Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
File: qIAb4jY_IRvS9XgYrer5wNvhS9s.mft (raw, json)
Hash identifier: GKFCO3KPRjHCXHN0ZDQUZ9Mt6UZNDf3vtln8GqpiPHk=
Subject key identifier: 32:17:FB:F3:2A:31:E8:99:F1:AF:FE:8A:98:A9:50:7B:E3:9E:F0:E8
Authority key identifier: A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB
Certificate issuer: /CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb
Certificate serial: 019F382A26DA007F72D078F6903442F68D49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
Manifest number: 199B
Signing time: Mon 06 Jul 2026 16:01:53 +0000
Manifest this update: Mon 06 Jul 2026 16:01:53 +0000
Manifest next update: Tue 07 Jul 2026 16:01:53 +0000
Files and hashes: 1: 0ECEewsHbpx9zU1JX2DIun14wc4.roa (hash: 3xUQ5J+uKoXf2K0tx/gaMVdbcJCYxizBzW4f58o5Lj4=)
2: nwtdhhsA3tvO15UW5ngy7VolYDA.roa (hash: jJBsatbPceBiOY7mvKtU7D/vsxD74iAJJTBCJFC0Hqs=)
3: qIAb4jY_IRvS9XgYrer5wNvhS9s.crl (hash: KwJ8yq74b34xGnnFHLr1yPXkb94pGkUYMBeYC9GMnFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:38:2a:26:da:00:7f:72:d0:78:f6:90:34:42:f6:8d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb
Validity
Not Before: Jul 6 16:01:53 2026 GMT
Not After : Jul 7 16:01:53 2026 GMT
Subject: CN=3217fbf32a31e899f1affe8a98a9507be39ef0e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b5:90:23:0c:7f:6f:89:92:98:c9:85:e7:1f:
f7:0f:9c:d3:12:86:db:09:2a:7a:5a:a0:c2:a5:36:
86:b0:a3:d7:5e:b9:df:9a:ea:4b:40:75:6e:f4:ac:
32:0a:7f:00:c9:a4:17:c8:ed:52:e6:f1:32:66:8e:
df:43:46:7f:7a:ce:5d:79:35:97:4b:dd:15:67:48:
32:fc:d3:83:b7:1b:e1:47:39:ad:20:06:31:13:d0:
6d:77:36:ad:af:e7:0a:1c:6c:48:2b:90:3c:f8:dc:
1d:2d:a7:b3:a7:18:e8:31:ab:05:7f:82:de:f5:93:
23:12:46:ee:ea:1e:c0:6d:45:e1:87:0f:66:c1:94:
01:8b:9f:fa:02:42:42:cb:f9:9e:89:ce:f7:f1:8d:
6f:84:84:b1:0a:29:63:dc:f6:ab:cd:3e:27:f6:cb:
e7:48:5c:c9:67:0f:80:a3:18:00:6f:6d:ac:b3:81:
26:c5:ea:81:50:4b:ff:fa:29:3c:a8:d8:1c:fa:6d:
0d:72:02:33:f3:56:fe:ea:a3:4d:71:08:cd:cd:07:
d1:0a:7d:b8:c4:04:6d:a7:43:7d:4e:d3:34:69:56:
fb:d3:cc:4d:d3:ab:3f:4c:e2:0f:5b:33:e8:ac:01:
c3:5f:1f:01:a0:64:8d:d9:4c:8b:a5:32:b9:a7:e4:
90:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:17:FB:F3:2A:31:E8:99:F1:AF:FE:8A:98:A9:50:7B:E3:9E:F0:E8
X509v3 Authority Key Identifier:
keyid:A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e4:f0:d5:37:dc:2f:4e:e0:a4:94:c1:76:e1:0e:d1:0a:52:
ae:9d:60:05:f7:10:9c:b0:c9:0e:5b:35:0a:2e:c7:eb:8d:07:
63:06:13:2d:3c:fe:4d:2b:d4:d8:53:98:8f:36:67:04:1b:7d:
4f:f3:48:61:5d:66:a5:62:41:28:f7:d4:c2:ff:c8:ea:ae:32:
d2:a8:e1:c9:16:df:05:ec:e3:4e:5a:32:54:86:56:07:19:64:
73:d3:7f:cd:d2:e9:e0:be:bc:72:1a:67:71:36:11:7f:06:a7:
88:36:fd:21:4f:03:46:2b:ac:d5:5c:6d:01:c1:28:22:6a:98:
64:a0:a2:f2:c2:4b:bf:2c:0d:b3:15:f2:b0:a3:f1:95:0d:dc:
cd:b0:6b:67:97:67:49:b2:4d:e9:c6:5c:b1:f3:3a:b7:0c:c6:
cb:ba:9b:21:72:28:36:d7:b0:d7:c9:eb:3b:64:91:f9:7b:22:
a7:f6:87:c3:a3:49:f4:b6:28:3e:fe:98:73:13:1a:89:2a:b2:
d8:50:7e:d6:c4:fd:90:79:28:73:7f:9a:ff:a8:a7:1a:58:ff:
29:f8:90:7d:56:57:50:d0:38:38:ec:db:fa:55:e3:29:09:a8:
46:09:a5:8e:51:4b:c2:15:ae:4b:9b:d6:ea:7d:fc:a3:bc:f4:
d7:a9:d5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:27:23 2026 by rpki-client