Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
File: QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft (raw, json)
Hash identifier: VzwYSHqm78IPNuWeYmj2IiM0A0+4JTiizQ802tGQVNk=
Subject key identifier: 5A:C9:DE:87:6D:D6:75:39:19:93:D0:25:BD:EB:90:4B:A0:71:29:F0
Authority key identifier: 40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87
Certificate issuer: /CN=407c7083460e1a4c72c4bc4276313d3a85944a87
Certificate serial: 019FA1F22206D282FD6C94D5536AF19FE9A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
Manifest number: 1161
Signing time: Mon 27 Jul 2026 05:00:27 +0000
Manifest this update: Mon 27 Jul 2026 05:00:27 +0000
Manifest next update: Tue 28 Jul 2026 05:00:27 +0000
Files and hashes: 1: 9l35f4vtEnwERy91rSIzMefrFvk.roa (hash: o4NZxjI3TjEffFvPCpSdso698d9KA9gU7jcbU25ovX4=)
2: QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl (hash: 2GcjkSThvT25XUzUXzrxuhjHnQVODy7OJckHpdil/BY=)
3: _DMWomZ-zw9r2w8AsNSptLxDmfA.roa (hash: 5DRqqMVL9GM/PG8SfYwPRoOqjNYLEPPU5+fO2uX+eWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:22:06:d2:82:fd:6c:94:d5:53:6a:f1:9f:e9:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407c7083460e1a4c72c4bc4276313d3a85944a87
Validity
Not Before: Jul 27 05:00:27 2026 GMT
Not After : Jul 28 05:00:27 2026 GMT
Subject: CN=5ac9de876dd675391993d025bdeb904ba07129f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:eb:75:ff:51:a4:44:52:bd:05:5b:c4:be:73:
ac:d1:e3:a7:1c:42:32:a5:ea:be:18:43:b3:8d:4c:
50:31:6a:58:f8:5d:bb:65:0b:17:4c:33:f6:13:59:
c7:46:c7:f8:4f:ce:96:ad:6e:1a:65:0d:3b:b9:15:
46:9f:f9:5b:2a:8b:fb:3d:08:7d:f9:b8:3a:97:3c:
0c:3c:5e:46:ae:3e:c6:15:69:5b:18:eb:15:8e:67:
7a:0d:f6:5c:f1:7c:24:b2:2d:c9:4a:70:61:1e:a0:
b6:dc:c1:55:97:49:da:1d:ee:2e:6f:13:fa:66:56:
61:a1:83:4d:01:a3:8c:18:b9:f5:f1:a8:b5:9e:57:
92:36:d9:e7:cd:32:4b:aa:72:4a:25:55:9a:22:e7:
a2:82:92:1c:6a:e7:fd:7a:b5:f2:83:b8:48:a1:7f:
a5:ef:6a:8e:cf:02:ab:bf:71:16:64:84:e1:dc:f7:
97:4e:f9:bd:c5:96:8b:6a:f1:ba:03:15:f8:b7:98:
99:51:07:4b:92:8e:03:ad:80:a7:78:9f:87:55:32:
ca:bc:e0:73:03:02:66:c1:89:7c:4a:b0:0a:5c:e6:
01:77:5b:2e:c1:b0:8b:51:8b:85:d8:d1:c2:77:6e:
91:b0:83:30:d9:0b:ba:4b:7f:47:45:c7:6a:9a:c6:
dc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C9:DE:87:6D:D6:75:39:19:93:D0:25:BD:EB:90:4B:A0:71:29:F0
X509v3 Authority Key Identifier:
keyid:40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:d6:3a:72:11:d1:5e:d2:84:2a:23:98:66:26:1b:f1:68:b6:
af:01:f9:7f:07:09:1a:47:b5:8c:be:f0:c1:16:64:23:03:27:
ec:87:ef:a2:89:0d:a1:19:e7:20:e3:ea:58:74:ec:3d:16:48:
ff:9b:53:8f:2b:b0:53:cd:a4:8c:65:7e:22:83:a6:37:46:26:
12:43:ce:67:25:cc:2f:a3:27:6c:c2:ca:70:ea:96:15:25:dc:
03:90:d6:03:62:c9:d7:10:f0:e0:bb:f8:f0:d0:94:8b:9c:6f:
6c:c1:8b:66:da:3c:33:55:23:d2:a6:ea:ce:4a:8c:c3:37:60:
76:b2:c1:25:b7:a5:64:05:d4:7f:13:6c:fe:6c:b3:6b:8f:c2:
19:c8:f2:7d:4e:13:98:c7:52:d2:39:69:1c:2f:b2:ee:19:4a:
b9:80:7c:99:7e:4e:38:a5:9f:d0:76:7b:45:a0:84:d7:87:cb:
2e:51:ff:71:e5:cf:4c:ce:c5:f8:80:05:4a:13:b7:14:64:16:
51:b3:21:1e:a1:54:b9:f1:54:5f:86:4c:0c:00:fa:73:e1:a2:
91:9d:f0:4a:e1:81:d2:1f:70:5a:32:d3:01:66:e5:7f:95:27:
2d:dc:86:75:6e:e1:d7:04:08:68:f9:38:44:38:d3:87:64:bf:
a9:ae:2e:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+h8iIG0oL9bJTVU2rxn+mkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwN2M3MDgzNDYwZTFhNGM3MmM0YmM0Mjc2MzEzZDNhODU5
NDRhODcwHhcNMjYwNzI3MDUwMDI3WhcNMjYwNzI4MDUwMDI3WjAzMTEwLwYDVQQD
Eyg1YWM5ZGU4NzZkZDY3NTM5MTk5M2QwMjViZGViOTA0YmEwNzEyOWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOt1/1GkRFK9BVvEvnOs0eOnHEIy
peq+GEOzjUxQMWpY+F27ZQsXTDP2E1nHRsf4T86WrW4aZQ07uRVGn/lbKov7PQh9
+bg6lzwMPF5Grj7GFWlbGOsVjmd6DfZc8Xwksi3JSnBhHqC23MFVl0naHe4ubxP6
ZlZhoYNNAaOMGLn18ai1nleSNtnnzTJLqnJKJVWaIueigpIcauf9erXyg7hIoX+l
72qOzwKrv3EWZITh3PeXTvm9xZaLavG6AxX4t5iZUQdLko4DrYCneJ+HVTLKvOBz
AwJmwYl8SrAKXOYBd1suwbCLUYuF2NHCd26RsIMw2Qu6S39HRcdqmsbciwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFrJ3odt1nU5GZPQJb3rkEugcSnwMB8GA1UdIwQY
MBaAFEB8cINGDhpMcsS8QnYxPTqFlEqHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUh4d2cwWU9Ha3h5eEx4Q2RqRTlPb1dVU29jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84YTc1NjktZWQ3NC00YTkyLTg2Mjct
OTg1ZWQxNWM5YWViLzEvUUh4d2cwWU9Ha3h5eEx4Q2RqRTlPb1dVU29jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi84YTc1NjktZWQ3NC00YTkyLTg2MjctOTg1ZWQxNWM5YWVi
LzEvUUh4d2cwWU9Ha3h5eEx4Q2RqRTlPb1dVU29jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl9Y6chHR
XtKEKiOYZiYb8Wi2rwH5fwcJGke1jL7wwRZkIwMn7IfvookNoRnnIOPqWHTsPRZI
/5tTjyuwU82kjGV+IoOmN0YmEkPOZyXML6MnbMLKcOqWFSXcA5DWA2LJ1xDw4Lv4
8NCUi5xvbMGLZto8M1Uj0qbqzkqMwzdgdrLBJbelZAXUfxNs/myza4/CGcjyfU4T
mMdS0jlpHC+y7hlKuYB8mX5OOKWf0HZ7RaCE14fLLlH/ceXPTM7F+IAFShO3FGQW
UbMhHqFUufFUX4ZMDAD6c+GikZ3wSuGB0h9wWjLTAWblf5UnLdyGdW7h1wQIaPk4
RDjTh2S/qa4uGw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 12:09:32 2026 by rpki-client