Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
File: Q8FllZZq-wus8deTfyRdagUiIaM.mft (raw, json)
Hash identifier: c+NJHk50nji8QMzaDERP7AGm+5OwYXxPeULVt9LS8VQ=
Subject key identifier: FE:F0:CB:0F:46:84:3C:B4:34:BF:A0:E8:D2:93:14:58:40:69:15:82
Authority key identifier: 43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
Certificate issuer: /CN=43c16595966afb0bacf1d7937f245d6a052221a3
Certificate serial: 019FA07274B70326E6CA3287715E24277120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
Manifest number: 19D1
Signing time: Sun 26 Jul 2026 22:01:23 +0000
Manifest this update: Sun 26 Jul 2026 22:01:23 +0000
Manifest next update: Mon 27 Jul 2026 22:01:23 +0000
Files and hashes: 1: 4txRYI484TEAkKZQuGXE7v7kNFE.roa (hash: 0LHuR+m3x801pvrNDlfkYNVRhvh7QTNXeF2avzGdu+o=)
2: 7j99n4d6ANqzBKZIb7AtbN16HNM.roa (hash: rlAo1p9sV9yO7tsi280DXkwJRnsLW38pb6gpoEvvu7w=)
3: Oo3ap3FWMfZFuKT_5X4cPgbvWBY.roa (hash: SClF6a/p5GxrqHhEbYnu5sljGKEXM6UG1fAy0VW6itY=)
4: Q8FllZZq-wus8deTfyRdagUiIaM.crl (hash: pjb/So/PjDWurGLQXqcbSZ8xgmCTNtiYdSxzxv4g/Ew=)
5: ZoLYEk24uuNv33EjJ4m1okSNS6w.roa (hash: aOyue5Aqc/KW4Mnoyy7ahJjLtcQmVKEsi36/Y3I9yHA=)
6: aj9euBKzI3NIH66jZPh8bbmGI6A.roa (hash: 8jTNJ61hr37vcKXTL8TlYqDMnFRq1ith6TwEVeBelwE=)
7: nH1OKpXJbAvAHxN6XWdXMd6gZuY.roa (hash: j3S1I730IB3QQneXnDNotR19hJRoRUA2SbUVmp/YndQ=)
8: ottEKlKze703Xucot2ljZZmoong.roa (hash: 1DtEnDgUDcQi4vqWCrTRW5+Lsqb1kTbcbswrOF8wGaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:72:74:b7:03:26:e6:ca:32:87:71:5e:24:27:71:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c16595966afb0bacf1d7937f245d6a052221a3
Validity
Not Before: Jul 26 22:01:23 2026 GMT
Not After : Jul 27 22:01:23 2026 GMT
Subject: CN=fef0cb0f46843cb434bfa0e8d293145840691582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b8:b0:66:2c:98:2b:6a:cd:1c:a9:93:04:29:
2a:e2:16:dc:cd:53:17:c2:f3:c8:8e:24:ca:d5:30:
1a:10:c6:6d:04:cb:f4:8e:6f:a9:74:19:d1:1a:f1:
f7:d5:c9:f2:b3:fe:8a:3c:ed:74:60:e6:55:2d:54:
df:45:9b:7a:f6:ef:a5:77:ad:53:58:ce:86:e4:6a:
53:66:97:2a:bd:8c:60:39:31:4a:78:e0:e9:8e:02:
b0:9b:a8:ae:1d:17:28:89:6c:50:46:7a:07:92:ad:
ec:9d:2f:13:40:c9:c4:f3:fe:ff:93:dd:20:72:06:
bf:c1:ee:5f:06:7b:c2:74:36:2c:30:66:52:8a:fa:
06:7b:60:9a:46:fa:4e:98:ac:f3:5b:6c:15:cd:62:
6a:df:bf:73:61:0f:53:bf:5a:a9:a1:07:fc:d8:93:
17:c1:df:fb:34:ab:c0:07:cd:04:af:82:a7:7e:76:
d7:94:da:ab:b0:65:2a:0b:77:b2:30:13:d1:67:f4:
a0:d4:31:e3:2b:cb:92:0d:9d:7c:ac:16:d1:2e:ad:
7d:7b:7b:22:7d:23:37:20:0d:c5:d4:74:0a:d5:89:
22:dd:aa:01:1c:e7:56:b4:9e:84:64:d1:57:76:66:
dd:ad:f5:57:d7:a2:25:61:6c:17:3b:a9:3b:94:49:
82:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F0:CB:0F:46:84:3C:B4:34:BF:A0:E8:D2:93:14:58:40:69:15:82
X509v3 Authority Key Identifier:
keyid:43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:2c:85:31:72:43:69:42:93:cb:98:92:b5:40:90:d5:a7:3e:
de:61:ab:75:61:9b:63:85:26:03:84:4f:86:3a:7c:50:83:64:
80:36:d3:10:b4:74:8d:14:dc:5d:39:09:3b:6b:da:5e:a2:fa:
7c:53:13:92:85:13:43:9d:aa:b8:74:9b:1a:bd:e8:c7:a5:92:
46:b9:df:3a:4b:b8:8e:17:3a:ac:48:d7:90:00:ba:2b:ef:a5:
35:5f:44:59:3f:67:54:26:5a:08:27:da:c6:51:4a:06:8b:47:
07:2c:e9:6e:68:bd:bf:b2:a3:f9:11:c1:ed:20:c9:22:47:09:
a3:16:f0:5b:d2:6f:ed:7d:86:85:e0:8a:6d:34:21:c7:65:1d:
c1:48:ec:e2:80:6e:44:a6:e0:24:0d:6f:51:f9:84:f0:87:68:
5c:fc:48:7f:2b:57:4c:f1:1e:f6:aa:00:63:17:95:06:b5:a6:
63:a0:72:f3:ff:82:02:96:db:2e:8b:dc:29:5b:37:b6:32:74:
37:71:73:21:f7:3c:76:0b:a2:93:96:ea:bb:e3:c7:11:bb:93:
81:88:1f:ad:e8:10:ad:f2:7f:bb:00:3d:e3:71:e7:42:03:32:
ee:b6:96:9c:5c:31:c1:d5:89:ef:0f:fa:6f:82:25:6e:5a:eb:
3f:f1:62:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:49:57 2026 by rpki-client