYVEBQ5c7QJSCA9-g0iwCjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/b3633c-b196-4f46-9203-9b1f59dfc234/1/b0QMAYVEBQ5c7QJSCA9-g0iwCjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/b0QMAYVEBQ5c7QJSCA9-g0iwCjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:fc:c3:61:4a:f9:fe:f0:32:a0:12:9d:a1:7c:36:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f440c018544050e5ced0252080f7e8348b00a32
Validity
Not Before: Jul 22 18:00:48 2026 GMT
Not After : Jul 23 18:00:48 2026 GMT
Subject: CN=36afcfd8fd5d76331bf3d0c6e629f1ce9534599a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:de:6f:be:9d:be:cf:c1:52:21:c1:cd:09:07:
2e:bf:25:1e:67:42:0d:0b:7f:4e:53:cd:2a:e9:72:
ed:76:c0:09:83:02:46:7e:e2:bf:ef:07:e1:d8:67:
5d:23:75:ae:95:b6:2e:71:16:a7:a6:dc:3b:35:9b:
c7:bc:b8:7e:cc:16:fa:80:1a:01:3d:f4:07:ee:a7:
eb:98:dd:7c:7c:a1:cf:7f:4e:2d:1f:47:ae:53:9b:
5c:aa:4d:20:4f:7e:8c:1e:23:f9:51:10:f2:99:13:
d5:78:49:e8:94:47:c5:2b:a9:a7:4e:ab:cc:2b:42:
df:11:46:9f:bb:ef:23:02:5c:0e:f0:44:47:79:6c:
19:c4:14:3b:d8:5f:b8:b4:6c:b4:1f:39:88:5c:2b:
e6:e7:db:27:e8:06:d3:05:0e:7b:8e:7c:82:80:54:
84:8f:e4:dd:75:31:77:76:66:d6:02:73:40:78:c6:
fd:fe:f1:45:da:30:65:2e:a7:94:6e:da:f8:2d:81:
e3:2c:43:23:8d:36:12:15:8a:91:95:69:82:f8:b1:
8e:e0:aa:15:ce:7f:91:9a:4d:ac:c3:c2:23:1c:9a:
90:d6:4a:45:6c:5a:f4:4f:85:f9:63:6f:95:29:77:
36:88:5c:e8:01:b5:69:d4:2d:9c:53:25:4a:b6:96:
d3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AF:CF:D8:FD:5D:76:33:1B:F3:D0:C6:E6:29:F1:CE:95:34:59:9A
X509v3 Authority Key Identifier:
keyid:6F:44:0C:01:85:44:05:0E:5C:ED:02:52:08:0F:7E:83:48:B0:0A:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0QMAYVEBQ5c7QJSCA9-g0iwCjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3633c-b196-4f46-9203-9b1f59dfc234/1/b0QMAYVEBQ5c7QJSCA9-g0iwCjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3633c-b196-4f46-9203-9b1f59dfc234/1/b0QMAYVEBQ5c7QJSCA9-g0iwCjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:3b:2b:36:af:50:db:9d:8f:2e:d5:5f:af:07:9c:f2:88:f5:
93:2a:14:d4:a3:54:d0:09:35:27:6d:4e:81:85:1f:49:b5:df:
54:1a:e5:23:54:2e:a7:0b:4a:0d:9d:96:bc:c9:ae:00:d3:e2:
ad:85:22:4b:c5:31:87:ba:4b:dd:da:93:82:81:93:7e:53:42:
90:cc:32:ef:54:d4:82:72:9c:0f:49:cd:41:5e:d4:58:ef:05:
06:b7:f9:f1:ed:09:04:48:c4:81:08:3e:57:e3:37:a1:73:d9:
27:05:7c:d1:1b:0a:03:39:83:ee:f4:c4:4a:04:d8:7b:db:d5:
d2:69:65:6e:4f:71:4d:08:ca:04:03:5d:bb:7b:eb:05:c7:25:
b1:7e:1b:fd:2f:66:27:f7:fe:93:f6:ff:50:ac:20:14:18:e3:
d1:0d:ec:6d:71:d9:3f:eb:44:26:31:fb:35:31:5e:cc:7b:e5:
88:be:35:cc:45:06:c6:e5:ed:a0:e0:27:33:89:11:8a:7b:92:
b3:97:41:f3:2a:ce:65:3a:f4:3a:82:6f:71:f4:65:71:bb:72:
cf:eb:b3:29:58:19:85:7c:e5:a5:02:11:f0:04:8a:22:8b:d3:
7d:24:68:c5:26:4f:ca:18:86:92:d3:78:01:98:4a:06:c9:27:
7b:73:1e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 23:07:45 2026 by rpki-client