Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft
File: QyB1WWVFCTwGpvz4-rV7GS53kKo.mft (raw, json)
Hash identifier: HhXWw0XF8tzimXqANzGkFYY42dfAMs6RnF8LYlWL2To=
Subject key identifier: 29:A6:AF:F9:82:AA:49:91:39:A6:74:81:EB:36:99:07:77:36:D3:E9
Authority key identifier: 43:20:75:59:65:45:09:3C:06:A6:FC:F8:FA:B5:7B:19:2E:77:90:AA
Certificate issuer: /CN=432075596545093c06a6fcf8fab57b192e7790aa
Certificate serial: 019FA1849BED2BA97FB10C19D04A2DA31B5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QyB1WWVFCTwGpvz4-rV7GS53kKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft
Manifest number: 19D0
Signing time: Mon 27 Jul 2026 03:00:50 +0000
Manifest this update: Mon 27 Jul 2026 03:00:50 +0000
Manifest next update: Tue 28 Jul 2026 03:00:50 +0000
Files and hashes: 1: 7Ajy7T_IXat5EHnX5jOdCl3BXSs.roa (hash: Rn+5opWUGoRW49OpMrdlbpM9u9h2SBCx0mFY1z5Li4g=)
2: QyB1WWVFCTwGpvz4-rV7GS53kKo.crl (hash: T5x3XjBVer4XtPAhizRcMiE5+WucNWXTfEmPSzMpuak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QyB1WWVFCTwGpvz4-rV7GS53kKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:9b:ed:2b:a9:7f:b1:0c:19:d0:4a:2d:a3:1b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432075596545093c06a6fcf8fab57b192e7790aa
Validity
Not Before: Jul 27 03:00:50 2026 GMT
Not After : Jul 28 03:00:50 2026 GMT
Subject: CN=29a6aff982aa499139a67481eb3699077736d3e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cd:16:10:29:91:28:b2:cb:26:60:75:c4:f3:
e3:ec:bc:8e:c8:f7:2e:7b:29:67:0a:6c:35:c3:71:
e9:82:40:a0:8a:7a:0c:ae:98:57:24:c6:03:c1:a5:
17:28:0f:da:14:dc:92:eb:17:b2:d9:17:46:9d:0c:
bc:9e:cc:f2:9f:d4:01:9b:50:79:45:44:71:3c:26:
dc:42:b4:58:e9:cf:55:0a:5c:2d:1e:e1:ee:7e:db:
6a:a8:8f:46:ac:82:c2:e6:68:2e:8d:16:c9:6e:c2:
e7:3f:6e:8f:80:90:1a:aa:22:a8:f6:1e:84:85:37:
b6:27:b1:ad:18:01:0d:c6:36:76:5a:28:3c:7d:47:
08:8f:7f:c3:90:3b:7c:93:3b:9d:af:d8:66:2d:97:
c0:f4:d7:10:12:e2:57:ad:aa:62:54:a6:c8:dc:96:
f0:75:58:32:97:d6:81:02:dd:96:00:68:60:e5:d0:
35:13:3a:b9:3c:f5:1e:7c:84:97:d1:06:66:47:77:
4b:97:7e:69:8f:91:50:44:6e:34:96:b8:e1:4a:55:
6a:c1:a0:c0:9a:a8:8a:4a:6e:f2:92:4b:f6:36:bd:
b2:6f:7f:70:73:bd:94:61:fc:d9:db:d0:f7:45:6f:
1f:d0:df:cf:a4:bc:08:b4:dd:37:c6:27:a1:08:28:
10:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A6:AF:F9:82:AA:49:91:39:A6:74:81:EB:36:99:07:77:36:D3:E9
X509v3 Authority Key Identifier:
keyid:43:20:75:59:65:45:09:3C:06:A6:FC:F8:FA:B5:7B:19:2E:77:90:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QyB1WWVFCTwGpvz4-rV7GS53kKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:f3:b0:83:e1:d9:cb:7d:96:a3:44:d7:d3:3d:05:4b:93:ab:
98:99:24:96:36:c3:5a:c1:a2:a6:15:89:a0:5d:47:fe:14:2b:
e3:e5:89:93:24:fd:14:a9:9e:2b:46:ed:e4:f8:23:9d:72:ce:
df:d4:37:7a:7c:25:28:28:25:2f:30:1a:0a:25:72:f6:5f:8d:
b0:9a:99:0d:f9:d9:79:5e:9c:de:8c:c4:73:71:5c:07:54:b2:
78:09:28:e0:2b:f2:84:a6:07:c7:71:b9:42:96:ea:71:ba:68:
99:1a:14:a1:3d:a2:29:56:91:eb:66:b4:80:bd:00:ac:9b:f3:
29:44:ef:59:24:da:62:2b:c6:b7:6a:37:8c:77:51:ab:2b:ce:
4b:48:4d:db:fd:55:88:c3:3f:b3:28:e4:3b:47:df:91:99:0d:
82:e7:a5:1c:82:cd:7e:32:cb:80:87:a7:ca:25:3c:df:a1:13:
7f:14:f9:54:6c:dc:85:a7:94:73:36:e6:cf:bd:b7:99:4b:5c:
00:2d:11:46:83:ba:bd:13:6c:20:a9:2b:71:96:17:58:d0:f6:
ed:41:93:2b:9d:0c:ec:44:3e:29:50:3b:a9:36:77:2e:27:5d:
20:38:c3:77:4c:2c:a7:51:1b:e4:7b:cf:7b:a3:6d:24:4e:32:
89:6c:8a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:51:11 2026 by rpki-client