
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
File: qQIAoAAN9dhFudsoTQotvuZ2xag.mft (raw, json)
Hash identifier: qB3UcsHE+25TsEeeXhu4sZa3ncpktMvoonGqKW7Ux5c=
Subject key identifier: 96:82:F8:9F:EE:94:D5:CD:9E:B0:2A:6B:A1:1A:8C:4E:75:55:BD:42
Authority key identifier: A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
Certificate issuer: /CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Certificate serial: 019F86B201AF7D708CE7EDB70F4E7558AC85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
Manifest number: 12C5
Signing time: Tue 21 Jul 2026 22:00:40 +0000
Manifest this update: Tue 21 Jul 2026 22:00:40 +0000
Manifest next update: Wed 22 Jul 2026 22:00:40 +0000
Files and hashes: 1: Io1aFz3FdR5Bh1mYcrCe9mIequ8.roa (hash: MsqgD4dNC1FiLIJAOYEnGOt34n4HFw6UdIBX7nTzrgg=)
2: TKU8Yc2L0FbHGl3NXxfpL1eDNnE.roa (hash: c75+0er1lGRbZ38ME3BfFzi74fQVT9//khB7uqu1zrM=)
3: k71EKLBF_cl_NNSjkCcESijpJkY.roa (hash: NcQun5U6vnHcxP8j+XhrdDKMSW0mSEQmABKKB6veuXY=)
4: qQIAoAAN9dhFudsoTQotvuZ2xag.crl (hash: 30CyYvIpirvcdIekKvqRnQYUGCHiFrtIF1J/Yf11vgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:b2:01:af:7d:70:8c:e7:ed:b7:0f:4e:75:58:ac:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Validity
Not Before: Jul 21 22:00:40 2026 GMT
Not After : Jul 22 22:00:40 2026 GMT
Subject: CN=9682f89fee94d5cd9eb02a6ba11a8c4e7555bd42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:03:11:98:41:b5:31:c6:ac:08:86:00:15:54:
9b:8d:0c:63:fc:a4:ad:f0:78:84:c8:af:91:a5:87:
85:c2:00:35:a8:26:8e:c9:e0:7b:d3:74:58:ae:d3:
d5:e1:e5:1b:5a:8a:c7:45:aa:a8:dd:5d:f0:5d:8d:
7f:1b:c0:71:2a:cf:48:53:63:b0:7d:ce:b7:85:79:
44:e3:fa:d7:1b:bc:38:26:ab:17:32:bf:e0:2a:eb:
aa:c3:4b:34:3e:f6:a5:49:89:cc:1a:34:95:60:cc:
33:75:cf:84:e5:8c:2a:93:57:13:4a:bc:e2:da:5f:
ce:ea:ba:c8:52:d1:c7:bf:cc:87:67:01:d7:d9:7b:
28:f1:8d:8f:80:40:b4:ce:6a:16:83:dc:9f:98:ba:
18:2c:69:df:2e:52:90:37:c0:3d:20:11:d7:0b:fb:
1d:21:bd:04:f0:4a:e0:eb:06:21:80:58:9a:bd:d4:
9f:d0:09:a6:aa:91:25:1b:17:d4:ab:ba:29:19:9d:
8c:7c:19:c2:78:1c:6f:fc:a6:5b:e5:b1:96:e7:0c:
ea:3b:03:2d:71:5d:24:23:fc:fd:39:ac:47:81:04:
43:f0:9e:02:83:93:70:d3:c3:ed:a3:ac:79:c6:af:
d3:0c:63:92:02:5a:c7:63:56:f9:ff:28:5a:61:1c:
c3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:82:F8:9F:EE:94:D5:CD:9E:B0:2A:6B:A1:1A:8C:4E:75:55:BD:42
X509v3 Authority Key Identifier:
keyid:A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:37:54:cf:05:76:bd:13:53:22:8c:18:4e:1a:4f:53:1f:04:
70:9f:22:d0:d4:5d:f9:8c:88:56:57:15:4b:af:3b:21:04:e0:
fd:15:a7:b7:2e:1c:b6:0c:78:9d:34:20:fb:1b:5a:77:8c:4c:
2a:93:14:bc:8f:57:c6:1b:2f:7a:3c:8a:58:c9:45:e1:f1:ab:
c1:2c:f5:9e:ef:b3:59:94:11:e7:0d:25:21:b4:14:08:ee:2a:
97:98:4d:ee:10:7e:1a:f2:08:f7:58:b3:71:55:66:e5:13:96:
15:52:84:c1:d2:96:66:ae:90:85:43:6f:de:1f:27:33:82:97:
78:71:0b:b8:ee:47:b4:78:c0:6f:8d:01:db:b4:a4:15:f4:01:
66:fd:29:4d:6c:36:fb:ff:41:32:c7:9f:e7:b9:13:f8:dc:1d:
b8:ee:d4:8f:6e:61:92:0e:b4:6f:a0:f6:fa:5e:f4:5d:04:63:
8b:47:21:ba:a9:2a:b2:ac:91:43:cd:b4:7c:8d:48:40:9e:63:
14:83:9d:cd:61:ec:f1:15:73:b1:3c:52:ff:7c:5b:b2:ec:99:
c2:0f:db:37:15:56:df:0b:95:91:38:68:6c:ea:6c:45:23:75:
33:99:25:ec:66:27:33:06:d8:29:0f:d6:df:4b:e8:35:a6:e6:
a7:8f:36:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:03:58 2026 by rpki-client