Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
File: QSewwP58CJNeJYcT_PkP6VjuA-4.mft (raw, json)
Hash identifier: vmI0BFRZLYa86c4ECAM3XKbDFHnDvnG49Zc4U7RFnFc=
Subject key identifier: 85:74:46:6D:B1:50:7C:FE:00:29:ED:71:A6:00:C4:9C:EE:45:36:2E
Authority key identifier: 41:27:B0:C0:FE:7C:08:93:5E:25:87:13:FC:F9:0F:E9:58:EE:03:EE
Certificate issuer: /CN=4127b0c0fe7c08935e258713fcf90fe958ee03ee
Certificate serial: 019F829E314EEA6CEC01D5819EF9E9BBDB68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
Manifest number: 12DD
Signing time: Tue 21 Jul 2026 03:00:32 +0000
Manifest this update: Tue 21 Jul 2026 03:00:32 +0000
Manifest next update: Wed 22 Jul 2026 03:00:32 +0000
Files and hashes: 1: QSewwP58CJNeJYcT_PkP6VjuA-4.crl (hash: U533MxA5lD+agdnNzFePx2ly5CwhNZ14fBjw7sLLyMI=)
2: qDecB_BWF1K9skoTX1OzF0T-DQQ.roa (hash: AAPazeOH0UyI2v6icXzRiwrdFOTR+zzuLsPnN6L+as4=)
3: tPolntRW3EVoA5WCEpAsWda33Aw.roa (hash: R4nNUtjVrvsZ3qcmSOyRAEFItuX7aMB4GwPwNz7Vta4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:9e:31:4e:ea:6c:ec:01:d5:81:9e:f9:e9:bb:db:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4127b0c0fe7c08935e258713fcf90fe958ee03ee
Validity
Not Before: Jul 21 03:00:32 2026 GMT
Not After : Jul 22 03:00:32 2026 GMT
Subject: CN=8574466db1507cfe0029ed71a600c49cee45362e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a0:65:65:47:b6:90:71:5c:56:45:06:50:16:
93:8a:b6:c1:05:92:80:c9:03:00:2f:17:55:b2:8e:
26:05:19:e8:05:41:98:d6:09:25:61:31:36:b9:c0:
40:fb:f1:b4:fd:60:e3:56:b1:b6:58:4e:31:b8:c1:
87:cd:2f:b7:c9:42:01:18:ec:76:f9:cd:b1:9b:6e:
17:96:5d:0e:ed:bf:f0:03:fa:f7:1c:d8:5f:16:4e:
63:09:c6:62:51:d6:58:39:a6:96:e1:6b:6a:83:56:
e4:a5:a4:a3:c2:01:0a:45:14:9b:ed:d2:eb:5e:f1:
56:ec:07:a4:34:8c:04:75:bd:d2:4b:67:08:38:74:
b2:4e:7e:fb:34:ee:45:08:26:99:57:cb:52:f5:5e:
ea:87:1f:c6:79:aa:c0:4f:bb:c6:ce:e7:8c:41:b3:
b7:47:bf:43:63:15:17:87:f2:bc:b4:a6:46:3d:fb:
a2:57:ee:5e:cf:d4:af:7a:bc:44:38:d7:4e:b1:13:
6e:55:fb:8c:91:d2:87:b9:be:4d:44:d1:c4:9a:7e:
1f:d3:30:84:55:cf:08:3f:4b:bb:15:66:6e:af:42:
c0:eb:e3:7f:17:13:53:89:dd:cf:8c:04:62:15:45:
18:33:12:f9:6f:b0:ca:3b:e6:e4:cd:d3:d1:54:fc:
f3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:74:46:6D:B1:50:7C:FE:00:29:ED:71:A6:00:C4:9C:EE:45:36:2E
X509v3 Authority Key Identifier:
keyid:41:27:B0:C0:FE:7C:08:93:5E:25:87:13:FC:F9:0F:E9:58:EE:03:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:79:88:14:45:1f:c5:4e:a4:fd:06:25:d0:d9:64:27:46:e9:
34:a1:1e:34:ff:5e:a2:b2:23:ae:cb:ac:1f:7b:ed:1e:2d:bf:
c2:5b:48:ab:96:69:cd:96:02:f1:3e:86:1a:d5:fe:5c:db:f2:
19:54:f0:b4:a4:27:84:78:79:1a:ad:2a:c1:97:45:65:69:1f:
da:9f:5f:46:2a:a6:cf:96:2f:c6:82:7d:0c:18:40:f5:3a:9b:
02:95:50:a6:dc:92:99:3e:a5:c1:a6:53:84:bd:8b:ed:75:f5:
db:7e:06:92:c4:2e:0e:4f:3e:53:50:11:e1:e7:f4:58:ce:63:
5b:a5:17:d9:2e:61:3e:9f:ec:59:26:d8:65:72:28:c2:67:31:
5f:86:5f:15:6c:aa:b2:fc:2d:c8:7c:13:f3:85:9a:98:25:10:
46:16:47:e5:4c:3f:15:47:52:96:5a:15:8c:49:2f:e2:22:66:
49:7b:0e:e7:f4:63:30:f4:0b:af:5f:9b:3c:ef:bb:23:2c:e7:
31:a5:39:7c:dd:6c:15:3a:e8:cb:3b:1e:33:a0:33:2a:72:b0:
5a:5d:4f:9f:60:0d:e9:e5:ef:5e:b9:a6:d7:43:f5:2a:b9:1f:
6c:85:dd:64:45:37:40:df:8c:2d:c7:1b:f9:4f:07:1b:55:bd:
e4:61:00:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+CnjFO6mzsAdWBnvnpu9toMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMjdiMGMwZmU3YzA4OTM1ZTI1ODcxM2ZjZjkwZmU5NThl
ZTAzZWUwHhcNMjYwNzIxMDMwMDMyWhcNMjYwNzIyMDMwMDMyWjAzMTEwLwYDVQQD
Eyg4NTc0NDY2ZGIxNTA3Y2ZlMDAyOWVkNzFhNjAwYzQ5Y2VlNDUzNjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6BlZUe2kHFcVkUGUBaTirbBBZKA
yQMALxdVso4mBRnoBUGY1gklYTE2ucBA+/G0/WDjVrG2WE4xuMGHzS+3yUIBGOx2
+c2xm24Xll0O7b/wA/r3HNhfFk5jCcZiUdZYOaaW4Wtqg1bkpaSjwgEKRRSb7dLr
XvFW7AekNIwEdb3SS2cIOHSyTn77NO5FCCaZV8tS9V7qhx/GearAT7vGzueMQbO3
R79DYxUXh/K8tKZGPfuiV+5ez9SverxEONdOsRNuVfuMkdKHub5NRNHEmn4f0zCE
Vc8IP0u7FWZur0LA6+N/FxNTid3PjARiFUUYMxL5b7DKO+bkzdPRVPzzqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIV0Rm2xUHz+ACntcaYAxJzuRTYuMB8GA1UdIwQY
MBaAFEEnsMD+fAiTXiWHE/z5D+lY7gPuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVNld3dQNThDSk5lSlljVF9Qa1A2Vmp1QS00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9iZTI5MDMtMzUzOC00NmZmLWFhZTQt
YmQxZDQ4ZDUxMmNlLzEvUVNld3dQNThDSk5lSlljVF9Qa1A2Vmp1QS00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9iZTI5MDMtMzUzOC00NmZmLWFhZTQtYmQxZDQ4ZDUxMmNl
LzEvUVNld3dQNThDSk5lSlljVF9Qa1A2Vmp1QS00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAanmIFEUf
xU6k/QYl0NlkJ0bpNKEeNP9eorIjrsusH3vtHi2/wltIq5ZpzZYC8T6GGtX+XNvy
GVTwtKQnhHh5Gq0qwZdFZWkf2p9fRiqmz5YvxoJ9DBhA9TqbApVQptySmT6lwaZT
hL2L7XX1234GksQuDk8+U1AR4ef0WM5jW6UX2S5hPp/sWSbYZXIowmcxX4ZfFWyq
svwtyHwT84WamCUQRhZH5Uw/FUdSlloVjEkv4iJmSXsO5/RjMPQLr1+bPO+7Iyzn
MaU5fN1sFTroyzseM6AzKnKwWl1Pn2AN6eXvXrmm10P1KrkfbIXdZEU3QN+MLccb
+U8HG1W95GEA/Q==
-----END CERTIFICATE-----
Generated at Tue Jul 21 07:10:33 2026 by rpki-client