Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
File: qnthN_WvPCLIWhkI1AspQe4sBvQ.mft (raw, json)
Hash identifier: YLn39yV/IXDBOBEGRm5wtDSaWl+QSt8FYQHm45SxJI4=
Subject key identifier: A0:9A:48:13:AD:32:5F:CE:2B:0E:78:43:65:93:53:2E:0C:E2:50:95
Authority key identifier: AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4
Certificate issuer: /CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4
Certificate serial: 019FA1165F27CFBB887F52B2F61162BF9904
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
Manifest number: 0D18
Signing time: Mon 27 Jul 2026 01:00:25 +0000
Manifest this update: Mon 27 Jul 2026 01:00:25 +0000
Manifest next update: Tue 28 Jul 2026 01:00:25 +0000
Files and hashes: 1: EvhdgJldzrTyPRhTwu7_R0oOsRk.roa (hash: jp9wh8X1nWQb/EKe4T8unvTtIOObggs6fceKYXSVd0M=)
2: KeD4L6y8pe2jawoO0v_Iw05d7f0.roa (hash: MlHed28QjL1er2kf3lP9+8MfBm3P54VkdbgLne7YLtA=)
3: qnthN_WvPCLIWhkI1AspQe4sBvQ.crl (hash: z0mdL0pNYRO4aS8AieVxuhP7LTwVvqAUDIIn434Z3jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:5f:27:cf:bb:88:7f:52:b2:f6:11:62:bf:99:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4
Validity
Not Before: Jul 27 01:00:25 2026 GMT
Not After : Jul 28 01:00:25 2026 GMT
Subject: CN=a09a4813ad325fce2b0e78436593532e0ce25095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9d:84:ee:07:91:9f:6e:8e:07:da:90:1b:f9:
62:6a:8c:98:9d:36:6e:f0:72:f6:00:50:c6:fb:80:
8b:cd:3d:f4:ea:80:9e:a4:6c:54:f8:35:b4:82:cd:
42:1b:d2:53:31:02:99:0f:8c:84:51:f6:15:72:38:
32:9b:28:89:db:7c:ed:f7:98:1b:52:de:f5:3a:7f:
41:66:50:77:4a:b3:16:c3:0c:d4:50:e4:4b:4f:49:
a4:2a:52:bb:64:01:d8:d4:ac:56:cc:02:d2:e1:5a:
94:d5:3f:48:69:31:1c:9f:11:51:28:97:4a:f6:12:
79:98:65:5c:40:2d:e9:b5:db:57:8c:cf:8d:c7:b7:
e9:d7:41:0f:5b:ef:f4:1a:4c:a5:b0:f9:58:52:c6:
c6:ca:9c:7e:f8:e6:8c:0c:29:d8:7b:ca:fc:7d:6c:
6a:f2:e9:d4:9e:01:d3:87:be:17:68:11:36:47:bf:
58:4d:8e:8c:62:79:26:1a:3e:84:ed:34:87:55:99:
03:be:7a:9b:6c:08:48:b4:7d:67:85:ac:ff:50:d9:
ad:9c:75:29:84:64:f4:f2:1b:6e:54:84:44:40:be:
5c:ea:4c:dd:af:55:09:fe:a3:7c:70:36:cf:9b:aa:
b9:d3:2d:6e:37:6a:15:64:f1:fb:61:4e:b7:07:dc:
6f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9A:48:13:AD:32:5F:CE:2B:0E:78:43:65:93:53:2E:0C:E2:50:95
X509v3 Authority Key Identifier:
keyid:AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:47:54:f2:e8:96:46:2e:bd:5a:ab:34:d9:26:86:10:18:49:
e7:11:bd:9f:40:e6:22:74:8d:96:a8:d4:42:e8:27:af:ca:43:
73:fc:71:84:9b:e9:ee:ff:c8:f4:d9:6c:b4:28:35:1f:54:21:
eb:77:60:07:18:58:47:4f:93:ff:14:af:68:69:bc:e8:3b:f3:
cd:39:7e:63:cf:44:db:29:0e:95:49:b7:6e:cf:a9:e9:1e:f1:
ef:dc:5f:a0:cd:38:63:31:6a:eb:db:50:d5:58:91:9f:7c:52:
d0:cd:a7:c0:fb:f7:90:ba:e8:f4:05:ef:0e:73:a3:c9:e0:f7:
bd:e0:22:ee:ac:a3:bd:04:44:81:ff:30:12:c7:a3:4f:2d:a1:
a1:3b:37:68:91:1c:0e:14:c9:8a:9e:49:d2:0b:7f:b4:2d:eb:
ed:8d:73:7c:e6:8a:ee:69:63:ea:3b:50:82:f9:6a:fe:32:f4:
ec:67:70:e0:d1:0a:f8:04:c6:be:f4:a6:67:f7:2e:fc:a3:63:
98:82:8a:6f:93:02:47:07:05:d3:4f:1d:79:15:e2:2e:9e:04:
55:a8:a1:56:2b:0a:25:6f:cd:ef:b1:12:66:97:d0:72:2e:98:
c6:77:b8:2e:16:8c:91:b9:35:5c:02:b3:d7:75:b8:46:14:4b:
98:2d:d7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:00:40 2026 by rpki-client