Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
File: QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft (raw, json)
Hash identifier: sr3y+AGkQck4lECrGVIma4wW78Sa1RqXzOptHdQT3zU=
Subject key identifier: 53:C9:9C:6D:E5:0F:60:F2:69:07:4F:22:0D:3E:25:F8:5A:46:11:CE
Authority key identifier: 41:8D:F8:68:F7:D9:E9:8D:4F:D4:1E:6D:A5:97:A2:83:C9:14:1B:44
Certificate issuer: /CN=418df868f7d9e98d4fd41e6da597a283c9141b44
Certificate serial: 019FA0E0ED53D8AEADCE686F26CE627BA9DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
Manifest number: 19D3
Signing time: Mon 27 Jul 2026 00:02:02 +0000
Manifest this update: Mon 27 Jul 2026 00:02:02 +0000
Manifest next update: Tue 28 Jul 2026 00:02:02 +0000
Files and hashes: 1: 16Of3nkjMP8UdSS9id5ZJPl_uic.roa (hash: 3kAPeMDB74ONzDFPUBPrWjZx5ADHmGueRoPekMbbEgg=)
2: QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl (hash: WMwvzBb9Gv+t+NThedbp1LOqkl3qYQGta90sK3goqMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 00:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:ed:53:d8:ae:ad:ce:68:6f:26:ce:62:7b:a9:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=418df868f7d9e98d4fd41e6da597a283c9141b44
Validity
Not Before: Jul 27 00:02:02 2026 GMT
Not After : Jul 28 00:02:02 2026 GMT
Subject: CN=53c99c6de50f60f269074f220d3e25f85a4611ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:00:d9:10:3f:66:9d:49:84:85:c6:39:7e:3a:
1b:76:b2:98:e1:0e:5b:37:13:9b:61:af:0c:d5:a9:
8b:bf:df:f0:a2:f4:ae:f2:44:bc:40:bc:b2:28:47:
1f:80:b3:82:fd:69:1e:48:0b:ab:29:89:55:e9:73:
9d:ec:b3:8a:64:83:3d:08:3d:ce:5c:8c:1e:0f:3f:
fe:04:9d:61:23:41:74:30:7a:2a:5b:99:ca:41:46:
e9:72:b2:bd:b3:96:55:aa:97:ef:eb:ef:d5:63:66:
24:6b:90:a0:06:f2:20:a0:48:d6:8b:ea:9b:55:5f:
e0:ff:62:64:6a:79:38:04:c4:97:ec:42:3c:70:e6:
27:c1:ad:70:5e:00:66:25:4b:48:20:8f:8f:4d:f3:
19:14:6a:95:71:28:3e:06:97:01:4b:4e:d8:1b:72:
3e:40:11:06:50:8f:e2:41:b4:91:e1:71:7b:ad:d6:
53:8e:c1:7d:b5:64:7c:54:fd:f7:13:02:87:ad:c5:
b6:0c:e7:e9:37:1b:ee:dd:18:2d:a2:c6:13:4d:c5:
33:4d:2e:6a:ff:11:b3:5b:5c:77:46:2c:3c:d0:ed:
ba:7c:2b:11:95:bf:c5:dc:24:d9:81:7b:83:91:cf:
68:97:56:1e:6c:ff:d2:25:e4:7e:43:09:16:19:55:
51:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C9:9C:6D:E5:0F:60:F2:69:07:4F:22:0D:3E:25:F8:5A:46:11:CE
X509v3 Authority Key Identifier:
keyid:41:8D:F8:68:F7:D9:E9:8D:4F:D4:1E:6D:A5:97:A2:83:C9:14:1B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a0:1b:4f:6c:fd:d9:06:ac:78:66:09:80:8d:30:d8:d9:64:
b6:42:b6:56:3f:3a:ad:6b:5d:bf:55:d3:5b:ed:b4:d3:05:92:
76:ba:f3:ec:e8:57:1e:c5:dd:be:3d:61:98:8b:2f:3c:b5:95:
31:79:e0:4e:70:4a:aa:65:32:d5:1e:bf:84:57:a8:e1:c3:e2:
da:46:f1:e5:5d:d0:c1:2d:28:8a:35:60:0c:a2:15:62:40:fe:
8c:4e:59:7f:da:e1:1e:8c:fe:9c:ee:a4:85:52:08:3e:48:de:
fc:b4:24:cf:bc:57:61:2c:bf:89:c6:74:d9:78:57:9d:91:24:
34:df:5d:5d:08:e1:62:26:5b:eb:64:bf:f6:d8:0b:60:1c:ad:
bb:a9:ea:68:3f:47:24:d6:aa:75:d0:a1:9c:62:e7:50:50:67:
66:c8:89:f8:17:90:4d:27:39:e0:9b:e4:8d:66:3d:5c:6e:f1:
95:f8:1b:1f:c7:83:d2:19:12:5d:f7:bb:29:54:d6:d8:b0:66:
1c:cf:23:2e:ff:73:e5:95:58:00:cd:7e:a4:c5:b4:61:3b:e4:
94:b8:e9:89:1b:bf:b2:fa:b5:e9:e1:c0:21:e5:d1:1e:cf:50:
a4:27:85:80:e3:22:b1:e7:55:c4:56:65:68:e9:bf:d4:98:a8:
fb:95:50:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:46:59 2026 by rpki-client