Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
File: sQw889xTylScA-T19G2RzpC44HA.mft (raw, json)
Hash identifier: fHe9b6kkjOS1emPzQWt6vJ/k//7SJ6j2mTM3Kuqup5c=
Subject key identifier: 77:18:C5:7C:C3:E7:8F:B0:A2:4B:73:39:67:6C:AB:9D:7B:9B:F1:C0
Authority key identifier: B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
Certificate issuer: /CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Certificate serial: 019F859F71624D76710A481D5026AFE4835D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
Manifest number: 19D6
Signing time: Tue 21 Jul 2026 17:00:46 +0000
Manifest this update: Tue 21 Jul 2026 17:00:46 +0000
Manifest next update: Wed 22 Jul 2026 17:00:46 +0000
Files and hashes: 1: o40VleOLDva4l-Hlse3BxkX262M.roa (hash: vt1iL3MNmGtBJoVTbi5X0cqEnKhYSdktMc3RDciLR8w=)
2: sQw889xTylScA-T19G2RzpC44HA.crl (hash: noy2yTDOPHCaKENkfzBKrYTrVxLeB4AhgXOsQ6+xc1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 17:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:9f:71:62:4d:76:71:0a:48:1d:50:26:af:e4:83:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Validity
Not Before: Jul 21 17:00:46 2026 GMT
Not After : Jul 22 17:00:46 2026 GMT
Subject: CN=7718c57cc3e78fb0a24b7339676cab9d7b9bf1c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a4:7d:4c:14:16:65:b7:7c:db:70:e2:93:e7:
d1:23:52:85:98:4e:53:c1:f9:4b:df:3a:ef:01:dd:
ce:c6:fa:db:87:7b:fe:c9:85:42:cc:c6:da:39:20:
5c:7f:90:a4:fb:f5:19:ae:4c:e4:67:3d:db:22:dc:
fd:a9:e7:89:c2:df:f5:63:24:4d:5e:81:c3:f3:bc:
e4:40:4f:72:95:d9:70:69:24:f7:e2:e2:25:e6:c4:
0b:0a:54:ca:25:b7:e4:f4:d7:0f:73:37:55:0d:29:
3e:0a:dd:28:46:74:39:41:9e:0b:59:60:16:41:cc:
8a:d1:f5:1c:6a:83:a8:88:a7:20:0a:ac:70:6c:58:
e7:3c:28:7c:7e:d8:71:c2:ef:43:18:d8:a8:66:32:
07:88:06:de:fb:b4:4e:9b:9e:93:40:c3:08:dc:5a:
5d:25:7d:da:ed:50:1a:9f:a8:1b:27:ce:45:2b:46:
14:76:0b:a9:9e:74:b3:2b:3d:c4:d2:7e:f1:5a:5d:
98:0e:e5:8c:9b:4a:f9:8d:72:2a:8b:55:8c:3c:5c:
a0:d4:e8:61:14:8f:49:9b:b1:93:71:09:f4:00:86:
a9:74:0d:a9:f2:6f:2e:19:96:f7:9c:a5:92:69:38:
04:42:cf:a8:95:bc:bc:45:af:40:23:db:c4:04:f9:
9e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:18:C5:7C:C3:E7:8F:B0:A2:4B:73:39:67:6C:AB:9D:7B:9B:F1:C0
X509v3 Authority Key Identifier:
keyid:B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:26:7a:f0:79:9b:5e:3a:ad:6d:88:59:cc:bf:0c:45:c0:43:
20:1a:b0:f6:24:22:4b:c5:f6:da:09:82:15:9e:6d:44:c0:67:
b2:6f:9d:96:d1:7f:57:d1:a0:24:e5:9e:90:df:c9:d9:f0:73:
c3:62:c1:af:b9:f8:1c:9b:27:d4:8a:53:f3:6c:1b:cd:a7:61:
2c:61:58:d5:50:44:97:3a:4e:56:f1:39:69:25:03:77:e6:c5:
2c:e4:f2:31:1e:84:5c:9d:d6:78:37:8b:51:e5:97:10:57:b6:
28:da:db:fb:cb:0f:00:6c:86:9e:0b:fd:39:a1:72:4e:c0:7a:
41:cd:07:c4:ee:60:a3:f6:42:d1:8b:e6:b9:60:6b:04:f1:4a:
64:4f:bc:25:5f:45:08:ed:c4:96:f9:f1:eb:c1:bc:6c:58:b4:
d9:62:26:e7:3e:6e:14:22:a6:5f:28:a0:cb:94:7b:15:0c:a2:
57:fb:bd:dc:4d:d2:6e:d4:27:e4:b0:51:39:3a:7c:13:38:e5:
37:f8:03:a7:9b:02:55:65:e4:d0:ef:04:f3:54:84:43:99:e4:
39:0e:51:2b:f8:7a:17:13:ef:87:08:fa:03:05:18:38:60:52:
85:98:ea:31:51:26:c6:56:c2:f7:2e:62:ab:a9:a3:eb:7f:14:
9e:18:b9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:02:53 2026 by rpki-client