Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
File: qjHJjjyrghyE3e_yBp4CJZvW5hw.mft (raw, json)
Hash identifier: UgIfDaOqIklTHsdQFLWnvbo3NiBE47Bj1s6dRAYtCuc=
Subject key identifier: 00:78:AB:7B:EA:6F:5B:57:24:2F:8A:FB:BD:F5:D3:E3:7F:B1:51:BB
Authority key identifier: AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C
Certificate issuer: /CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
Certificate serial: 01A04C892B61EDA16FD16EA79D74E6999CCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
Manifest number: 0F98
Signing time: Sat 29 Aug 2026 08:00:52 +0000
Manifest this update: Sat 29 Aug 2026 08:00:52 +0000
Manifest next update: Sun 30 Aug 2026 08:00:52 +0000
Files and hashes: 1: BOIyHGFsSVNlNKzWZCkVyw194to.roa (hash: 7xB4HBd3sOYDFNhTSlycyhqskadTjgdYr1ImpvDMRog=)
2: qjHJjjyrghyE3e_yBp4CJZvW5hw.crl (hash: nBwIUEggqfpNYzBk6ZME1hWFomObVMR94CXihRyEiJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Aug 2026 02:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4c:89:2b:61:ed:a1:6f:d1:6e:a7:9d:74:e6:99:9c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
Validity
Not Before: Aug 29 08:00:52 2026 GMT
Not After : Aug 30 08:00:52 2026 GMT
Subject: CN=0078ab7bea6f5b57242f8afbbdf5d3e37fb151bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f2:3d:ab:f2:e7:51:ea:92:53:b5:99:1d:d9:
0c:1c:83:30:ef:e4:bc:08:09:71:da:37:14:d6:b7:
97:ab:0d:40:2e:8d:f2:79:43:9b:fb:41:18:27:7c:
bb:07:da:ed:ed:c7:0e:4d:b3:a1:45:cd:2f:8a:3a:
b6:52:e6:21:f6:2f:32:d1:ce:0b:f5:9f:1a:29:1b:
80:8f:36:b8:83:f3:09:80:75:31:82:92:a3:a6:b7:
f3:43:88:cb:36:b3:47:e7:81:f6:2d:3c:c4:c0:eb:
49:de:97:de:9c:27:13:a9:4d:01:bc:cb:c7:1f:9a:
21:3d:f1:96:34:75:f9:02:7c:53:1e:99:43:5d:d2:
e3:c6:ec:81:d9:f4:86:33:ca:64:dc:a7:2f:14:87:
39:49:0a:23:5a:97:72:76:20:0d:a0:e9:65:fd:8a:
e2:86:a7:5d:0e:12:e8:39:4f:d2:de:c0:d1:dc:ef:
b7:5f:42:9f:b3:6e:b6:4c:7f:bd:7e:38:a1:a2:a5:
a1:e6:11:c1:59:89:29:b9:1c:fa:f7:c0:eb:63:c1:
bd:7e:42:71:f5:c2:6c:af:c8:b0:f6:12:e0:8d:00:
96:97:ef:de:cb:03:24:a5:84:6c:b7:04:9b:b2:d3:
de:6c:c9:11:22:d5:2c:b4:ba:9e:16:04:8b:0d:3c:
42:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:78:AB:7B:EA:6F:5B:57:24:2F:8A:FB:BD:F5:D3:E3:7F:B1:51:BB
X509v3 Authority Key Identifier:
keyid:AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:27:02:77:85:d6:3a:a1:68:59:25:fa:b5:18:48:69:5b:d2:
46:61:5c:e7:1e:c4:43:0c:a0:c3:fe:09:98:a5:de:1f:93:ac:
48:1b:17:72:d1:30:1c:e2:d4:20:e6:48:1a:06:20:79:8e:f5:
3d:8c:8b:fe:9d:3b:af:f5:59:e4:f8:4f:02:c7:05:2b:41:eb:
95:55:8a:8f:a3:80:b5:a3:67:6b:75:ed:12:60:db:1f:f5:de:
6a:91:98:1e:9b:7d:12:6a:97:7f:7c:82:e0:88:9b:4d:13:11:
4e:42:1a:d9:91:68:a9:27:11:03:4c:a1:64:80:c1:ea:e2:52:
4b:ab:4a:07:cd:53:a3:d0:a0:61:19:d0:22:71:f0:ea:d9:5c:
35:ea:10:a6:8e:10:f3:9b:06:d0:ff:d3:e7:bf:3a:fd:e8:b4:
0c:ba:44:c9:ee:10:1b:29:c8:c4:26:94:0f:34:3f:9f:6e:47:
77:16:85:3e:e7:e8:a3:d2:81:30:fc:f0:da:53:0f:34:71:ac:
4b:8d:df:70:81:49:02:52:95:3e:5d:30:35:ab:b1:d5:3d:af:
4d:25:61:08:58:e6:23:be:ea:c1:d2:0f:58:8a:76:d0:d2:7d:
a4:f2:0f:cf:30:1f:b9:f6:ff:5c:47:31:91:39:a4:2f:2c:54:
13:fa:8d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 12:42:54 2026 by rpki-client