Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
File: QvUa6vd0tjOkf5YKcImxWzWxpMs.mft (raw, json)
Hash identifier: IkYcE52JydhhjuOPtaM0dHnwAYzDeYFx+t9ybc4Ie18=
Subject key identifier: AD:94:A6:4C:E3:1A:1D:B6:D4:1E:94:63:35:BA:A0:F4:74:BB:EC:8D
Authority key identifier: 42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB
Certificate issuer: /CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb
Certificate serial: 019FDE756634FF996C1CE272A93D7306C488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
Manifest number: 0AB5
Signing time: Fri 07 Aug 2026 23:01:03 +0000
Manifest this update: Fri 07 Aug 2026 23:01:03 +0000
Manifest next update: Sat 08 Aug 2026 23:01:03 +0000
Files and hashes: 1: QvUa6vd0tjOkf5YKcImxWzWxpMs.crl (hash: 0Usz7PrsS3YI0FLBuvNy6He4evATi1ded+gkgFQpav4=)
2: R9Y6GrgbgpdjEIL15ST3hGQBv8A.roa (hash: ScvlNZwo3odOWYF4CC8lvyezDpeI3+SX0JX8xZyPseo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Aug 2026 23:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:de:75:66:34:ff:99:6c:1c:e2:72:a9:3d:73:06:c4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb
Validity
Not Before: Aug 7 23:01:03 2026 GMT
Not After : Aug 8 23:01:03 2026 GMT
Subject: CN=ad94a64ce31a1db6d41e946335baa0f474bbec8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:72:f3:84:fe:1e:83:89:7c:cc:a4:17:c2:c0:
40:95:70:3f:9f:db:f0:a8:78:28:c1:59:a7:e5:b6:
89:07:3d:69:67:ac:eb:10:f9:2b:37:c5:53:73:0b:
33:ba:ec:ed:fd:af:4b:18:ce:62:fe:e7:74:80:33:
cf:18:06:0b:a3:4e:31:83:f2:3d:f1:3c:de:97:1a:
58:1a:79:ea:87:2a:ca:64:fb:1e:fd:c5:c9:da:3f:
ba:cd:09:77:3d:25:f6:9d:7a:d1:79:04:46:2e:7e:
ac:2e:e7:6f:3e:e4:b9:40:05:5f:8c:7e:e7:74:98:
c3:61:4d:14:44:dc:49:1a:de:22:71:7a:5d:c6:ab:
04:36:70:f1:04:88:6b:74:fa:02:58:b1:ed:f6:ed:
96:b4:cf:a2:79:77:b0:1f:8b:b5:1a:78:ba:52:7c:
c9:a5:26:b3:80:8e:2c:e8:a0:0d:64:0e:46:67:49:
d6:69:e1:30:16:eb:c9:65:fd:e0:e1:71:0b:e0:ef:
50:b9:04:2b:a9:1a:57:da:17:c7:d8:78:62:f0:19:
3a:81:3b:60:3e:ed:05:22:b3:ac:5a:a9:5e:ed:fd:
06:b5:f9:9c:2b:56:a2:7d:32:a5:e9:09:f8:18:99:
07:74:4c:7c:34:88:c3:d5:0d:56:e6:e9:5f:e5:37:
5a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:94:A6:4C:E3:1A:1D:B6:D4:1E:94:63:35:BA:A0:F4:74:BB:EC:8D
X509v3 Authority Key Identifier:
keyid:42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f3:3f:13:96:e0:ef:8b:82:c7:aa:b4:af:c7:72:14:5d:45:
69:70:d7:c4:a7:d5:68:16:7d:50:c0:34:72:b1:c6:7d:fa:89:
5f:a4:bb:b6:88:b9:e5:a2:fa:3d:19:ac:6e:2f:b2:50:a7:71:
1b:e1:4c:9b:85:38:e3:15:1d:6f:5e:2a:a7:44:90:0e:d2:9b:
71:76:21:4b:4b:58:10:83:ff:44:7d:7b:a2:9f:1a:e7:c8:db:
eb:3b:35:03:d5:1f:09:bc:9b:b8:5b:c5:22:bf:6d:37:0b:42:
e6:a1:b9:3e:86:db:14:45:cb:fc:bf:17:1a:51:92:02:49:53:
11:c5:8c:e9:87:a6:58:20:b0:0c:79:ac:76:c9:75:40:41:8d:
ef:e6:0b:cb:d5:ee:22:34:cc:af:02:b1:ea:07:85:3e:23:8d:
b5:21:2b:fc:61:e6:0a:4c:de:a4:73:aa:dc:cb:4b:08:6d:47:
76:b2:c1:80:ef:ee:d9:2f:b6:79:71:f4:3d:b2:89:bb:8c:c3:
0b:d8:4d:27:d3:f0:a9:1c:3a:5b:93:79:be:79:01:4b:64:b4:
a0:eb:d4:e0:4e:42:6e:f2:7a:13:b5:d4:a7:ca:e0:e6:52:4f:
c8:be:ad:f8:7b:58:0d:2d:09:9b:d4:e9:b4:de:23:de:fa:14:
4f:eb:3d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 08:52:27 2026 by rpki-client