Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
File: Qkq4x890A7ViChuBPmrR2g2stE0.mft (raw, json)
Hash identifier: VqbJkY1w0x3gYSMxdoZpUFfJqYttz/dFBpQzdgZcMjg=
Subject key identifier: 4B:31:38:6F:06:43:D4:07:3E:26:EF:55:2E:9D:E6:D6:89:27:22:03
Authority key identifier: 42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D
Certificate issuer: /CN=424ab8c7cf7403b5620a1b813e6ad1da0dacb44d
Certificate serial: 019F848D03BF77C64AFEE7141342C382E45E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
Manifest number: 19C2
Signing time: Tue 21 Jul 2026 12:01:01 +0000
Manifest this update: Tue 21 Jul 2026 12:01:01 +0000
Manifest next update: Wed 22 Jul 2026 12:01:01 +0000
Files and hashes: 1: Qkq4x890A7ViChuBPmrR2g2stE0.crl (hash: tJP1u9829tazsXLCbFNsv1mGTsLYEaIUKON4kEdLJYw=)
2: dzTzYf-TKYJMVkOvvaBfstjTJ9w.roa (hash: ZIgS2/isxUOPCfVNIh153dBZ1pmUGjEqXD0BSekDaHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:8d:03:bf:77:c6:4a:fe:e7:14:13:42:c3:82:e4:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424ab8c7cf7403b5620a1b813e6ad1da0dacb44d
Validity
Not Before: Jul 21 12:01:01 2026 GMT
Not After : Jul 22 12:01:01 2026 GMT
Subject: CN=4b31386f0643d4073e26ef552e9de6d689272203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6b:52:e5:ef:52:e2:d2:1f:42:32:a0:1e:a8:
b9:48:15:db:68:e0:47:67:7d:8f:f8:15:7a:b9:1d:
ea:71:23:1b:cc:ca:e9:1d:fb:6e:51:95:ed:ee:c7:
f6:ca:45:a0:50:1f:15:67:13:f7:3b:74:82:cc:8d:
a3:b0:33:4a:93:69:a0:21:34:bf:a9:08:a2:02:e8:
f3:b7:4f:3f:eb:c7:e6:6a:d2:0f:0f:26:f4:25:98:
8f:37:a2:76:73:36:47:f3:a4:e8:1b:6f:98:cc:be:
f1:92:4c:98:8b:86:86:77:7b:d6:1f:75:3f:f9:3f:
2f:72:c6:ec:cb:e8:70:e8:f6:e9:75:62:97:4a:1c:
88:36:25:82:31:15:67:26:1b:68:41:72:ca:41:bf:
8f:85:aa:74:39:75:dd:8b:5c:4a:a2:68:06:37:98:
8d:a8:bb:91:6f:f4:ed:42:2d:1d:21:d8:11:89:20:
54:8e:c6:ce:24:06:c7:bd:3d:01:ec:9e:ae:b6:22:
68:de:24:3e:0d:68:84:d5:72:5d:39:76:a5:b4:d6:
c0:93:7a:9f:9f:82:61:50:84:5b:72:db:80:0d:51:
08:a4:4a:ad:d7:fe:89:5f:27:e0:fa:00:f2:89:88:
b5:6c:10:23:bc:44:19:49:13:54:82:33:81:b1:36:
0f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:31:38:6F:06:43:D4:07:3E:26:EF:55:2E:9D:E6:D6:89:27:22:03
X509v3 Authority Key Identifier:
keyid:42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:74:83:9a:3e:3c:7c:79:65:bf:f6:8f:11:bc:9e:c1:2f:d8:
28:66:02:60:76:48:1a:13:26:62:e2:2a:3f:d8:17:a4:67:23:
c9:66:59:fb:fe:b0:b1:57:8d:5a:03:c6:36:da:9d:02:97:24:
70:de:69:5f:6c:75:fd:bd:b8:a3:5f:21:8c:e0:5a:12:1a:f3:
f5:2a:45:10:8b:a7:91:e2:9c:76:13:25:90:3a:d1:dc:47:bc:
2c:f1:c0:69:97:93:3f:f8:60:87:a4:61:6b:dd:c3:3d:c6:48:
64:d6:b0:93:e8:6b:2b:ed:ae:50:26:3c:45:65:76:5e:1c:3e:
c1:e5:b6:b2:07:e1:a2:dc:f4:b3:52:7f:ba:27:4e:08:83:c0:
b4:de:0a:8a:1b:f6:f2:ea:25:3c:3e:ba:81:23:3e:17:35:f8:
07:22:d1:e4:b1:69:af:2f:fb:50:7d:cc:55:33:6f:61:17:da:
df:0a:88:69:81:2c:05:86:11:3a:66:9b:51:68:6b:5b:af:fe:
f5:1d:26:43:63:8b:52:c0:4c:b0:fe:fa:0d:a8:f0:ed:c7:7a:
8e:81:84:9c:b6:e0:8d:e0:a9:22:b6:ef:c5:6e:be:8b:01:9b:
83:55:0d:bc:bf:49:b4:eb:24:47:4b:78:80:e8:6f:e6:94:49:
54:9a:f3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:12:57 2026 by rpki-client