Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
File: qsqNwMC5IbCJ8WAmGORVN5enR0I.mft (raw, json)
Hash identifier: vZj11n2+NK+z3/OJ4AGlyrxE9ksmxx3AB6weWDJluHc=
Subject key identifier: 59:11:86:93:62:89:1B:24:FE:0A:63:99:5F:10:E5:CF:CC:37:95:41
Authority key identifier: AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42
Certificate issuer: /CN=aaca8dc0c0b921b089f1602618e4553797a74742
Certificate serial: 019F9E832C4D9CE04057B418503B865E800D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
Manifest number: 0570
Signing time: Sun 26 Jul 2026 13:00:24 +0000
Manifest this update: Sun 26 Jul 2026 13:00:24 +0000
Manifest next update: Mon 27 Jul 2026 13:00:24 +0000
Files and hashes: 1: G8uE_YXvAUsbhoJ7QQgS2ptGK4I.roa (hash: BCzWL8FjjNpuELNVuLODI9jH/96WSdwiWl+ywyyb3Cc=)
2: qsqNwMC5IbCJ8WAmGORVN5enR0I.crl (hash: +YZ+n/5wLDkdN3TL8H4SQQV3dasibLuxfOU69kWGSxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:83:2c:4d:9c:e0:40:57:b4:18:50:3b:86:5e:80:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaca8dc0c0b921b089f1602618e4553797a74742
Validity
Not Before: Jul 26 13:00:24 2026 GMT
Not After : Jul 27 13:00:24 2026 GMT
Subject: CN=5911869362891b24fe0a63995f10e5cfcc379541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:75:5b:c3:99:e9:b1:fb:01:50:fb:95:3c:86:
5a:01:8d:aa:b8:57:2a:1b:65:bf:65:61:ac:fa:2d:
ef:ef:5e:d2:75:94:63:d3:86:46:29:84:63:a8:a3:
65:52:9c:a0:24:fb:19:5a:a1:04:9e:ae:6a:a6:ba:
7a:21:94:ba:32:6b:63:b4:77:1a:dd:01:b2:9c:81:
c6:fd:59:55:61:24:8f:cd:15:42:7e:08:3c:c8:c6:
03:89:2f:ed:8c:05:64:8a:90:72:cf:8e:23:49:c8:
31:1c:18:16:3b:d4:8d:25:2e:9e:93:88:f3:c7:a0:
5b:2a:81:1e:cf:07:b0:72:d7:96:e5:d5:96:94:4c:
7a:ce:0f:47:6f:57:de:1f:c6:96:09:d6:0c:8e:73:
ac:6d:9a:e4:61:fe:4b:fe:ba:c1:23:51:a0:38:45:
00:3d:fd:0d:0d:b4:da:76:48:b3:1f:2a:23:87:3c:
cb:c8:e3:cd:66:6e:17:b7:1c:38:77:d7:27:c3:b3:
54:15:15:0c:d2:bd:9b:d1:6e:30:27:60:74:10:41:
bd:c2:94:66:e5:f0:88:75:9a:a0:77:67:10:bf:74:
7f:80:12:da:5a:29:27:2a:f9:a1:db:9d:92:32:d8:
0c:d9:bc:e9:10:be:cc:1b:05:39:70:16:a9:f7:23:
4b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:11:86:93:62:89:1B:24:FE:0A:63:99:5F:10:E5:CF:CC:37:95:41
X509v3 Authority Key Identifier:
keyid:AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:6b:e7:97:4a:03:5e:a8:9b:ac:16:7a:e6:79:31:d6:59:b5:
0d:f8:55:c2:a6:d6:50:0b:ca:1a:b2:7a:11:7d:da:6a:1e:7f:
66:38:64:92:f5:ae:26:eb:f9:ca:de:13:64:14:0b:dc:61:8e:
d9:a2:a4:0f:c2:f4:8b:d1:dc:31:e2:46:0e:36:b8:f6:61:2e:
df:67:1e:05:55:52:e9:22:e5:a5:bf:41:a4:2e:ed:fc:d1:00:
3d:2d:9a:ba:0b:0c:02:c6:a1:91:83:37:b2:ff:35:d3:d6:84:
be:ac:89:a8:e6:60:5c:de:0b:27:cc:94:e0:da:4c:84:8a:a3:
5e:95:73:98:57:2e:89:a8:ae:76:a3:03:39:21:ea:7d:f0:ed:
1f:9c:14:36:54:ae:44:5e:5d:09:1f:5f:01:aa:07:b2:73:f4:
0d:77:93:62:b4:84:e0:83:e0:4c:01:8d:68:e8:c6:e5:52:56:
dc:ea:99:ce:94:c0:eb:cb:67:85:95:6c:49:d8:a0:54:aa:7d:
16:aa:66:2f:49:0f:2f:3e:bf:35:47:fc:af:d2:72:51:8b:6c:
28:a0:ab:ce:bd:73:be:ca:ca:ff:0d:98:22:ed:3b:7e:51:4a:
65:1c:34:e3:e4:96:8e:3a:d8:12:a1:f3:84:b6:93:f3:c9:02:
05:d8:26:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 21:32:51 2026 by rpki-client