Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
File: qvSWmELenEweGldZ2Y0e1cDWLvg.mft (raw, json)
Hash identifier: A76LGoQ9E54+NA6fXrRjxxEDF6XEGK9AnAT5yHOp5V0=
Subject key identifier: 7C:A5:0F:D4:77:69:C0:60:DE:4F:6D:01:33:58:E1:55:D6:B9:AF:60
Authority key identifier: AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
Certificate issuer: /CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
Certificate serial: 019DDDD6A7AC0800516E3EA6F4B52FF4EAEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
Manifest number: 149A
Signing time: Thu 30 Apr 2026 10:02:05 +0000
Manifest this update: Thu 30 Apr 2026 10:02:05 +0000
Manifest next update: Fri 01 May 2026 10:02:05 +0000
Files and hashes: 1: 0EzmePks-egIiJdpcXeEPBWaiJQ.roa (hash: VNTL9T5egZkLrCiJmBLxazk1HQGTpK6/iS8WwNYTg14=)
2: 97p9ZUhGZG6kJjtKp2TuV47gh5U.roa (hash: x88qWTYqI0aG2w0GajPiY4NGO9pvbzLLCkLeMTUd2t4=)
3: AG_3AL0BiXNne_-iEtcT4CW3QFY.roa (hash: MXbxSxIompr7PTpUg8mtZo8EDK4eK9dEM10GngyQSBQ=)
4: R3GyXBYJhMHhgq5yrGVUK3jdnkA.roa (hash: g1FeF6e8PlISr+mSxj+h+WNftfc+dabb3ghrlPO9BE0=)
5: S1xGdMwCL7zcvvXwmIxBk0TUOII.roa (hash: Dt+ahUx8ad2ugzMhIwhEEjwNwt3G09wi3vOVTLugUWQ=)
6: XundD1ATPkgExkAuZ9fhY2EBgJI.roa (hash: +uqd1waFJ4ZIkhGQA2rPiPNb2R7bE9L91cSGBFAjyVM=)
7: p0lVyIeHUzTGYLAW5RWLMmU0VEI.roa (hash: RTQGUQH3DHZP7KXMTE9osS1yh94s1ux67e3vp2zT3Iw=)
8: qvSWmELenEweGldZ2Y0e1cDWLvg.crl (hash: kXj/14Er2Cn6OubYNLBbVBvMZx2aefBD6aQ5L/+9N9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 10:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:d6:a7:ac:08:00:51:6e:3e:a6:f4:b5:2f:f4:ea:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
Validity
Not Before: Apr 30 10:02:05 2026 GMT
Not After : May 1 10:02:05 2026 GMT
Subject: CN=7ca50fd47769c060de4f6d013358e155d6b9af60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bb:ff:26:9c:cd:1e:98:47:96:e6:75:55:67:
dc:a8:45:1a:8a:50:e3:62:11:5b:f6:0e:41:dd:79:
a0:1c:14:d9:cd:24:a3:50:76:59:81:10:c5:68:17:
14:45:03:6b:dd:ea:c6:20:65:0a:96:73:61:c9:a3:
0e:f6:b0:5c:b7:9d:c7:88:1e:6e:b3:76:2f:10:59:
a1:7f:db:b5:df:6d:2c:33:38:e6:19:fe:d2:74:bf:
f7:5a:79:fc:e2:3c:df:56:3e:fa:da:87:46:67:9b:
c9:81:33:84:3d:0b:22:9d:1f:fd:f4:aa:8c:0c:b0:
1f:d1:48:60:58:fe:f7:cd:ce:2e:8e:04:a3:11:d4:
10:ae:94:06:0f:74:87:ca:76:c8:0b:26:dc:f6:c5:
48:a2:4a:37:cb:cf:07:83:21:e9:90:fe:29:9c:73:
5c:87:cc:c4:4d:59:19:e3:33:40:a0:3d:b9:f6:ab:
13:9c:c1:38:eb:d9:da:1d:32:19:fe:5a:32:1d:3a:
70:e4:87:b3:11:38:06:c5:94:b9:9a:4b:33:b1:76:
de:97:9d:a3:4d:a0:63:3e:73:fa:ea:4e:3a:8a:02:
d4:ef:05:d5:d2:d3:b7:8f:da:c6:ed:6c:72:8f:74:
94:8d:e0:fe:af:e4:81:a9:92:89:80:58:6b:af:a9:
c3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A5:0F:D4:77:69:C0:60:DE:4F:6D:01:33:58:E1:55:D6:B9:AF:60
X509v3 Authority Key Identifier:
keyid:AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:d3:8f:c9:cd:c5:6e:13:30:a3:37:30:d1:26:4d:0d:e4:16:
04:5e:18:6e:cb:7b:18:b7:fa:ed:75:21:30:a7:23:fe:cd:cd:
09:3f:31:60:70:43:ef:29:6c:cf:53:d1:42:39:06:07:42:b4:
ea:e1:7c:f0:e0:f7:18:35:9a:69:61:67:93:08:0a:aa:ec:f1:
96:c8:45:34:89:9e:3c:c1:c9:3f:07:e7:2a:57:96:e9:4d:9d:
55:8a:4d:6a:38:07:fd:cf:c9:c8:22:67:e3:46:b1:84:dc:57:
a7:77:f8:74:7c:7f:1d:62:b2:1a:7b:67:8a:f1:2e:8e:63:67:
e8:4b:eb:4e:60:aa:b2:93:cd:46:61:77:3f:06:5a:8c:f6:c0:
ed:28:07:2a:58:15:bb:e3:5b:10:72:6e:2a:67:dd:11:50:27:
63:f6:d3:93:f2:db:d4:49:74:41:12:e9:e9:9d:4e:d7:a5:1e:
cc:08:45:5c:3c:46:73:0d:c9:88:9a:ce:4c:6c:62:64:18:ba:
65:5a:ca:fb:a9:52:05:bd:79:36:5e:cf:d5:12:5b:92:2f:31:
ff:27:95:22:b2:f0:9d:d2:68:8c:f4:d5:30:55:25:de:ec:e5:
7b:a5:b1:aa:19:16:66:fd:fb:37:35:b4:e3:85:83:99:1c:2a:
ca:53:cf:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 16:37:18 2026 by rpki-client