Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.mft
File: qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.mft (raw, json)
Hash identifier: 2LBgfKthN/tBD8AWR5Vrj78wBDlQ6g2Ti8fwofko0nk=
Subject key identifier: EF:3B:A7:A3:07:3B:C2:8A:05:68:22:07:9D:E0:FF:D5:D8:27:54:FA
Authority key identifier: A8:20:F4:34:5C:0E:E4:D9:D7:FC:6D:69:BE:FB:F4:55:BE:C9:87:42
Certificate issuer: /CN=a820f4345c0ee4d9d7fc6d69befbf455bec98742
Certificate serial: 019F9F5FC957C4AF8E568C471BC28FE1855B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.mft
Manifest number: 0A9D
Signing time: Sun 26 Jul 2026 17:01:22 +0000
Manifest this update: Sun 26 Jul 2026 17:01:22 +0000
Manifest next update: Mon 27 Jul 2026 17:01:22 +0000
Files and hashes: 1: aVvwIvFhIA2YyxZBLI9kzTJE_PI.roa (hash: Mj+NFBQcENFWKW7e7z2aigtw4XOb5IdgmVCiSgTc5lY=)
2: qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.crl (hash: Xrt0zrhyxefLs8C2Q50VN8fNHvVCbhAAgdQoEwzAk9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:5f:c9:57:c4:af:8e:56:8c:47:1b:c2:8f:e1:85:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a820f4345c0ee4d9d7fc6d69befbf455bec98742
Validity
Not Before: Jul 26 17:01:22 2026 GMT
Not After : Jul 27 17:01:22 2026 GMT
Subject: CN=ef3ba7a3073bc28a056822079de0ffd5d82754fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8d:fd:8f:03:ae:c7:a9:ef:cb:3b:3d:07:64:
10:5e:ec:c4:d9:4e:6a:3a:dd:08:69:71:82:37:47:
73:72:f1:ee:94:e2:4e:27:82:50:76:a9:9b:4a:e7:
d4:ad:5c:cb:a5:0d:b6:b7:44:61:be:bf:19:6f:f7:
16:7d:c9:32:4e:a9:e7:05:a5:86:2b:32:93:2c:6c:
75:23:5d:b9:f4:4e:f0:d8:7f:c2:d7:e3:64:e5:fb:
78:7a:67:2c:3c:80:37:4a:d5:f6:0d:c2:42:2e:66:
0c:89:e5:0d:7e:dc:a0:f9:8a:d5:e4:b4:69:59:aa:
28:ae:48:82:45:b6:47:89:47:b4:72:22:95:a0:e9:
c4:0d:48:bb:de:b0:66:d0:dc:8c:9e:b3:85:27:f5:
fb:49:58:1a:f3:55:69:ad:a0:6e:e9:4b:ed:e3:13:
8c:fa:5b:63:a1:c9:36:c5:31:13:02:1e:e7:97:ba:
b9:55:a3:8a:78:af:4d:09:68:ad:20:d0:e4:d2:d4:
75:92:c1:9f:18:f6:d3:dd:9b:dd:f8:3b:6f:21:90:
b2:9a:78:04:82:d3:86:44:5c:5d:33:f4:03:86:0f:
84:65:49:8b:d7:46:4a:65:12:6f:79:26:65:32:3c:
1b:67:d1:08:9b:aa:68:96:39:fb:0f:4b:8a:f4:6d:
8d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:3B:A7:A3:07:3B:C2:8A:05:68:22:07:9D:E0:FF:D5:D8:27:54:FA
X509v3 Authority Key Identifier:
keyid:A8:20:F4:34:5C:0E:E4:D9:D7:FC:6D:69:BE:FB:F4:55:BE:C9:87:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:fb:a5:53:21:9e:af:8e:24:d9:9d:81:32:b8:da:5a:b8:3c:
93:6e:ec:1b:79:fa:36:14:88:e3:8d:02:a2:3e:15:20:1e:d0:
ba:a7:d9:f3:c5:0b:e9:d0:41:c0:fb:45:42:cc:73:ba:6c:99:
0d:c8:24:66:22:23:08:f3:c7:88:cd:f3:d4:1a:72:2b:db:39:
ae:16:4f:df:03:e9:b8:3d:46:2c:cb:96:9f:c4:46:28:39:4c:
a0:b4:10:ef:d2:5f:1b:b1:ab:41:e2:bc:09:2a:80:02:06:d9:
6f:4f:b7:6f:08:e6:76:cf:19:05:8c:ec:a3:37:4d:69:bd:6d:
03:b7:a5:e2:00:f9:fd:32:be:57:eb:02:1a:c3:07:eb:c0:be:
76:ac:31:f3:53:3b:5d:7b:85:21:53:62:23:ab:51:0c:0b:97:
cd:1b:32:c0:77:8e:37:43:dc:28:d4:95:46:fc:17:8f:73:36:
bd:06:9b:c4:54:41:86:8e:f9:ef:93:49:7a:1a:4b:b6:a6:e5:
33:a2:a6:96:f4:d1:36:c2:72:fe:df:6e:14:5c:49:94:8c:e7:
77:e7:ae:34:9b:dc:64:15:64:b6:3c:c4:1b:6a:5f:c0:a3:e7:
e1:c0:54:29:73:9f:ec:bb:f2:c7:8a:0d:ac:f0:ba:ea:92:4e:
e4:46:e7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:37:34 2026 by rpki-client