Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
File: Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft (raw, json)
Hash identifier: 4mrYz+Xt2yDUUlxd7LsFUbLjXyO2zsYOeuClKxtvcVI=
Subject key identifier: 54:A7:8B:31:4F:BA:71:43:C7:80:1A:FA:50:99:FC:BA:4C:C4:20:86
Authority key identifier: 43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13
Certificate issuer: /CN=43fad79548afc5c83e59bbfe388c64492cb55013
Certificate serial: 019F8568F92F16317778AB262807DD902DB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
Manifest number: 19BF
Signing time: Tue 21 Jul 2026 16:01:16 +0000
Manifest this update: Tue 21 Jul 2026 16:01:16 +0000
Manifest next update: Wed 22 Jul 2026 16:01:16 +0000
Files and hashes: 1: Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl (hash: 0ZRZH7Mj9hql5c5y7O/mYcvvzNqkTz7mNACnXTqsplE=)
2: gWRBDddMyWqh-LIfhr099iJ3yoM.roa (hash: miOqJ9LKG8Eyc/AIL8Ov13TsNXdMaSWxli/p6/FIhTs=)
3: nkIfu7bImABod5-85N1FwAXx42g.roa (hash: 9hvhnUz5j9QQtDK6csAcjLrvvxwu/x+GSH7qTRDcSxc=)
4: uHGjwPoMHu2IEBccrs2elf1N18A.roa (hash: g4Yg85Lk+WZoS7yWIAuAp+ehz/I0N5gf+zz3O65XQ14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:68:f9:2f:16:31:77:78:ab:26:28:07:dd:90:2d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43fad79548afc5c83e59bbfe388c64492cb55013
Validity
Not Before: Jul 21 16:01:16 2026 GMT
Not After : Jul 22 16:01:16 2026 GMT
Subject: CN=54a78b314fba7143c7801afa5099fcba4cc42086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1f:06:f8:b3:6c:97:ca:c9:34:27:cd:5a:c0:
e9:f4:93:c0:91:43:6a:1a:d2:b6:b0:e2:a0:95:fc:
e3:84:9d:32:4a:09:70:8c:e8:15:8c:b7:bb:3c:8f:
1f:a1:d8:e4:2f:14:94:22:1f:4a:52:bc:56:c3:a5:
2d:cf:93:54:97:d0:06:50:68:25:9b:f4:fc:17:9b:
77:31:ed:9f:1e:55:7c:e6:03:d1:a3:78:e8:7f:b7:
73:9c:ef:62:d8:6b:8a:dd:73:17:0b:3a:83:fb:cb:
3f:7f:92:71:b3:4d:85:b5:30:9e:67:e8:42:f5:2a:
3b:d8:9a:4c:cc:c7:1a:bf:37:39:2a:a5:75:dc:3e:
7f:a5:b7:9b:dd:94:12:f3:2f:51:9d:3d:94:64:a6:
7e:c2:ac:bc:0c:06:ee:90:7b:fc:d2:74:58:e7:62:
b3:6c:23:87:e4:45:30:c9:91:00:74:ba:5a:d4:35:
1f:6b:48:86:67:2e:7a:66:3c:60:fc:ea:8e:2b:8f:
5a:b4:af:d4:0e:ac:27:7f:7b:38:8e:1b:7f:0c:37:
9a:18:33:06:a8:fe:0f:fb:f7:56:5f:b2:86:e4:df:
1f:2a:39:68:5c:b6:c0:9a:8c:8d:da:66:33:76:08:
2c:17:46:bd:bf:86:44:ea:60:8f:fe:46:72:e9:f3:
e3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A7:8B:31:4F:BA:71:43:C7:80:1A:FA:50:99:FC:BA:4C:C4:20:86
X509v3 Authority Key Identifier:
keyid:43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:c0:37:13:09:60:eb:6f:12:e2:fc:14:fa:0f:aa:e8:da:3b:
70:b1:eb:93:f1:ce:23:93:8c:29:ad:a6:64:21:47:18:c7:d1:
a6:0f:41:66:48:ca:e9:33:38:df:d2:7d:b6:b8:48:8f:3c:44:
c3:c2:7c:f3:26:6d:66:14:70:7d:dc:cd:c5:58:31:cb:4d:c0:
30:24:28:28:4d:56:1b:c4:3b:b8:51:d2:23:1a:61:40:db:88:
e6:75:57:f1:39:27:12:02:83:81:6c:2c:8e:97:25:20:65:78:
6f:7f:78:12:dc:a7:1b:43:07:f9:b4:1d:3f:8f:71:0e:f7:2e:
21:c6:21:6d:78:fb:c6:d2:f2:75:58:4e:95:30:ec:32:c2:d1:
5b:0c:a7:e6:03:13:45:26:db:ad:54:53:ce:21:36:6e:29:85:
6e:6a:24:5d:a9:4b:8c:f9:a3:47:7e:6f:1c:07:b8:3c:ed:c9:
4d:4e:f6:c9:8a:ac:b1:e0:94:e5:0b:7c:51:65:f0:43:e3:91:
56:5a:fc:7e:9e:21:24:86:2d:ef:da:cd:f2:c0:b9:7a:44:08:
b4:fc:58:2f:92:ae:ee:82:58:61:22:8a:9c:51:38:7c:28:3e:
b9:2e:8e:e9:6c:ce:88:1e:f6:6e:00:40:35:be:29:1e:30:80:
e3:31:0c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:27:07 2026 by rpki-client