Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
File: qlemjwii4wun1z1EyabiQA_Qo7E.mft (raw, json)
Hash identifier: 53wcsFeIFCHTzTbN8ZKalThZKVwEH4fFeFz6NRWHy+Y=
Subject key identifier: 38:BC:76:51:B0:FB:B1:41:A1:8D:3E:F9:BC:84:7C:55:19:AC:12:E8
Authority key identifier: AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
Certificate issuer: /CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Certificate serial: 01A001A657A76BFC4C164E3DB358C74409A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
Manifest number: 0BD8
Signing time: Fri 14 Aug 2026 19:01:13 +0000
Manifest this update: Fri 14 Aug 2026 19:01:13 +0000
Manifest next update: Sat 15 Aug 2026 19:01:13 +0000
Files and hashes: 1: 6ixSBAJQlI9QTdVaxkNUntZMsmE.roa (hash: md0a0a+udrQg7g7OFxeWWB53q44wWyhdageagzGFqqY=)
2: qlemjwii4wun1z1EyabiQA_Qo7E.crl (hash: GWP5a2XT4g2RooreH1oSj9wm34VPjGQwdxzlQ4gpdf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 19:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:57:a7:6b:fc:4c:16:4e:3d:b3:58:c7:44:09:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Validity
Not Before: Aug 14 19:01:13 2026 GMT
Not After : Aug 15 19:01:13 2026 GMT
Subject: CN=38bc7651b0fbb141a18d3ef9bc847c5519ac12e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d6:70:38:1c:d9:6c:90:aa:30:e3:1a:5c:fa:
f7:73:37:4a:91:a2:b6:08:bc:c8:0e:ea:7a:74:60:
d6:28:7f:b9:c4:1e:6c:c3:e1:30:17:c7:ab:6d:77:
b3:57:18:46:8c:7d:40:be:6c:73:5a:e7:15:44:55:
52:4c:fc:ad:f4:36:4b:db:2a:e2:1b:db:72:cc:54:
33:e6:00:ba:c8:f1:03:81:d6:c4:53:87:72:75:50:
0e:6a:eb:ab:ad:8f:22:a8:11:60:b1:6c:8e:6d:bb:
2f:1b:50:0f:bc:f7:42:76:9c:84:0b:87:c8:4f:43:
6e:77:68:a5:5b:df:c2:e2:be:c9:76:ca:b4:10:f8:
a6:72:6b:de:99:65:1b:59:1c:cd:e7:fc:b9:61:73:
47:c1:00:83:4d:f8:df:cf:a9:01:4b:fa:03:67:23:
65:a0:3e:7e:24:de:f8:9b:cf:93:de:30:89:0c:8d:
36:e2:c9:ec:32:d6:32:cf:b6:d9:68:38:06:92:dc:
ce:c7:77:24:f8:8c:b0:08:30:c5:3d:f3:c4:d5:83:
db:31:33:c1:5b:b7:a6:3a:bd:2c:64:6f:25:58:c9:
d1:30:3b:3e:01:73:a8:2c:4a:50:c2:3f:1b:9a:e5:
dd:bf:8e:a0:13:bd:d5:ce:93:6c:55:d4:74:60:58:
b0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BC:76:51:B0:FB:B1:41:A1:8D:3E:F9:BC:84:7C:55:19:AC:12:E8
X509v3 Authority Key Identifier:
keyid:AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:56:f9:cb:22:0f:bf:e6:d0:6f:53:af:d0:a4:81:67:64:21:
e0:bb:b3:8f:61:35:e3:a5:89:97:8d:67:a3:0f:ef:c1:1d:2b:
5d:e3:65:d8:c1:ee:5e:e8:93:c7:6d:09:23:12:1b:d8:78:a3:
00:c8:23:40:9c:64:3c:c0:9b:5e:9b:46:4a:63:17:82:98:13:
02:dc:f0:17:90:b4:cd:a6:0a:86:23:ee:d4:45:a8:6d:16:2c:
44:ff:15:ba:06:b0:5f:13:d7:c7:d0:01:61:dd:43:36:34:e6:
b7:20:77:c6:27:cf:e2:05:90:1f:03:70:9f:5d:14:c2:ce:08:
a2:c3:54:37:5f:03:b1:39:22:43:35:b7:fc:64:5d:e8:41:27:
cc:80:09:0c:4c:2b:83:68:af:d6:54:78:fd:fb:41:d6:78:87:
98:44:f0:a7:a7:73:91:51:24:8a:5f:c3:e6:00:8a:45:c7:fe:
c5:93:c1:90:c8:3b:d1:46:5e:d7:82:fc:17:f5:f2:c0:92:32:
26:26:7a:2e:e5:7a:2f:d8:0c:6c:be:e0:29:98:ef:ff:d1:6a:
0d:87:52:a6:aa:46:c4:e6:30:df:f2:c8:23:6c:a6:8c:4d:c6:
6f:9e:df:aa:8f:8e:32:15:f3:8b:61:61:46:96:a1:e9:95:26:
6a:64:f8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:34:35 2026 by rpki-client