Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
File: qgYKY9op1_lWF6b_u09RzMvHhlE.mft (raw, json)
Hash identifier: sVtukI02riGSA4ad0sqnBcM5wnOFsxFWmTlMCiJG5lE=
Subject key identifier: E6:E2:32:39:49:58:AF:06:CE:AE:0C:15:FB:5A:7F:8B:C0:59:1E:75
Authority key identifier: AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51
Certificate issuer: /CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
Certificate serial: 019F84C3E72664E0CCEFFCD149C478F055DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
Manifest number: 1631
Signing time: Tue 21 Jul 2026 13:00:58 +0000
Manifest this update: Tue 21 Jul 2026 13:00:58 +0000
Manifest next update: Wed 22 Jul 2026 13:00:58 +0000
Files and hashes: 1: 13KLyP6gZAyfsLYlKYob4QTrBOY.roa (hash: UC903c/BhGuwxFubD7WJePOBlwZE5lZusD52hX3+scI=)
2: JDIQvJOOgOU1198oLwbvPRw_rhI.roa (hash: ULh5noQt/vxcOhnB+/7fGlpNTGaGPtsJ4TS11neT8M4=)
3: qgYKY9op1_lWF6b_u09RzMvHhlE.crl (hash: w1mYvHMUeDExP1pIwFwqJuissvhbt/Z74vRMrg5BYfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:c3:e7:26:64:e0:cc:ef:fc:d1:49:c4:78:f0:55:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
Validity
Not Before: Jul 21 13:00:58 2026 GMT
Not After : Jul 22 13:00:58 2026 GMT
Subject: CN=e6e232394958af06ceae0c15fb5a7f8bc0591e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:72:6c:bd:ba:2c:95:47:fe:5f:b4:03:d8:04:
bb:12:d5:6f:83:5c:20:9d:2e:42:ce:3e:03:da:5d:
b6:26:48:01:23:e1:b4:f6:68:93:8b:e1:40:69:a8:
1f:f9:65:6c:30:df:7d:3d:65:e0:81:4f:e1:d3:7d:
d8:b7:ad:01:ba:14:49:d4:97:de:03:1e:e9:4c:de:
ae:3a:cd:41:64:eb:ee:06:b1:de:0f:a6:9f:66:f2:
d5:fb:cd:ea:11:f3:ed:04:92:e9:c0:88:04:cd:5a:
76:0d:4c:fd:81:7a:54:47:5c:a7:12:d7:eb:4a:67:
5a:cd:e2:3f:53:8e:2f:ca:75:1f:63:76:b7:ff:33:
45:71:0c:52:b6:5f:6d:65:e9:38:e9:22:ff:a1:13:
7e:21:0f:96:e8:5c:ec:d6:e5:1f:21:9b:cb:93:85:
6b:c5:59:9c:ee:f8:11:32:d7:11:cf:78:9b:98:74:
02:50:f1:30:1d:d1:61:ed:4a:d8:d8:8c:b8:1d:67:
7b:fa:7e:a1:3a:b5:50:15:2c:d8:13:4b:15:2b:9d:
36:05:e5:8b:42:8d:01:d5:f0:48:d2:02:55:09:25:
d0:79:42:18:a0:68:89:08:29:a1:9c:b0:ae:81:7a:
ce:d6:dc:6d:48:44:4f:bc:17:c1:ea:43:12:33:8d:
28:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E2:32:39:49:58:AF:06:CE:AE:0C:15:FB:5A:7F:8B:C0:59:1E:75
X509v3 Authority Key Identifier:
keyid:AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:3c:59:10:22:eb:f4:ed:29:be:7e:42:1e:68:70:cb:ab:8e:
06:c2:d0:5b:21:86:9e:9d:5f:63:df:6d:5d:a3:ac:c2:76:c0:
13:16:c6:b8:06:7f:b2:38:ce:e1:a7:60:7a:7a:98:cc:a6:15:
77:fd:61:6e:67:d5:5d:c6:25:2f:8d:ee:70:fb:b2:88:fb:18:
df:fe:e7:b7:3e:99:ee:ab:e5:34:3e:0d:18:e9:6c:1e:48:30:
4a:5a:eb:fa:94:10:1e:2b:80:03:9c:e2:8d:92:c7:40:40:b0:
1d:17:9b:0f:d2:f3:f1:56:04:31:3b:c3:f5:35:92:06:07:cf:
6b:a3:f9:6d:80:be:ca:c8:22:e3:00:f6:c2:1a:f1:d1:24:31:
94:c3:87:5d:fd:55:05:f2:d9:09:41:20:4b:c0:0c:b3:32:9f:
1c:0d:55:bf:d7:8d:c5:b3:2c:8c:28:b8:a6:f3:77:5d:75:fd:
47:be:13:52:25:7d:c0:06:5a:5c:26:4f:16:a5:d6:c0:ec:6c:
ef:0f:7e:f4:de:84:a4:1a:1f:22:d6:02:59:3f:9c:ee:c3:da:
ce:60:ec:cc:cf:65:fe:1c:69:bf:48:bf:7b:31:67:72:a1:d8:
0f:63:9f:c7:00:52:54:73:49:37:5e:e2:63:d2:f6:dc:54:09:
da:2f:46:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:50:53 2026 by rpki-client