Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
File: qvSWmELenEweGldZ2Y0e1cDWLvg.mft (raw, json)
Hash identifier: aI4lX30WapbHBLhyBdCJolj/crm8XG03XVUHBBkfF2o=
Subject key identifier: 73:67:5F:53:AC:EF:24:D2:1D:F4:E0:62:2D:8C:97:78:D8:1A:27:28
Authority key identifier: AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
Certificate issuer: /CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
Certificate serial: 019FEB1E915696296BF82B2C0A90BDF043D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
Manifest number: 15AA
Signing time: Mon 10 Aug 2026 10:01:16 +0000
Manifest this update: Mon 10 Aug 2026 10:01:16 +0000
Manifest next update: Tue 11 Aug 2026 10:01:16 +0000
Files and hashes: 1: 0EzmePks-egIiJdpcXeEPBWaiJQ.roa (hash: VNTL9T5egZkLrCiJmBLxazk1HQGTpK6/iS8WwNYTg14=)
2: 97p9ZUhGZG6kJjtKp2TuV47gh5U.roa (hash: x88qWTYqI0aG2w0GajPiY4NGO9pvbzLLCkLeMTUd2t4=)
3: AG_3AL0BiXNne_-iEtcT4CW3QFY.roa (hash: MXbxSxIompr7PTpUg8mtZo8EDK4eK9dEM10GngyQSBQ=)
4: R3GyXBYJhMHhgq5yrGVUK3jdnkA.roa (hash: g1FeF6e8PlISr+mSxj+h+WNftfc+dabb3ghrlPO9BE0=)
5: S1xGdMwCL7zcvvXwmIxBk0TUOII.roa (hash: Dt+ahUx8ad2ugzMhIwhEEjwNwt3G09wi3vOVTLugUWQ=)
6: XundD1ATPkgExkAuZ9fhY2EBgJI.roa (hash: +uqd1waFJ4ZIkhGQA2rPiPNb2R7bE9L91cSGBFAjyVM=)
7: p0lVyIeHUzTGYLAW5RWLMmU0VEI.roa (hash: RTQGUQH3DHZP7KXMTE9osS1yh94s1ux67e3vp2zT3Iw=)
8: qvSWmELenEweGldZ2Y0e1cDWLvg.crl (hash: 6blS2RxXwMFGfgsPCFynXOpLiv3FoMoOMESuVUsjCQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Aug 2026 10:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:1e:91:56:96:29:6b:f8:2b:2c:0a:90:bd:f0:43:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
Validity
Not Before: Aug 10 10:01:16 2026 GMT
Not After : Aug 11 10:01:16 2026 GMT
Subject: CN=73675f53acef24d21df4e0622d8c9778d81a2728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bb:3c:04:32:30:c2:74:5e:08:58:7d:3e:b6:
30:e1:dd:52:b6:ab:8d:c0:fd:61:25:06:24:c4:f6:
17:0f:70:6b:77:39:63:6c:1e:59:ba:28:e5:05:c8:
57:aa:b9:9c:ac:87:a5:fb:f9:bf:3e:93:0b:40:5b:
1d:cd:ce:4d:5d:b3:37:36:c4:d2:cf:42:58:a7:db:
b1:a9:ee:e6:96:57:38:62:e1:d5:37:21:71:b1:79:
83:0d:16:94:43:52:e8:87:3b:34:ed:e8:57:f0:a2:
fc:70:47:f8:cc:db:8c:0d:ca:7c:40:c3:79:62:4e:
4c:42:cf:c8:38:bd:25:69:38:a3:4c:aa:51:d3:e4:
b8:89:52:4b:2f:f4:9b:d0:43:10:ff:96:d7:62:e4:
93:23:46:a2:ac:2f:66:b1:b8:b3:75:5a:92:5a:1c:
0a:28:77:11:9b:10:42:18:b6:d5:07:a0:8c:72:cb:
0d:b4:66:4e:88:ed:46:2e:e1:4e:62:28:17:3e:89:
27:dc:26:16:6a:7a:d8:2f:0b:16:5c:3d:d1:36:c1:
0e:f8:12:65:dd:b2:18:05:82:0e:95:f3:1e:a6:77:
f3:7b:68:90:65:2b:e4:45:46:2f:7f:e2:3a:89:5f:
fb:f1:71:95:55:7f:7f:c7:cb:ba:8f:b6:34:57:bb:
9f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:67:5F:53:AC:EF:24:D2:1D:F4:E0:62:2D:8C:97:78:D8:1A:27:28
X509v3 Authority Key Identifier:
keyid:AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:33:e4:c3:40:54:19:ec:73:56:72:51:f9:ab:6e:82:a5:57:
12:62:94:d7:37:8d:0e:49:53:98:0d:26:7f:3e:71:ae:96:d4:
dd:91:b2:17:b7:c1:52:32:04:4e:44:bf:f7:44:0f:61:e2:08:
b7:3f:47:d4:df:6c:0f:00:9c:c2:d4:66:d8:fb:51:52:22:60:
29:85:dd:7d:5d:5a:06:3d:ac:d2:6f:74:de:c8:5b:69:2b:82:
a2:90:4f:e0:04:b3:26:56:6b:d5:51:0f:d3:fa:ef:aa:1e:b2:
45:15:76:b5:49:e2:3d:b9:98:bd:7f:e0:6c:25:59:49:1b:8a:
ee:81:d2:62:73:2f:9d:27:35:46:29:8b:90:c5:9d:20:9c:0f:
52:6e:fe:2c:ae:53:12:b0:69:10:4e:69:2d:e4:f6:25:e0:56:
19:8f:ad:01:be:9a:34:9d:20:3d:f7:e8:d1:43:2a:3f:cb:c3:
c0:b0:10:ef:0f:96:06:2c:6b:e7:3b:dc:19:df:fe:5e:9f:7a:
a5:19:db:23:46:56:26:2a:77:2e:59:7e:14:75:c0:26:8b:45:
1e:37:ec:dc:c6:c7:5a:81:14:c6:e0:4c:39:99:b2:25:25:c0:
88:a0:75:7a:8a:a2:d6:36:22:a0:7b:d3:8a:24:6c:a1:f6:7c:
a1:8c:74:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 10 19:58:20 2026 by rpki-client