Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
File: qlfg60pFBqGasu_5iaZ9VZuYzBo.mft (raw, json)
Hash identifier: 729qzeLr+zx1uWXpPRaGrHPx58VQamB5Jv4yJt3y1KE=
Subject key identifier: 89:AF:76:12:71:50:49:E5:6F:35:18:85:26:78:94:F0:2C:0A:7E:AE
Authority key identifier: AA:57:E0:EB:4A:45:06:A1:9A:B2:EF:F9:89:A6:7D:55:9B:98:CC:1A
Certificate issuer: /CN=aa57e0eb4a4506a19ab2eff989a67d559b98cc1a
Certificate serial: 019F126522086507A173531BF9926002E2B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
Manifest number: 1988
Signing time: Mon 29 Jun 2026 08:00:45 +0000
Manifest this update: Mon 29 Jun 2026 08:00:45 +0000
Manifest next update: Tue 30 Jun 2026 08:00:45 +0000
Files and hashes: 1: PZcwljxkluLyPsCu5IOqcb5bfu0.roa (hash: 74prXbYhNn50EgwVIKtgiNZLNDDm+6LO8raCktKadFM=)
2: qlfg60pFBqGasu_5iaZ9VZuYzBo.crl (hash: VL/Qsw5R0r4L2y0Gnfdo61792I69+47/T1gcQHBvOV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:65:22:08:65:07:a1:73:53:1b:f9:92:60:02:e2:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa57e0eb4a4506a19ab2eff989a67d559b98cc1a
Validity
Not Before: Jun 29 08:00:45 2026 GMT
Not After : Jun 30 08:00:45 2026 GMT
Subject: CN=89af7612715049e56f351885267894f02c0a7eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d2:40:c7:92:ce:87:06:20:55:79:90:ab:73:
bf:04:f4:40:12:30:d0:b1:9d:9c:02:f1:50:31:77:
62:8d:51:4f:e3:b0:64:7e:e4:c0:07:21:e9:ab:7b:
d0:b4:7d:16:c7:3a:3e:74:28:fc:f5:62:00:ad:bf:
01:30:8d:fd:53:eb:41:2a:e8:86:68:75:d9:6b:59:
0b:12:74:14:a9:78:54:b8:38:56:83:65:0d:57:ae:
c7:7c:e2:3d:d6:ff:c2:c6:37:b3:dc:96:4c:06:f5:
6a:d1:26:76:b7:0e:7f:ed:ab:96:75:0d:61:72:78:
2b:3b:92:6d:b2:99:82:36:90:d5:67:91:06:65:46:
2c:7b:b4:d1:e4:2c:ac:ff:b3:6f:99:f9:35:78:d8:
e0:56:79:f4:93:54:06:b5:d9:bf:14:22:d1:c6:47:
b8:df:d4:d7:49:04:4f:23:27:a9:24:83:16:8e:67:
87:00:eb:3c:4c:0c:c8:2c:34:a3:05:87:c5:9a:74:
eb:6a:6e:c5:71:80:5e:98:dd:21:ca:a2:0f:a5:64:
c0:21:a1:bb:28:7c:63:dc:19:85:1e:e5:cc:d7:75:
cd:49:ed:74:22:11:3a:fb:e0:cf:29:89:ad:e7:08:
e3:2c:43:5c:be:dd:3c:cc:a4:55:4b:d8:2b:6d:67:
ec:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AF:76:12:71:50:49:E5:6F:35:18:85:26:78:94:F0:2C:0A:7E:AE
X509v3 Authority Key Identifier:
keyid:AA:57:E0:EB:4A:45:06:A1:9A:B2:EF:F9:89:A6:7D:55:9B:98:CC:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:6d:50:d3:c2:ad:37:9b:a5:4e:06:51:94:b7:d2:97:83:6f:
f2:db:e2:b5:7c:73:33:18:26:01:f5:d5:1f:46:dd:0f:c3:8a:
08:13:97:b2:21:b6:98:76:11:50:c1:a6:50:b5:ca:88:2a:8a:
e9:72:b7:f2:df:bc:6f:83:9f:bf:30:c9:34:1d:39:4b:35:74:
5b:13:a0:40:28:18:85:88:21:3d:52:19:ed:07:d2:23:e9:39:
5c:03:74:3f:ca:04:85:f3:4d:a1:07:8e:cc:89:82:04:b1:ef:
c8:c1:73:e9:2c:96:ab:9d:46:a0:9e:9d:92:95:d5:45:7d:7b:
be:c1:ec:e6:35:94:e5:3e:15:01:70:13:58:9f:44:70:2b:49:
4c:cb:20:00:30:61:e6:e8:63:a0:26:61:e1:bb:8f:1b:8a:f2:
90:c0:c3:b2:e5:a0:7b:33:f7:79:3a:ae:5e:4e:ed:b7:f2:37:
f3:f3:1c:ed:90:21:c8:17:6f:27:5b:5f:ad:dc:94:33:72:40:
5e:6c:e6:fd:30:8b:86:6f:01:ad:4a:3b:75:ac:37:9c:1e:84:
1e:f6:18:92:74:39:e5:e7:fd:2d:e2:5e:ba:0b:ad:6d:55:7c:
46:78:75:42:32:0d:28:df:e0:35:5d:4e:49:0e:bd:9d:19:6f:
3e:cd:bf:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:41:07 2026 by rpki-client