Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
File: qT4365yxmDJdZWZzKJJY0o6587g.mft (raw, json)
Hash identifier: zzwg6eGOh5IqiDYFKkiUZWkAqFuRFKg3oer9PAaZdJw=
Subject key identifier: C9:2B:F2:F3:84:38:6E:76:0D:9E:F2:78:44:64:89:D0:41:1D:BF:81
Authority key identifier: A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
Certificate issuer: /CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Certificate serial: 019FA3A9A9B3B92DDC27884F33ED4809771F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
Manifest number: 1965
Signing time: Mon 27 Jul 2026 13:00:32 +0000
Manifest this update: Mon 27 Jul 2026 13:00:32 +0000
Manifest next update: Tue 28 Jul 2026 13:00:32 +0000
Files and hashes: 1: qT4365yxmDJdZWZzKJJY0o6587g.crl (hash: 44LEfPwQqZJFO1qMzeeWSuONIW7bbJYJIFx9R0kinF8=)
2: zkS0MtUwrQ_h652IdJT_LVppRJ4.roa (hash: SXClzu9ACUlrsWWr12HFWPaz9CkpTAyEDwuny+Lvk9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:a9:a9:b3:b9:2d:dc:27:88:4f:33:ed:48:09:77:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Validity
Not Before: Jul 27 13:00:32 2026 GMT
Not After : Jul 28 13:00:32 2026 GMT
Subject: CN=c92bf2f384386e760d9ef278446489d0411dbf81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f4:f0:58:32:d7:26:55:97:77:06:79:40:b6:
6c:c6:fd:5f:00:6a:8f:5d:d4:8f:74:de:08:37:00:
75:fc:de:97:24:69:ec:f8:c6:e6:d9:ec:be:5b:65:
ae:0c:96:ab:a3:ee:76:77:60:ad:41:60:d1:0e:20:
01:b9:ab:69:b4:1c:52:94:a3:0d:8b:9a:9a:8c:d3:
d7:fe:66:21:fa:b1:e7:0e:19:2d:ba:74:ec:04:f4:
07:2f:aa:44:fe:0f:5e:95:bd:73:71:f5:64:66:e5:
f8:96:fd:40:6a:c0:df:98:42:f8:85:a4:41:ea:fd:
09:88:90:75:d8:84:47:cb:a4:b7:a9:8b:70:f9:aa:
5d:02:23:00:27:b1:41:c6:45:8d:6c:96:27:86:55:
e8:72:f8:b5:c3:93:e3:17:81:1a:84:62:27:f8:e6:
e7:75:9a:48:4d:85:ae:8d:87:ac:a8:64:b1:2a:e5:
48:d7:07:4a:08:b5:23:57:93:c8:59:99:a1:bc:52:
fc:7f:b2:84:c0:47:10:92:98:d7:4b:a6:0d:9e:50:
92:95:7a:92:60:71:9f:7b:e7:31:3e:1f:51:84:9b:
25:80:9c:01:72:48:3d:33:5a:5c:ba:39:da:01:b0:
6d:5b:b6:f5:d2:a8:6d:8c:b5:ff:06:82:18:d1:49:
a1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2B:F2:F3:84:38:6E:76:0D:9E:F2:78:44:64:89:D0:41:1D:BF:81
X509v3 Authority Key Identifier:
keyid:A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a2:63:5c:42:16:13:79:11:8f:7d:95:f2:30:0b:5b:68:1a:
87:23:88:ec:7a:2d:2d:4b:89:77:6e:9f:4d:92:da:7e:63:b9:
09:18:8f:e6:94:cd:0a:0a:0e:22:12:59:87:c3:4a:61:5f:1b:
a5:0e:28:08:bd:ce:0e:c7:3d:f3:f2:95:e7:5b:68:8f:57:ea:
63:82:d3:ad:25:6e:34:9f:ce:44:11:a2:7c:e4:f1:03:54:52:
9d:54:c7:8e:79:b5:3d:d9:19:00:dc:44:4b:5d:4a:c4:c8:bb:
cf:5c:64:b2:56:87:9e:a1:75:7c:a5:d0:6a:b4:b1:e7:6a:0e:
3d:ce:e3:d9:7f:5c:48:a3:86:7d:04:6d:20:4a:26:aa:af:17:
2f:14:10:76:ce:9e:c0:ac:41:99:ca:52:b3:5f:c0:72:b5:aa:
8f:09:60:72:6a:7a:3f:17:a8:85:ac:2c:73:aa:75:f6:b4:86:
d4:3b:ca:ef:ab:44:32:8f:e8:4b:cd:95:54:f0:cc:c8:4d:77:
77:b6:10:e4:82:a1:79:14:08:74:4e:f0:32:48:45:d7:8b:83:
11:86:34:34:bb:3d:f9:7f:bc:dc:81:f5:c4:d0:45:5c:0a:46:
3d:21:58:b0:a2:94:5c:fe:99:96:05:54:6e:6e:b3:c7:31:bd:
3e:da:12:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:35:51 2026 by rpki-client