Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
File: 22QfyQPVtMyXFkkySks05PgkIsU.mft (raw, json)
Hash identifier: Gd8o1AM0FUbB2zLq37e4OaQcyPCM+PXGGtgo+/Rp0zE=
Subject key identifier: 1A:A6:A6:0E:77:E5:E3:63:79:4F:AC:81:91:8F:59:48:00:82:62:E3
Authority key identifier: DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
Certificate issuer: /CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Certificate serial: 019FAFE4AC9338CE10005F593655D997F7BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
Manifest number: 19E3
Signing time: Wed 29 Jul 2026 22:00:26 +0000
Manifest this update: Wed 29 Jul 2026 22:00:26 +0000
Manifest next update: Thu 30 Jul 2026 22:00:26 +0000
Files and hashes: 1: 22QfyQPVtMyXFkkySks05PgkIsU.crl (hash: 2zfP45kOX1gv+OH06Kw66TBkWVmREZUCZB/gVNAdLL0=)
2: DGuA7DOyGXAn98oCAGhbl48323g.roa (hash: KaiwSlSCPAgF52IKRYkPf8oMfbhIntogM/QW0s5kztk=)
3: FqQzin5AyA5f6WQtz3QGyb25Lkw.roa (hash: jo5wd7AW0r4ksG6ucK99tJ1yird0s7L219QrcqvmBqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 21:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:af:e4:ac:93:38:ce:10:00:5f:59:36:55:d9:97:f7:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Validity
Not Before: Jul 29 22:00:26 2026 GMT
Not After : Jul 30 22:00:26 2026 GMT
Subject: CN=1aa6a60e77e5e363794fac81918f5948008262e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d5:58:4f:f8:9f:31:c5:a3:ce:ea:4a:62:5c:
e3:a6:4e:c9:f9:21:b7:f4:05:42:c1:c6:3c:42:7b:
0a:03:2f:85:0d:27:9e:d3:14:14:9d:e1:39:ec:72:
33:32:ef:c8:67:e3:70:b6:e5:1f:00:06:26:e2:be:
5b:69:7b:b5:14:0f:c3:3e:e7:3d:1c:a9:fd:3c:33:
d9:cf:f7:e5:d9:db:51:49:2d:74:a0:c5:1b:52:e4:
3b:8d:af:fc:af:66:c1:20:13:ad:66:a4:c7:da:9f:
01:0a:1a:95:11:26:44:be:69:bf:80:f9:d7:7f:a6:
59:0c:68:a5:96:f3:95:f9:88:72:fa:11:52:d3:8c:
9e:e7:f9:39:fb:f8:1f:4f:2b:f6:68:d1:24:e7:95:
fe:95:86:90:a7:78:e0:94:d3:40:c8:1d:ec:7f:8f:
fe:2b:45:97:26:41:62:1c:62:ad:e2:5b:ab:b6:6d:
06:5d:52:64:ea:82:81:fe:66:03:bf:c2:8e:3e:e1:
89:d3:b8:9d:73:0b:05:a0:e2:d3:4f:60:7a:3f:2d:
b6:b7:bc:98:db:6d:33:aa:7f:86:e4:99:c5:84:6e:
07:db:7c:8f:3c:0c:31:80:ec:59:d6:5e:e7:93:0b:
73:64:34:04:34:91:8e:6b:85:d9:1a:7f:4c:4d:5f:
3c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A6:A6:0E:77:E5:E3:63:79:4F:AC:81:91:8F:59:48:00:82:62:E3
X509v3 Authority Key Identifier:
keyid:DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:51:f7:b5:10:95:8a:93:8a:5f:72:d7:9b:aa:7e:84:6a:3c:
85:30:de:be:f3:de:44:d1:ad:a0:7c:8a:f8:64:4a:5a:89:44:
f1:c7:d2:c3:47:27:14:d0:fa:74:9c:8f:99:d5:98:a8:32:cd:
91:8c:03:43:63:6a:42:b6:f0:19:c8:51:8d:ab:3c:3a:84:8d:
ac:f6:73:28:e0:c0:71:1d:80:8d:73:f9:9b:a0:71:88:20:9c:
77:28:31:1a:5e:74:2f:56:67:51:55:be:a9:9e:60:85:54:90:
8b:2e:63:9a:93:ed:b5:57:83:c5:6a:82:1f:38:8d:f0:f9:d7:
87:76:ce:6d:c3:79:75:4d:02:94:f8:9c:43:9e:8d:03:fe:91:
17:0b:19:8e:38:f0:a0:74:39:37:fa:e3:0f:29:73:bd:0c:79:
de:15:cc:3c:a1:11:60:2e:0e:3d:4b:be:79:84:e6:b0:4e:ed:
f5:85:12:50:97:63:31:08:c8:5a:91:b5:d6:1b:ff:28:3c:11:
79:02:fe:f6:3b:5e:6f:42:38:3c:a7:89:5c:54:59:88:1a:f1:
66:37:7b:33:59:a5:91:ed:06:97:1b:b1:bc:18:3b:5b:2e:9d:
6f:54:78:c0:33:8e:76:d7:03:3a:36:8b:b7:fb:4b:da:48:c8:
7a:d4:d1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 02:50:34 2026 by rpki-client