Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.mft
File: qERYOVOgK8amaZ3pJ89FcAfwVSg.mft (raw, json)
Hash identifier: 3VnqcIYktAoP6cMYAIVQGf4Wiz7x6qYfYU1Ujp3eOh8=
Subject key identifier: 19:11:EA:9A:58:31:55:36:80:5C:AC:68:5D:63:24:E9:A3:72:B1:52
Authority key identifier: A8:44:58:39:53:A0:2B:C6:A6:69:9D:E9:27:CF:45:70:07:F0:55:28
Certificate issuer: /CN=a844583953a02bc6a6699de927cf457007f05528
Certificate serial: 019FA0040E6F98F5C26DD0836662AD05BD07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qERYOVOgK8amaZ3pJ89FcAfwVSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.mft
Manifest number: 0265
Signing time: Sun 26 Jul 2026 20:00:48 +0000
Manifest this update: Sun 26 Jul 2026 20:00:48 +0000
Manifest next update: Mon 27 Jul 2026 20:00:48 +0000
Files and hashes: 1: bzuHav72txau2Blj1JcbQR-3zHA.roa (hash: TCvNISq9G9+8+m7g0vleezt4nSYPh9D8kXCKj2MC7tQ=)
2: qERYOVOgK8amaZ3pJ89FcAfwVSg.crl (hash: KDsguFathisyieUocBjjLY+2tni842NAK+LO5xTy43I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qERYOVOgK8amaZ3pJ89FcAfwVSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:04:0e:6f:98:f5:c2:6d:d0:83:66:62:ad:05:bd:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a844583953a02bc6a6699de927cf457007f05528
Validity
Not Before: Jul 26 20:00:48 2026 GMT
Not After : Jul 27 20:00:48 2026 GMT
Subject: CN=1911ea9a58315536805cac685d6324e9a372b152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e7:f1:df:a1:af:d0:78:b2:94:99:90:3d:0e:
26:e0:f8:9d:af:70:2c:22:b3:70:f9:fc:19:7e:12:
9c:d4:3c:b3:5d:89:df:f3:31:4f:80:c8:a1:0b:cb:
4c:c9:32:ef:8d:9b:8e:fc:17:6b:44:49:84:0e:5a:
a3:83:03:ce:97:3a:96:61:5c:53:35:07:62:5b:88:
99:8f:16:51:0e:69:2f:a7:b9:3e:43:1d:11:65:70:
17:fe:4b:dc:d2:3b:3e:b0:f0:8c:26:35:62:10:9e:
32:4f:84:4b:c1:c5:c4:4b:b7:ed:ea:5c:ad:34:1b:
f8:60:30:71:af:77:6b:4f:79:3a:3f:f7:5c:5b:13:
13:74:4e:6d:09:e1:95:a4:f1:ef:f7:40:36:68:37:
d5:fd:fd:d9:c3:9f:e8:4b:f9:b2:e3:86:34:35:46:
63:a5:0c:b1:f1:10:a2:07:6f:61:99:7a:d5:2a:6a:
4a:21:9f:a8:17:a9:68:e5:81:10:4f:a6:77:0b:05:
be:51:d6:59:e8:82:68:2e:ec:bb:39:b7:3c:8e:89:
10:57:cc:69:96:b0:82:c3:45:e7:9d:8f:76:ad:4a:
b1:66:11:52:1a:3d:95:a3:ed:71:0b:75:78:18:2a:
8a:6a:96:35:fd:f9:00:71:c0:c2:ea:51:a3:bb:93:
87:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:11:EA:9A:58:31:55:36:80:5C:AC:68:5D:63:24:E9:A3:72:B1:52
X509v3 Authority Key Identifier:
keyid:A8:44:58:39:53:A0:2B:C6:A6:69:9D:E9:27:CF:45:70:07:F0:55:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qERYOVOgK8amaZ3pJ89FcAfwVSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:53:62:57:f4:58:87:ae:d2:c1:a2:05:e7:3c:68:3c:bd:e2:
24:9c:ff:9a:af:b2:92:2a:ab:7c:7a:67:68:75:bd:aa:eb:f5:
1d:b0:b6:a2:9d:85:bc:70:dd:29:a2:df:91:ac:b3:cf:b1:0a:
eb:1e:f8:88:1d:23:5f:de:71:90:5a:0c:d5:0c:17:2a:96:2e:
8b:b1:f0:3b:f2:9f:81:b5:96:97:c8:07:ff:b3:af:ae:4f:44:
53:67:b5:a0:93:4f:3a:fc:66:5b:dc:a0:be:b8:8f:19:77:0a:
d2:51:3d:c5:0d:c7:d8:41:fc:ee:01:f0:ea:c6:ef:f8:24:d2:
ba:68:d3:a0:d4:c5:79:bd:4c:4a:1e:13:63:ca:cd:9f:1d:75:
53:64:c2:b1:26:cc:b1:e2:01:10:61:f7:5a:14:60:dd:d7:6c:
b3:56:05:be:1b:8b:d5:e1:90:30:74:50:9c:fc:55:6e:81:98:
cb:80:5b:71:c4:08:0f:fd:79:55:05:35:e5:bc:0b:a5:3d:46:
a5:5c:e2:44:95:6b:5c:99:d1:fc:30:78:99:e8:65:7c:35:21:
2b:89:ee:35:26:fe:37:f2:05:76:cd:1c:0e:47:11:9b:2c:9e:
98:c6:1a:07:8d:5b:b5:f3:58:06:48:d7:7d:8c:37:6d:7d:5c:
af:39:9f:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gBA5vmPXCbdCDZmKtBb0HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NDQ1ODM5NTNhMDJiYzZhNjY5OWRlOTI3Y2Y0NTcwMDdm
MDU1MjgwHhcNMjYwNzI2MjAwMDQ4WhcNMjYwNzI3MjAwMDQ4WjAzMTEwLwYDVQQD
EygxOTExZWE5YTU4MzE1NTM2ODA1Y2FjNjg1ZDYzMjRlOWEzNzJiMTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+fx36Gv0HiylJmQPQ4m4Pidr3As
IrNw+fwZfhKc1DyzXYnf8zFPgMihC8tMyTLvjZuO/BdrREmEDlqjgwPOlzqWYVxT
NQdiW4iZjxZRDmkvp7k+Qx0RZXAX/kvc0js+sPCMJjViEJ4yT4RLwcXES7ft6lyt
NBv4YDBxr3drT3k6P/dcWxMTdE5tCeGVpPHv90A2aDfV/f3Zw5/oS/my44Y0NUZj
pQyx8RCiB29hmXrVKmpKIZ+oF6lo5YEQT6Z3CwW+UdZZ6IJoLuy7Obc8jokQV8xp
lrCCw0XnnY92rUqxZhFSGj2Vo+1xC3V4GCqKapY1/fkAccDC6lGju5OHqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBkR6ppYMVU2gFysaF1jJOmjcrFSMB8GA1UdIwQY
MBaAFKhEWDlToCvGpmmd6SfPRXAH8FUoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUVSWU9WT2dLOGFtYVozcEo4OUZjQWZ3VlNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8zMDMxY2MtYTcwNS00MmM4LTgwMDMt
MTEzODEwYTlmY2FlLzEvcUVSWU9WT2dLOGFtYVozcEo4OUZjQWZ3VlNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8zMDMxY2MtYTcwNS00MmM4LTgwMDMtMTEzODEwYTlmY2Fl
LzEvcUVSWU9WT2dLOGFtYVozcEo4OUZjQWZ3VlNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd1NiV/RY
h67SwaIF5zxoPL3iJJz/mq+ykiqrfHpnaHW9quv1HbC2op2FvHDdKaLfkayzz7EK
6x74iB0jX95xkFoM1QwXKpYui7HwO/KfgbWWl8gH/7Ovrk9EU2e1oJNPOvxmW9yg
vriPGXcK0lE9xQ3H2EH87gHw6sbv+CTSumjToNTFeb1MSh4TY8rNnx11U2TCsSbM
seIBEGH3WhRg3ddss1YFvhuL1eGQMHRQnPxVboGYy4BbccQID/15VQU15bwLpT1G
pVziRJVrXJnR/DB4mehlfDUhK4nuNSb+N/IFds0cDkcRmyyemMYaB41btfNYBkjX
fYw3bX1crzmfwQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 05:48:55 2026 by rpki-client