Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
File: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft (raw, json)
Hash identifier: d0KZcLLRN+kYpP/E7gOo/6zj9zwF53+xa93+ssPoB1I=
Subject key identifier: A1:34:CF:44:DE:90:BB:53:2C:F1:C3:31:36:4E:A7:1B:B1:B6:29:FE
Authority key identifier: A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
Certificate issuer: /CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Certificate serial: 019FA0725F73B9E70082461187CB31924948
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
Manifest number: 156A
Signing time: Sun 26 Jul 2026 22:01:17 +0000
Manifest this update: Sun 26 Jul 2026 22:01:17 +0000
Manifest next update: Mon 27 Jul 2026 22:01:17 +0000
Files and hashes: 1: 3FimOljJosTayAtjbZa6x1Z1MXs.roa (hash: MeEGr+necOtlrJoGJSW1/wG4DV94jp5QrV4hS1BQHCg=)
2: QP9nM5PMiejN9yhohpS-UJYwohQ.roa (hash: YoeG5CqmyBDeclyGv/x1kOlmle614YEmox8sx9pd0fU=)
3: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl (hash: TPzgJAh/fwiTuF8UO2wsXMwNbijFLEUr/sB1JTy82DE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:72:5f:73:b9:e7:00:82:46:11:87:cb:31:92:49:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Validity
Not Before: Jul 26 22:01:17 2026 GMT
Not After : Jul 27 22:01:17 2026 GMT
Subject: CN=a134cf44de90bb532cf1c331364ea71bb1b629fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:80:b4:3c:01:13:24:01:40:e2:18:91:de:9d:
47:e5:05:79:3f:82:f0:79:96:fb:e3:02:16:9f:ff:
e7:18:93:c6:7b:5d:49:85:b1:43:23:ac:05:f3:80:
04:57:b4:b6:15:b8:2c:16:f6:2c:b3:9b:cc:8e:c5:
2a:4f:66:c4:22:76:68:ea:2f:f3:5b:3d:e0:83:af:
d2:8b:29:c3:e3:76:bf:02:a0:9a:20:c5:55:aa:43:
f0:81:ab:88:56:41:44:71:29:f8:8a:b6:d1:f3:96:
85:13:6a:e4:25:7f:21:3f:2b:2b:1f:d9:44:d7:b2:
3b:ba:37:32:ff:58:3b:c6:b1:f1:f1:4f:37:03:65:
f2:fb:7d:5f:76:c1:3f:86:ca:bf:6d:aa:81:3d:58:
4d:36:27:1c:4f:8e:39:73:cc:2a:09:c6:00:f1:96:
17:96:c8:96:93:9a:71:55:0a:d3:cd:a6:ce:bf:c5:
df:2a:b2:c6:b4:f9:a4:95:15:39:a3:36:e0:52:21:
2d:bd:67:a3:ea:56:aa:af:ed:89:56:a6:0c:72:77:
49:91:60:a4:59:0b:d2:45:2e:26:0b:83:96:0d:0a:
29:f8:d0:c1:4b:99:49:ba:65:45:2b:10:2a:67:8d:
22:4e:da:28:33:89:0e:b6:03:d0:c5:85:bb:99:72:
b6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:34:CF:44:DE:90:BB:53:2C:F1:C3:31:36:4E:A7:1B:B1:B6:29:FE
X509v3 Authority Key Identifier:
keyid:A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:a8:d6:70:3d:ea:95:e3:f0:95:67:4b:06:f5:81:00:be:b3:
7f:e9:9b:99:04:84:4c:b5:35:ef:cd:ec:d8:76:34:c3:a5:00:
43:9d:50:e6:3d:8d:9a:4b:e2:24:7c:99:69:f2:42:06:20:d7:
3a:bb:32:e8:0e:95:c0:70:aa:9e:d1:82:f6:d2:a7:af:bc:02:
ec:4f:9e:8b:67:d3:ce:b6:c7:e2:31:cf:93:ea:1f:27:05:16:
d2:50:b5:93:33:96:a1:e4:b9:3a:8b:e9:3b:51:bd:2d:7f:33:
17:6c:ca:c8:b4:86:ff:66:e5:93:f7:28:0e:b7:51:9a:c8:45:
65:a7:6b:ef:b3:42:e7:b0:ab:06:73:d9:15:83:df:06:f2:e6:
7f:4f:20:91:30:79:36:0b:e3:5f:93:ca:66:79:57:a5:3e:da:
9d:aa:93:c8:f5:6f:d5:15:b8:4c:f7:c6:d3:da:b2:d9:d2:17:
e1:09:3e:b4:c6:bd:1a:db:6d:46:d1:3e:79:53:fa:5d:6a:a8:
fa:6f:4c:29:b8:72:ed:1d:c8:55:5d:95:89:c4:31:e2:64:ce:
13:6c:60:8f:a3:14:3f:a1:8d:9e:12:f7:7c:c7:bf:a4:87:0a:
67:7e:65:fc:2c:7a:38:fa:b8:a2:80:19:c5:ec:e4:85:00:00:
98:c4:c5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:17:11 2026 by rpki-client