Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
File: Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft (raw, json)
Hash identifier: Be75CNZrt92bqSPVvJvGu58mO+y9QXqWeL6M5OgYRHg=
Subject key identifier: CF:AD:B8:68:AC:2E:87:A4:EB:76:72:2D:3D:E3:BC:64:2B:D7:9F:15
Authority key identifier: 43:72:4E:61:E3:BA:2F:94:66:59:17:33:9E:6D:AC:2B:68:0A:18:CF
Certificate issuer: /CN=43724e61e3ba2f94665917339e6dac2b680a18cf
Certificate serial: 019F860D1FE2C39531C33256F43270A8B729
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
Manifest number: 03F1
Signing time: Tue 21 Jul 2026 19:00:34 +0000
Manifest this update: Tue 21 Jul 2026 19:00:34 +0000
Manifest next update: Wed 22 Jul 2026 19:00:34 +0000
Files and hashes: 1: 1FnTssY12YHbRtY_nsWuk0wHwHY.roa (hash: Wp9yiHSm5oosC+1oWAnqkh1+AZR6IesD358xtq9/l6c=)
2: Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl (hash: RTQ6J6guZbUxusrHwVQ8Ob1MBlqq2v2ebDn9ovrwfxM=)
3: jGh-wNW6Bb8Ek-tElbdvocTw07w.roa (hash: U9B8vDsky1QCNLRt1e+ai6h13YxOH7cX6zl+1cv2MFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:0d:1f:e2:c3:95:31:c3:32:56:f4:32:70:a8:b7:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43724e61e3ba2f94665917339e6dac2b680a18cf
Validity
Not Before: Jul 21 19:00:34 2026 GMT
Not After : Jul 22 19:00:34 2026 GMT
Subject: CN=cfadb868ac2e87a4eb76722d3de3bc642bd79f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:86:f4:9a:50:2e:2f:58:e6:14:83:de:4b:06:
ae:a1:b9:df:29:2d:f3:dc:70:e7:5b:28:9e:54:64:
27:c7:d5:31:27:26:1f:d3:29:79:be:01:56:56:a8:
c7:6a:f8:1f:2b:c8:f8:5b:3d:77:95:47:37:59:d2:
e0:85:7c:3b:8a:cd:5c:51:78:9e:c5:be:c6:49:e7:
fe:a3:d5:e9:d1:52:04:e3:aa:96:1d:96:4b:80:4a:
89:c1:e8:18:84:a3:2e:2e:ad:6d:ff:4c:e0:c1:92:
cd:22:77:66:51:2a:f0:77:51:67:df:c9:2a:1b:5e:
7f:53:21:a1:99:06:77:92:7e:99:60:20:ad:bd:01:
28:6a:95:d7:64:fc:78:48:29:bd:78:21:87:d0:1b:
b2:b6:c9:89:21:c6:70:12:c8:cf:30:d0:fd:9c:e6:
7f:fe:08:b1:92:b0:fd:2f:65:3f:cd:6c:98:ec:f5:
90:ea:20:78:54:9c:9e:0c:bd:7a:a4:ca:8f:78:5b:
80:11:c2:5b:d6:fb:51:2a:57:ec:b4:ae:ca:6d:3c:
81:eb:01:16:ac:38:13:28:a9:0a:be:b1:20:d3:79:
f3:67:fe:5c:37:86:22:e1:ab:af:60:d0:b6:3f:cd:
c9:46:37:cf:63:3a:ae:57:db:8f:70:ad:5d:ee:c0:
2d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:AD:B8:68:AC:2E:87:A4:EB:76:72:2D:3D:E3:BC:64:2B:D7:9F:15
X509v3 Authority Key Identifier:
keyid:43:72:4E:61:E3:BA:2F:94:66:59:17:33:9E:6D:AC:2B:68:0A:18:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:6e:52:11:23:7b:c2:f4:6d:30:60:f2:20:ff:a0:dc:a2:97:
b5:2d:87:d8:b0:7a:f1:a4:da:4d:30:a7:44:c5:d4:88:48:54:
aa:e8:2f:fe:10:9b:35:7c:0f:98:7f:f2:50:20:92:91:a8:e7:
08:7a:e0:99:38:f6:7a:04:33:a1:26:8b:f0:55:8a:20:1c:7e:
54:f9:b2:55:c5:31:02:17:66:98:c8:72:e9:75:b1:e1:70:96:
e8:f0:f7:56:f7:6a:9b:95:0a:ed:2d:3b:37:7b:a3:12:e3:15:
76:2b:cc:af:a3:72:99:ec:b0:9a:a3:8d:d5:90:c5:77:16:02:
1a:f2:01:59:a0:29:ca:28:0b:dd:43:e2:2a:a7:c7:a6:21:b1:
be:31:1e:b3:1e:d2:13:fd:fa:3c:61:46:7f:7b:bb:2f:60:5e:
e6:e8:18:25:4f:30:65:cd:cf:a8:79:d2:7b:d3:7c:df:79:55:
24:74:c8:a3:ed:b0:40:38:1b:61:b3:98:e7:15:41:0d:bf:a3:
dc:91:b1:e4:05:27:f2:62:93:41:f7:22:64:95:bb:bf:3b:e3:
f4:5f:e5:f0:4f:10:4c:36:9c:1e:4d:c4:e3:e0:df:81:5b:11:
79:80:e0:48:58:dc:3d:87:96:51:04:e7:d3:2e:50:83:fe:e0:
9f:e4:52:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:31:47 2026 by rpki-client