Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft
File: QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft (raw, json)
Hash identifier: 0PNmN/AFr04wIT+HEb3q9XvbEdqxb9pVyiKCAYVNsQ8=
Subject key identifier: 05:46:F0:F7:B3:15:97:97:35:30:7A:94:CB:4A:C5:7B:1C:DC:DC:53
Authority key identifier: 42:B1:AF:96:44:C6:7B:56:89:FC:0C:A4:6A:AE:D1:69:2C:48:E6:CC
Certificate issuer: /CN=42b1af9644c67b5689fc0ca46aaed1692c48e6cc
Certificate serial: 019FF8DA0CCC3F5C56CA4A29F937A5558347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft
Manifest number: 01B2
Signing time: Thu 13 Aug 2026 02:01:07 +0000
Manifest this update: Thu 13 Aug 2026 02:01:07 +0000
Manifest next update: Fri 14 Aug 2026 02:01:07 +0000
Files and hashes: 1: IZkDUCigInWdeV2VhafZmgrDhxk.asa (hash: fVSaR3R0qI7sWBf1eA/UjYaOluP3hVc1HKfEAv11/p0=)
2: QrGvlkTGe1aJ_Aykaq7RaSxI5sw.crl (hash: B00F1Qgc77qh6HQ+fsGJsYAMc03SPqpljxsb8fDPSUo=)
3: rhdyAw8cgf05vzajT2FBLQ9vMv4.roa (hash: BXOL4wyuX+9APrFFUb6u0yh2z5n++kBGSbyspApqvFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:da:0c:cc:3f:5c:56:ca:4a:29:f9:37:a5:55:83:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42b1af9644c67b5689fc0ca46aaed1692c48e6cc
Validity
Not Before: Aug 13 02:01:07 2026 GMT
Not After : Aug 14 02:01:07 2026 GMT
Subject: CN=0546f0f7b315979735307a94cb4ac57b1cdcdc53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b7:46:61:b6:48:c5:bf:1b:8e:20:c0:57:a6:
11:b9:1f:4a:95:94:cb:a3:de:35:b8:40:cc:c2:cc:
8a:4a:9c:4e:b6:bf:f0:18:9b:8d:08:b0:94:09:88:
38:8a:d6:27:4f:19:90:69:94:ca:d1:4c:99:0f:6e:
a2:a5:bf:38:9d:18:2c:89:f1:2f:4c:88:d9:a6:3c:
92:9b:d4:36:09:2b:05:7a:99:70:73:6c:b5:ad:88:
50:1f:c9:aa:8e:a4:47:91:d0:e8:2f:c7:8b:f4:a7:
39:e4:c8:a1:4d:90:10:c3:00:e1:f1:ed:68:31:78:
41:54:08:60:a6:d3:19:a1:48:6c:77:a7:88:39:0b:
3a:2c:3a:1a:46:c7:b0:60:61:34:aa:e5:1d:9e:07:
ee:66:b8:1e:a6:c8:e0:d0:51:f6:79:a0:48:10:6a:
83:6a:9b:81:19:2b:4f:dc:60:cb:78:34:ac:a2:bc:
c8:ed:cb:6e:2b:fc:7a:a5:a4:60:a0:35:7f:ab:2e:
59:d7:50:c7:8a:28:2c:9a:14:ad:b0:08:ce:e2:43:
2d:e9:2f:83:52:bd:ba:ba:b2:4a:1c:b1:5d:9c:3f:
cc:33:10:e1:40:e6:8d:62:08:8e:a1:71:06:8b:5d:
2a:59:eb:17:80:14:fb:af:cc:0b:3d:4f:36:7e:0e:
a0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:46:F0:F7:B3:15:97:97:35:30:7A:94:CB:4A:C5:7B:1C:DC:DC:53
X509v3 Authority Key Identifier:
keyid:42:B1:AF:96:44:C6:7B:56:89:FC:0C:A4:6A:AE:D1:69:2C:48:E6:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:81:ac:6b:aa:ee:23:67:f0:5c:1e:dc:51:e6:e9:81:2a:07:
2e:c9:44:7a:c0:bc:66:55:e1:2e:ae:2b:95:7c:d5:76:a6:cd:
34:5c:d7:42:1e:3f:27:c8:d9:b1:36:87:76:50:9e:10:70:b3:
d2:e8:d1:91:d1:05:46:db:3e:1e:6c:e8:b0:4b:f6:be:cc:e6:
5b:d3:0a:70:0a:38:b6:f3:eb:ff:ec:0a:8f:c5:ff:d3:f2:0d:
e4:90:ba:2a:40:c2:2e:af:08:53:b6:79:f9:64:29:87:d0:bd:
16:7d:dc:68:b4:ff:a6:4d:d2:92:63:bc:fb:cf:b2:9b:56:0d:
bc:35:ea:6e:3d:70:3f:e1:88:ba:91:b5:dd:8e:85:ea:47:68:
f0:c7:ac:4a:cb:08:35:1b:cd:d7:09:50:58:d4:cd:33:ce:27:
96:aa:63:97:42:04:96:80:61:c9:e0:e8:75:3d:a8:03:ba:c0:
e9:e8:eb:68:f1:c1:91:95:86:69:63:75:ec:b6:d4:8c:92:53:
4d:89:e4:54:84:89:a7:36:5c:ee:7d:19:64:b3:a2:da:92:96:
ae:09:09:2f:c5:a5:da:69:b6:69:4b:4e:c1:11:b0:16:24:db:
79:01:7f:b6:94:a3:62:2b:09:54:a2:e5:55:82:2c:31:2b:13:
1d:2d:78:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:03:27 2026 by rpki-client