Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
File: Q664_1W9RlALJ9uc8d7CVidrK2o.mft (raw, json)
Hash identifier: 1McyjPAdLmdQVq2VlOdhEtuLoxuGJZRIHhaWpz5ZQo0=
Subject key identifier: 02:AD:3C:7E:8F:E2:6A:B4:FB:DB:09:33:B7:B9:91:2F:BB:E7:EF:6E
Authority key identifier: 43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
Certificate issuer: /CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Certificate serial: 019F9F28395F783BFF0CAA689E03C6967437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
Manifest number: 06C4
Signing time: Sun 26 Jul 2026 16:00:41 +0000
Manifest this update: Sun 26 Jul 2026 16:00:41 +0000
Manifest next update: Mon 27 Jul 2026 16:00:41 +0000
Files and hashes: 1: 0jAsd4jHu2P4YiShWU_tmFjG-Xo.roa (hash: 6hlBHdr9FEW88angOioMbp5usn4/nEWFUcWTWPzZueU=)
2: Q664_1W9RlALJ9uc8d7CVidrK2o.crl (hash: him0161wik8OrMCRluza+qxtstLui4pTh1y/7cwIgPU=)
3: kniFntdxPbS1jBvN0hKNK7QT914.roa (hash: Hc1QVDwdt4HeTUIYJSo4nwn3K1JUnhk+8tjIWHMrCAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:28:39:5f:78:3b:ff:0c:aa:68:9e:03:c6:96:74:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Validity
Not Before: Jul 26 16:00:41 2026 GMT
Not After : Jul 27 16:00:41 2026 GMT
Subject: CN=02ad3c7e8fe26ab4fbdb0933b7b9912fbbe7ef6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:12:1d:1c:11:91:19:45:49:ad:69:cf:69:06:
50:12:37:31:4d:bc:29:7d:d5:c7:14:0d:80:d0:3d:
56:8f:9d:77:f7:5c:a2:8d:ca:33:f3:d7:92:fb:2b:
1f:b8:0a:e3:cf:74:b8:90:b6:bb:67:5e:bc:78:60:
f6:11:fe:d4:77:c0:1b:6e:1f:95:83:5a:9f:22:27:
d9:fe:24:c6:d1:88:1a:52:b5:bd:5d:32:2b:ac:a9:
12:18:88:1a:99:49:94:02:19:37:37:c5:30:07:9b:
77:5f:84:85:f2:70:2d:78:dc:4c:a7:45:8c:cb:3c:
4a:5e:e0:bc:2c:82:3e:84:6d:4d:87:7f:ee:9f:ef:
17:5a:00:5a:0f:2c:45:1d:1a:f1:95:89:e5:a3:29:
45:1f:ad:a9:76:c2:46:6d:3a:4f:37:1a:df:bd:e5:
70:a3:cd:34:96:82:34:7e:9a:d2:c9:87:b6:eb:e4:
b6:81:58:81:2c:8c:d0:53:d8:2c:76:59:e0:93:81:
09:b8:ec:db:53:c1:19:6e:ee:64:a7:e8:36:e1:a9:
55:f0:1f:cf:c3:19:08:c5:17:e2:ba:e4:b8:cd:10:
b0:b3:ce:97:c9:4a:b5:e2:9b:6b:f2:b1:fb:ad:57:
a6:49:d6:99:18:91:4d:9f:be:dd:4b:ef:f1:52:2d:
d8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AD:3C:7E:8F:E2:6A:B4:FB:DB:09:33:B7:B9:91:2F:BB:E7:EF:6E
X509v3 Authority Key Identifier:
keyid:43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:1b:5c:2e:cc:cc:b9:c6:57:7e:1a:3b:df:42:0f:22:6e:ef:
b8:ce:a3:f9:f7:8e:df:99:da:82:0d:2c:8e:c5:53:fd:27:5f:
4f:27:0b:de:81:c7:a7:16:e7:ef:c1:0f:20:ac:9a:31:13:27:
b9:83:51:22:0a:cf:ab:7c:4c:cc:b8:2e:8e:7b:95:10:67:63:
12:6c:40:c3:6c:b5:f2:8f:c8:41:d8:93:a4:dc:60:eb:b1:d2:
00:1f:b6:9d:6e:13:24:be:03:ec:1b:39:7a:15:8c:b0:b4:3b:
fa:3a:1b:4c:b8:75:1c:a3:83:e9:ba:de:b2:9b:4f:30:b7:f7:
cd:2e:94:99:86:3f:38:d6:fc:9a:b6:4a:09:58:1a:75:a2:6a:
71:7a:35:8f:33:b6:fa:2a:ad:32:39:8c:e9:af:e2:7e:46:fa:
e8:71:39:d0:df:88:1d:b4:16:92:af:ff:f8:70:e6:66:7f:5f:
e1:61:0d:36:8d:a8:45:86:eb:e3:83:5c:0b:4f:e4:5a:c8:87:
8c:b2:6a:56:5a:39:4d:0b:8c:64:be:72:22:d7:0c:f5:6f:0f:
2e:74:9c:b9:0c:ff:39:3a:8d:4a:94:22:28:eb:50:b9:fd:ca:
f5:b9:0c:b0:e0:c6:99:10:8a:20:45:08:68:dc:5f:e1:24:42:
7b:1e:e9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 21:23:41 2026 by rpki-client