Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
File: qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft (raw, json)
Hash identifier: mIC9lJqlOgYIpQQ8nxr5kjP2+0eE0wtgu2nwQr7vx8s=
Subject key identifier: 70:EB:A9:59:AD:F5:CC:11:6C:44:EE:C4:9E:74:FB:62:30:3B:FB:5E
Authority key identifier: AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
Certificate issuer: /CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Certificate serial: 01A002B8BC733F72D29A29D49ADDE721835A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
Manifest number: 19DA
Signing time: Sat 15 Aug 2026 00:00:56 +0000
Manifest this update: Sat 15 Aug 2026 00:00:56 +0000
Manifest next update: Sun 16 Aug 2026 00:00:56 +0000
Files and hashes: 1: L-HwD3a1YvSj02j1QCP8hdaPo2Q.roa (hash: 5Wk7yg6Zqe4Rx0Uz4L8PVzxHV08SwQbCHKVJQ29cOi4=)
2: qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl (hash: KeS2dVABmyGeh/nlGf1TmiuLihC1wpzgPdXtJzaHZV4=)
3: yDO02X54f1LQ0eg7vIsPILfqVfg.roa (hash: QejEGgHdQAnoB+VVS4oCOej9y3m34VK1Ik/jfXOr3V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 00:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:b8:bc:73:3f:72:d2:9a:29:d4:9a:dd:e7:21:83:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Validity
Not Before: Aug 15 00:00:56 2026 GMT
Not After : Aug 16 00:00:56 2026 GMT
Subject: CN=70eba959adf5cc116c44eec49e74fb62303bfb5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:41:7b:4e:b5:1e:21:00:b5:ca:8f:5f:b3:0f:
1f:fb:a3:1d:d8:c1:59:03:0a:7e:96:0a:fb:c4:9a:
1c:a8:12:25:7f:fc:58:14:52:51:d1:ff:cc:51:45:
fe:c4:a7:91:11:99:ff:77:67:1a:3f:ad:ed:f4:36:
73:ef:14:01:d8:e2:4d:43:b0:08:29:ef:c6:44:43:
2a:9f:a3:e4:95:63:b8:47:31:fe:b2:4e:e1:a0:91:
46:95:b1:b7:b6:af:0e:c2:43:52:93:a7:f4:b4:48:
3c:37:0f:12:92:4f:65:13:54:8e:47:14:47:c7:fd:
b1:61:ae:ac:c6:04:b5:03:c3:87:a8:bf:b5:72:c5:
91:f5:ae:dc:a4:88:5c:9b:e8:7a:82:27:37:26:43:
62:c5:4e:fe:1b:49:6a:da:59:dd:be:69:b8:bf:66:
f8:97:51:fe:ea:3a:63:e7:2b:3a:32:ed:82:05:9d:
5c:d8:01:b0:15:6e:42:4a:8f:b9:ce:3f:15:9b:fb:
59:01:61:88:9b:be:15:ad:b2:44:cf:88:cd:ef:39:
29:b7:44:77:94:e2:a2:85:e0:64:49:9c:e9:27:e0:
da:fb:f6:b0:54:93:a3:56:3f:08:cb:79:00:da:35:
99:f8:90:40:19:a9:e2:80:7e:8a:28:ff:37:a1:1a:
d0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:EB:A9:59:AD:F5:CC:11:6C:44:EE:C4:9E:74:FB:62:30:3B:FB:5E
X509v3 Authority Key Identifier:
keyid:AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f7:5e:f5:40:10:58:0b:d8:d1:e5:45:b0:8c:11:a5:0b:78:
16:99:66:82:ca:b2:99:11:1b:47:5b:7c:38:a6:c3:f4:94:cc:
ad:c2:39:68:bf:32:21:0c:37:62:01:6d:a0:46:44:fb:f8:0f:
7e:77:94:5a:62:62:c5:09:bc:71:c9:be:bf:93:59:52:4d:34:
88:5e:53:bf:6e:0e:3a:5c:40:2f:21:57:11:4c:ba:b2:ee:8c:
4d:56:0c:3c:5b:a4:1e:aa:12:7c:98:7a:c6:7f:4d:14:33:8e:
db:a8:37:08:8d:78:31:29:40:d7:f7:bb:22:2e:e7:8d:81:32:
de:46:bd:5d:c7:d9:84:cf:56:df:99:3d:7a:1d:08:78:ca:25:
8f:3f:14:c7:14:72:b8:d7:5e:7c:fd:7f:3b:42:78:d2:33:4b:
0b:15:0e:6d:62:a9:6f:1a:c3:ff:bd:ff:7b:18:66:09:5d:09:
11:5d:65:fa:e0:51:38:43:20:6d:89:22:e8:de:e0:06:d8:1f:
46:b5:aa:d7:16:a9:31:f5:7b:b2:e8:ea:b7:d2:cc:1e:79:bb:
60:3e:95:ec:2d:06:37:f6:a9:9b:53:85:6c:a7:27:ae:da:dc:
d1:d1:7a:90:9b:28:ad:47:b8:86:df:ac:2e:29:42:89:eb:56:
00:12:1a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:41:57 2026 by rpki-client