Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
File: qFfj-rEefTOV3RA9ap-V2SJV9ks.mft (raw, json)
Hash identifier: tIKTTgfMax+VDPpBT/E7Luuu8+Wb4jLOL6o4oh/En0M=
Subject key identifier: 40:30:E0:00:55:76:FB:7B:D6:64:67:48:E6:AD:1E:62:38:BE:EA:B5
Authority key identifier: A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B
Certificate issuer: /CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b
Certificate serial: 019F83B1673F216B47A881FBB1F37F192687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
Manifest number: 0438
Signing time: Tue 21 Jul 2026 08:01:09 +0000
Manifest this update: Tue 21 Jul 2026 08:01:09 +0000
Manifest next update: Wed 22 Jul 2026 08:01:09 +0000
Files and hashes: 1: IDbm4BTVJkr2LGXzbqOrz6EVNx4.roa (hash: 6Be3sqYYXs7RhhAxfXcGlT5hWEPDQQflddEPFI3kouc=)
2: qFfj-rEefTOV3RA9ap-V2SJV9ks.crl (hash: NNxqsSG/cVOofdnAQJdNX3DibYq4wxFqkyygrJXKBDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:b1:67:3f:21:6b:47:a8:81:fb:b1:f3:7f:19:26:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b
Validity
Not Before: Jul 21 08:01:09 2026 GMT
Not After : Jul 22 08:01:09 2026 GMT
Subject: CN=4030e0005576fb7bd6646748e6ad1e6238beeab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:97:87:ee:b7:0c:7c:4d:3e:c2:c5:b4:0e:64:
56:7f:6c:39:89:33:c8:94:07:74:6d:3a:73:2a:a4:
c4:c8:29:82:dd:c4:a8:72:85:0a:6c:a9:64:e9:b8:
52:e5:f2:26:1c:11:61:51:ee:46:56:c2:6f:36:46:
96:83:b6:49:63:70:69:76:65:6b:a2:6f:38:d4:f4:
a9:44:86:09:74:6d:0f:e8:20:1c:4a:3f:c4:7b:0d:
50:6a:fe:90:c1:7f:f2:81:b3:02:b9:16:f9:dc:a4:
9b:01:10:64:fd:f4:93:93:7a:08:a7:c2:fe:21:dd:
8b:c6:38:9a:25:5b:59:ba:7a:48:89:7e:ee:a4:f2:
95:cc:e8:dc:ad:20:08:e2:ca:d1:2a:6f:87:ef:44:
92:09:4f:60:2c:04:71:a7:70:7a:6b:0f:df:dd:ef:
da:b4:26:d9:30:69:dd:0a:c7:9e:ee:08:ab:37:7b:
bf:ff:b1:46:54:36:0e:b8:55:44:51:d1:4d:e8:5c:
af:68:39:7e:bf:3b:4e:15:12:a2:a7:5f:19:72:bf:
b5:91:a9:7d:5c:25:95:4d:a7:94:06:15:c1:66:ec:
39:7b:a0:ef:da:55:13:84:5d:ab:a8:5b:d2:99:d0:
41:d4:19:b2:b7:4f:07:02:81:06:c2:81:f1:1a:02:
44:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:30:E0:00:55:76:FB:7B:D6:64:67:48:E6:AD:1E:62:38:BE:EA:B5
X509v3 Authority Key Identifier:
keyid:A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:4b:8a:f7:40:c9:e7:52:b7:70:25:4a:a6:4f:11:28:0c:eb:
89:d6:dd:2f:ba:9c:05:82:c9:7b:29:18:dc:5c:c3:0c:7f:4a:
1d:28:3c:5d:b9:c5:53:25:be:11:b1:b2:b2:a0:90:e5:cd:00:
de:81:9d:59:c9:fc:07:bd:ea:fe:c7:b2:46:30:11:a2:5b:f0:
88:f9:07:0a:be:7b:3a:59:ae:f9:b2:43:d5:24:a3:f2:bf:90:
a4:2d:11:95:6b:dc:5b:fc:47:b9:de:b9:f0:59:2f:42:1a:75:
44:d7:17:1e:62:39:91:d9:34:15:15:9f:b8:96:e0:dc:74:34:
97:4b:99:f3:36:d9:9d:ed:62:74:97:9a:67:a1:82:cd:b1:9e:
14:82:77:5f:f7:42:5f:ce:92:01:a0:ed:45:49:92:2a:b6:d5:
1a:fa:9e:47:5b:4f:3e:78:b8:55:14:78:06:1d:c5:2f:61:40:
f3:76:9e:c3:ee:50:28:2c:10:7a:ba:f6:67:ee:84:df:a6:20:
95:80:a8:ed:ca:c9:f2:31:64:f7:fc:35:28:38:be:36:d6:3b:
5a:cf:77:7c:a8:73:d8:5e:68:14:2c:dd:40:4f:d4:5c:08:26:
7e:29:a9:c6:5e:47:da:d5:8e:a0:a4:32:9e:38:91:80:44:b6:
60:34:4e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:14:12 2026 by rpki-client