Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
File: Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft (raw, json)
Hash identifier: Go/7h+FjgW9+d9scwdS+g0x8wwUNvMX1lHigonLX3SI=
Subject key identifier: 0E:1B:02:9D:59:72:16:BC:9A:6F:D3:95:50:3D:EE:7C:4C:9E:CD:96
Authority key identifier: 42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
Certificate issuer: /CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Certificate serial: 01A01FB0220AB6638BB028BB4CAADCCC8C0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
Manifest number: 19B4
Signing time: Thu 20 Aug 2026 15:00:31 +0000
Manifest this update: Thu 20 Aug 2026 15:00:31 +0000
Manifest next update: Fri 21 Aug 2026 15:00:31 +0000
Files and hashes: 1: 1F0qNclB-ExLPCiSnNcthE_r9_c.roa (hash: QwRMn3gGPVZpUlUuvzTrMdSUvfPfsQVqSl97mHjUskQ=)
2: Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl (hash: 6tdrsqj0rRRoW6LSW8VLMstSkR3AKQeTuZ5qaAlndhU=)
3: _s2E7cG2qJT_qVlZ8vFtiTxO8qY.roa (hash: Ywl3/rT3Yvc6PwS517NtDKZMtBFZBCISKDYA9P6DLWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:b0:22:0a:b6:63:8b:b0:28:bb:4c:aa:dc:cc:8c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Validity
Not Before: Aug 20 15:00:31 2026 GMT
Not After : Aug 21 15:00:31 2026 GMT
Subject: CN=0e1b029d597216bc9a6fd395503dee7c4c9ecd96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:83:a1:44:0b:91:35:9e:05:37:d5:d1:fc:19:
5a:2b:7c:ab:03:46:d6:be:ef:04:18:2c:f6:43:4c:
2d:64:78:37:55:75:fb:05:77:60:d2:f9:77:b1:70:
ab:95:f6:fe:8a:7b:ab:a9:76:9f:3d:a4:29:7b:23:
00:bb:6a:ad:3d:2b:8e:de:62:be:66:ce:e2:61:5f:
2f:b1:12:e1:ee:b4:e2:52:e9:95:c3:91:97:e7:2f:
0d:95:f5:f9:db:78:16:e6:50:13:09:cb:da:71:9f:
9f:84:d0:d1:35:9f:0d:11:63:1e:35:ad:76:d3:c5:
ef:a9:02:da:c3:0e:f6:d3:a2:e2:6e:ab:24:20:54:
35:6c:a4:ff:17:1c:e7:e2:fa:bf:75:86:f9:89:db:
7a:1d:50:9c:20:f6:23:6f:d7:ad:df:6e:4b:05:30:
b5:45:69:76:0a:a6:d6:5e:3d:2e:0a:f8:85:b1:3f:
3d:19:cc:42:34:24:13:e0:81:10:0d:98:2e:70:a1:
2e:8b:28:75:6e:90:d9:da:10:3b:91:52:f9:70:ea:
3f:d1:c6:ab:88:51:4c:b4:35:c1:86:4a:db:cc:64:
46:d0:cf:12:f4:fe:af:f8:c8:bb:74:ee:05:f2:eb:
c8:14:09:92:98:02:00:88:17:56:09:31:be:3a:55:
0c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1B:02:9D:59:72:16:BC:9A:6F:D3:95:50:3D:EE:7C:4C:9E:CD:96
X509v3 Authority Key Identifier:
keyid:42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:51:32:af:a9:10:d1:38:48:74:c9:ab:94:7d:2c:cc:54:a2:
e1:88:00:8f:9a:1d:34:4b:6b:93:f2:a2:e3:84:aa:d8:80:9a:
0e:18:59:28:9e:82:62:0d:de:b1:c7:99:4f:0a:5a:a2:a7:7d:
ca:0b:70:94:6d:e4:eb:8c:c6:2c:8f:ae:38:26:d4:b5:9e:37:
1d:94:75:a7:6b:f2:db:8c:4b:ff:25:dc:8c:f4:21:48:78:42:
27:11:e9:27:12:09:9c:fc:d8:04:7c:10:f3:b5:3e:67:86:6a:
52:73:aa:d6:fd:10:56:ea:46:f0:d1:3d:7e:d4:87:52:ed:87:
06:da:c4:be:68:4e:b4:cf:3e:cb:59:6e:fc:ab:89:6d:be:1b:
43:16:0b:d0:ae:1a:b6:5f:2e:58:ad:96:eb:7e:cc:3a:57:52:
f4:c8:29:25:59:0d:d7:f3:a3:b3:97:80:ed:1c:f3:86:10:3f:
5e:b2:e1:36:66:de:69:c8:c4:ed:a7:29:65:21:9b:af:ba:ea:
f5:08:21:7a:f8:b6:38:ee:93:6b:1d:dd:8c:1d:3a:5e:6e:a7:
94:77:7a:5d:41:c6:32:81:da:c6:56:35:f6:60:2a:ef:2c:3c:
28:55:79:c6:3a:e8:46:75:18:23:75:43:0f:68:00:fa:13:bd:
24:7a:8f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:56:39 2026 by rpki-client