Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
File: Q68umH0rY63apa3BePMekNh2qqc.mft (raw, json)
Hash identifier: 8PLJLB267Sx1idKcYxXevmpeY0UaoHaylTuIaZj32mo=
Subject key identifier: 6F:C7:DF:85:C9:F0:F2:F7:75:AC:AA:20:41:34:8E:9D:63:E4:C5:69
Authority key identifier: 43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
Certificate issuer: /CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Certificate serial: 019FD986786E231DF2E791CFC186843EE82C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
Manifest number: 19F2
Signing time: Fri 07 Aug 2026 00:01:36 +0000
Manifest this update: Fri 07 Aug 2026 00:01:36 +0000
Manifest next update: Sat 08 Aug 2026 00:01:36 +0000
Files and hashes: 1: 6h1PvR00lCR4R_OK63mWuUNm8Ow.roa (hash: nK88CLEdk1ROq2MFGTRKCThSy5zWr4KCZ19shw/qtOU=)
2: Lc1jl7QVxqLwMWxBrIVxsneb__U.roa (hash: E1vTmbk4SrydL0KXJtJee0AsNy8nI/ShD3+SVqKy/u4=)
3: LkGDyqDRG7mHRocUIkDmSuw1vWQ.roa (hash: J9hPT1FhbaaEOwCdYHU6hR/yFBmZm/8O5bYD8Dyfv0Y=)
4: Q68umH0rY63apa3BePMekNh2qqc.crl (hash: MHINnRHHyNvkHJd2l6GGSNLd09DHNW3JJGBM+b/5Qzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Aug 2026 00:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d9:86:78:6e:23:1d:f2:e7:91:cf:c1:86:84:3e:e8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Validity
Not Before: Aug 7 00:01:36 2026 GMT
Not After : Aug 8 00:01:36 2026 GMT
Subject: CN=6fc7df85c9f0f2f775acaa2041348e9d63e4c569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:40:bf:e5:25:9d:a6:ff:19:8f:17:01:69:51:
07:42:dc:50:27:d1:1a:29:d6:9e:5c:88:e0:b9:a7:
e2:96:30:b4:98:64:5f:94:01:2b:c2:47:ab:72:9b:
c2:43:61:b7:e0:79:31:97:78:1b:f0:34:5a:f9:8e:
62:1a:f7:b1:f3:5c:0d:76:ab:d1:a1:63:96:ea:3f:
ee:12:69:00:e4:e5:3b:1d:d6:65:84:bb:5a:12:a4:
0c:60:7b:fb:af:dd:f4:6a:4b:69:ca:7e:36:92:2e:
44:ef:36:01:ad:f3:3f:0f:86:99:a6:3a:4e:9b:d5:
a7:3b:b1:e8:3e:ed:f3:a4:dc:fa:8f:0f:1a:83:fe:
e3:5c:9a:69:0c:86:22:5b:46:b1:75:fa:c0:cc:13:
c6:ba:7f:6c:b5:aa:73:9f:5c:eb:69:d6:d4:25:19:
97:b0:50:51:0e:a7:bc:0a:67:67:cc:32:4d:ec:2c:
0d:20:dd:03:77:74:88:76:c4:52:ff:59:dc:84:23:
70:a8:f7:b3:f0:db:37:f4:7d:32:48:03:ef:e3:0d:
7c:87:18:6d:54:2a:0f:35:30:c0:ae:28:fa:c7:50:
e9:f1:51:16:2d:9e:d5:f5:9a:3a:c0:70:ea:6a:f4:
28:2c:9c:d5:77:e1:3b:32:b4:7c:52:e2:65:26:f5:
12:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C7:DF:85:C9:F0:F2:F7:75:AC:AA:20:41:34:8E:9D:63:E4:C5:69
X509v3 Authority Key Identifier:
keyid:43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:cf:51:11:c0:c2:67:e2:a3:e4:5f:c1:43:96:86:a7:a2:51:
5c:26:c0:d5:b4:d5:be:08:32:d4:f5:13:d2:32:11:d6:66:b1:
f2:6f:96:72:8a:7a:13:bd:7e:70:84:d3:f5:dd:f6:c5:8e:ca:
f5:d7:66:6e:75:af:62:35:de:84:b4:84:20:b3:57:b7:88:02:
13:5d:e7:51:e9:ec:82:f3:8c:ba:e9:83:d7:dd:ba:3e:cd:9b:
d9:91:55:8c:ca:8e:c3:66:f3:80:9a:51:40:e3:76:f5:20:68:
97:f6:84:9c:30:93:24:e6:8a:b7:c3:49:1d:d3:b3:0f:ca:0c:
d5:3b:7e:04:33:98:0b:5d:9f:8a:46:34:21:34:3b:3e:9b:ac:
ab:e0:16:5a:e0:37:3f:3b:04:00:53:69:ac:fd:9d:05:3c:e0:
61:28:24:b4:ef:a7:cc:ac:c1:67:dd:73:8a:ee:37:fb:4c:41:
2f:dd:71:53:49:ad:9d:a4:fe:8d:06:55:e2:bd:59:e0:07:2f:
62:9c:d2:29:0d:0c:ba:05:63:42:67:d0:50:64:66:a4:79:70:
7a:49:26:97:8e:7e:ca:84:fa:28:f7:14:95:72:d6:7d:76:5c:
da:1c:c4:26:d0:2f:83:a0:bf:78:3b:4d:97:78:78:7a:fc:03:
72:c6:d9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:41:33 2026 by rpki-client