Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.mft
File: qfNHED7zSa2C8basQ-dsD_o4wvg.mft (raw, json)
Hash identifier: MQotxFVpcksmPGYU2uYwCUfdxbwnB9rHKLKlHzo76HM=
Subject key identifier: 3B:B3:03:D2:65:B3:70:FE:F6:FF:EE:77:7A:50:72:A3:DC:F7:5A:5D
Authority key identifier: A9:F3:47:10:3E:F3:49:AD:82:F1:B6:AC:43:E7:6C:0F:FA:38:C2:F8
Certificate issuer: /CN=a9f347103ef349ad82f1b6ac43e76c0ffa38c2f8
Certificate serial: 019F85D620BCEF78C3427E4566A4A9184984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfNHED7zSa2C8basQ-dsD_o4wvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.mft
Manifest number: 3A
Signing time: Tue 21 Jul 2026 18:00:30 +0000
Manifest this update: Tue 21 Jul 2026 18:00:30 +0000
Manifest next update: Wed 22 Jul 2026 18:00:30 +0000
Files and hashes: 1: Cegt9gCk36CfyQoZLzS4cnrOmWA.roa (hash: yHvXAS+TMxPI4zuMGTC5jZ53ix1/BV7IdsaANR877aM=)
2: qfNHED7zSa2C8basQ-dsD_o4wvg.crl (hash: Ckx12DJqoCAgEyz7XYEkA+DMdYGKAurHMseCM+GUzMU=)
3: voGOvW0BRa27Yr9p1xeqy3udyvc.roa (hash: JKI8fmA0jDEWhuhuTal1D06exvXzvzQH3NDd7ekumtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfNHED7zSa2C8basQ-dsD_o4wvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:20:bc:ef:78:c3:42:7e:45:66:a4:a9:18:49:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9f347103ef349ad82f1b6ac43e76c0ffa38c2f8
Validity
Not Before: Jul 21 18:00:30 2026 GMT
Not After : Jul 22 18:00:30 2026 GMT
Subject: CN=3bb303d265b370fef6ffee777a5072a3dcf75a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a6:05:4d:be:5d:4a:2f:68:d8:2b:d6:33:16:
9f:4b:62:98:46:bc:c5:b3:9d:f7:5b:93:4a:e3:b7:
d0:f9:ab:cd:ea:01:45:62:3c:f8:23:65:8a:ae:aa:
7d:7f:35:e3:9b:ec:cc:c6:16:d2:c0:f2:6d:d7:9a:
c0:1f:d5:d3:b7:ad:94:21:75:8d:f2:ac:e9:c2:59:
ed:98:66:ae:dd:f0:86:7a:0b:2d:16:ef:57:3d:77:
d4:52:d3:31:3a:7c:0a:85:5e:d2:b1:b7:dd:b5:11:
08:c1:1f:cb:c7:90:e9:d7:ca:30:e5:f1:08:a8:e4:
ba:6d:d6:db:7a:68:b6:2e:56:58:f7:cd:38:e5:53:
67:ba:b1:33:29:9c:ac:8a:8c:41:df:05:af:3e:ea:
5b:df:b6:ad:4c:38:99:10:dc:93:83:87:f6:02:14:
8e:53:0c:e7:5f:80:6a:84:4a:61:81:2a:f8:bf:47:
a2:38:c7:c1:7f:67:92:0a:de:ac:e3:cb:4b:fd:d9:
04:ee:17:b7:57:a7:87:3f:c3:bb:50:cc:a8:25:16:
bb:14:81:ea:f2:c6:f8:96:a3:be:a4:72:09:87:a0:
49:dd:b1:3f:17:8c:73:70:58:07:d0:de:33:b9:2a:
4a:0e:25:74:1d:fa:8d:36:00:3e:5c:a0:db:10:a6:
c8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B3:03:D2:65:B3:70:FE:F6:FF:EE:77:7A:50:72:A3:DC:F7:5A:5D
X509v3 Authority Key Identifier:
keyid:A9:F3:47:10:3E:F3:49:AD:82:F1:B6:AC:43:E7:6C:0F:FA:38:C2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfNHED7zSa2C8basQ-dsD_o4wvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:71:06:0e:55:55:9e:1c:66:5e:d7:34:2f:bd:59:3f:ed:a8:
08:6c:05:0a:72:3c:1c:1e:07:d1:63:37:8f:1b:52:42:65:76:
20:44:c8:c2:00:91:66:ee:18:23:5b:dc:53:a1:fb:f0:6f:b8:
99:c3:3d:de:e0:9a:4b:a1:63:eb:87:f4:cb:d6:79:0a:e2:7a:
bb:8a:db:f0:1a:8f:cf:62:cf:fe:97:80:6b:cf:fa:80:61:4d:
0d:9f:c6:58:a8:3f:9f:58:a8:10:4f:e5:34:9a:e5:0b:3a:47:
e1:6e:d4:e1:cf:a6:24:fe:85:47:a6:dd:90:9e:5e:71:4c:99:
a8:74:e7:05:3c:df:11:f6:b5:a5:dd:88:de:e6:c8:25:c3:a1:
3a:0b:bb:e3:3a:d3:a5:f1:73:35:81:1a:34:7a:56:41:b5:2c:
23:89:d0:90:9e:5c:eb:d8:a8:c2:90:9e:94:a9:b0:24:5a:be:
02:ad:46:60:c0:0e:aa:a5:e3:72:19:89:24:79:fa:42:1d:00:
3d:ae:ef:97:49:82:5d:bc:54:5e:df:97:af:da:14:e8:0a:6a:
be:fc:c5:c3:4f:f7:88:41:c2:d5:83:52:e9:18:de:d2:d0:d0:
e9:b1:4b:05:8a:9d:d2:ba:43:ed:c3:e0:43:42:1c:72:ca:44:
04:b7:29:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:38 2026 by rpki-client