Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
File: Qj2TBU8GPPiikYYXNfkAWauewWk.mft (raw, json)
Hash identifier: EGWBXLYjfMw6QbUB+21BSrRmnqR5J93LsxWX4umWPI4=
Subject key identifier: EF:64:B6:7B:7D:ED:44:59:8F:51:92:8E:CF:53:10:F8:7C:32:C9:A6
Authority key identifier: 42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
Certificate issuer: /CN=423d93054f063cf8a291861735f90059ab9ec169
Certificate serial: 019FA3733994B9085A896281AD3FDC48150F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
Manifest number: 19D7
Signing time: Mon 27 Jul 2026 12:01:05 +0000
Manifest this update: Mon 27 Jul 2026 12:01:05 +0000
Manifest next update: Tue 28 Jul 2026 12:01:05 +0000
Files and hashes: 1: 1mX8w6XwA7woU8wmLAJ5ZXky2sk.roa (hash: O4FxQ+GxB8UXGvgtMf5kwgBczUX5jVwN68R45/WuCz8=)
2: Qj2TBU8GPPiikYYXNfkAWauewWk.crl (hash: NOi+yyztaSYI3sHhWduVmoju+97FCa+CJa+dsSAnLaQ=)
3: viJ7gwHZZkl8aycoxbcENmaZJk0.roa (hash: kFhg4Qul4VuaLn8GNiNuWw7f2bf4xMblv/3oeMcLjc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 12:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:73:39:94:b9:08:5a:89:62:81:ad:3f:dc:48:15:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423d93054f063cf8a291861735f90059ab9ec169
Validity
Not Before: Jul 27 12:01:05 2026 GMT
Not After : Jul 28 12:01:05 2026 GMT
Subject: CN=ef64b67b7ded44598f51928ecf5310f87c32c9a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9e:02:a6:17:05:b9:d0:e2:a2:22:29:bc:f3:
8d:49:ce:5a:51:de:a3:7f:d2:f1:97:36:7c:a9:b1:
07:8c:d0:5f:cc:09:a4:f2:44:d4:0a:bc:89:5b:c6:
b8:36:10:a3:65:f8:9d:4e:d1:5b:4d:f6:3d:49:32:
15:10:a8:5e:99:a8:a9:0e:91:05:f5:d7:bd:d5:de:
6f:2e:e0:b3:ee:74:6a:be:ae:ca:13:2e:d9:0a:16:
bb:8b:33:74:64:34:57:23:b4:1e:86:60:36:5c:ec:
5f:ca:f6:1b:a1:8f:d3:ba:27:45:15:94:6b:bb:7d:
69:6f:b4:a2:6f:6d:34:90:eb:91:9f:90:8e:22:48:
fc:a2:1e:af:64:bf:c5:3b:f5:ce:38:cb:74:13:fa:
9f:67:a9:a3:48:e0:b2:66:ae:6c:fb:f2:a9:d2:fb:
6d:75:eb:da:fe:5d:a8:20:4c:47:e1:00:1c:4b:f5:
2d:a3:b8:c1:eb:af:9b:14:3f:5c:54:32:28:ab:04:
da:f9:73:9c:9f:83:ff:31:2e:6e:a2:e0:7a:87:3b:
29:58:b1:e4:ab:b4:f1:94:c1:cc:44:e8:be:05:98:
d9:7d:ff:14:46:66:6d:3b:d5:44:75:56:8b:c8:00:
a4:77:56:79:7c:75:ab:59:83:41:f3:65:a4:36:41:
ee:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:64:B6:7B:7D:ED:44:59:8F:51:92:8E:CF:53:10:F8:7C:32:C9:A6
X509v3 Authority Key Identifier:
keyid:42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:65:83:06:7e:66:fc:58:98:52:8d:90:cd:c1:61:83:27:e7:
86:67:5f:cf:e2:03:ac:ba:e0:fd:84:0a:3c:50:99:7c:8c:39:
38:7e:70:8d:ad:23:28:b5:1c:16:52:30:6d:d1:c0:0a:b0:50:
05:56:68:88:78:52:42:6c:06:7a:2a:a6:3f:c0:89:bf:42:1e:
18:de:dd:01:f8:6c:ad:21:d2:a6:21:44:c5:99:f5:a2:cb:ed:
84:a4:75:a4:b8:64:63:7c:5b:6a:9a:96:01:55:64:f1:13:7b:
2d:71:8c:47:7b:1c:9a:75:4a:d5:b7:43:57:98:ae:36:0a:b4:
9f:9e:92:f1:b7:47:98:c1:a8:d3:8f:26:11:fe:2a:68:01:15:
ab:28:11:1f:63:16:2f:ab:a1:8f:ef:29:42:88:c0:1d:cf:26:
47:f3:75:f2:98:db:6b:bc:a5:88:51:08:1a:13:4e:cf:25:c1:
fa:bd:75:6a:b9:d2:54:27:47:bf:b6:a9:d1:7c:40:c2:39:ca:
0a:8a:56:df:5c:7d:97:01:36:4c:51:e7:fb:5e:2d:4b:31:08:
41:b2:86:d8:be:9e:fd:02:cc:c0:d3:54:e6:65:a3:fb:5a:14:
0b:91:85:ab:4a:b0:88:00:ab:1a:3e:9d:15:72:1b:b5:d7:7d:
94:1d:21:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:11:10 2026 by rpki-client