Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
File: qnNO9a4hwOiX-hhkRxhOya1K4p0.mft (raw, json)
Hash identifier: ylvwFmBhTKTmGyzim8ksc9flbwRNVV5z/e45tFApPCE=
Subject key identifier: 4D:CB:9D:B6:82:B2:44:CE:B4:51:DB:C5:85:3C:3F:B6:82:1F:77:31
Authority key identifier: AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D
Certificate issuer: /CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d
Certificate serial: 019FA71854BC23D8ACC60249502EDE63DC58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
Manifest number: 0B84
Signing time: Tue 28 Jul 2026 05:00:17 +0000
Manifest this update: Tue 28 Jul 2026 05:00:17 +0000
Manifest next update: Wed 29 Jul 2026 05:00:17 +0000
Files and hashes: 1: Nd2VWji2-npmv2b1apqFNWYSkaY.roa (hash: BWQO3/ctGckcd4Dl6OgXbOo4/UEjPFHnSYCpr3sCzaU=)
2: dKP6zKEOjA35eNWIADhSGj3djko.roa (hash: 2Lz2j2XDdHTzfHzI32dG004beOMGbTVI9KUsaPstIRU=)
3: qnNO9a4hwOiX-hhkRxhOya1K4p0.crl (hash: xMO4MKgaSfk4AAbwWgtqD6jfWSGIVzUerhSundhcCdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:18:54:bc:23:d8:ac:c6:02:49:50:2e:de:63:dc:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d
Validity
Not Before: Jul 28 05:00:17 2026 GMT
Not After : Jul 29 05:00:17 2026 GMT
Subject: CN=4dcb9db682b244ceb451dbc5853c3fb6821f7731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a4:15:80:f8:95:8f:57:d7:4c:bb:54:b4:75:
a6:a0:80:86:14:39:8d:a4:d2:11:a1:7e:db:e2:d4:
85:54:39:80:6e:f1:a1:0e:6e:ef:da:f5:dd:62:14:
ff:8b:cf:2c:5f:a7:65:b9:3a:6d:b2:bc:86:8c:66:
9a:fa:c7:de:bc:64:84:6a:e4:cd:50:8f:82:f8:64:
7e:2d:10:06:db:fb:2e:6b:60:ed:4b:47:74:ab:10:
63:d8:c8:9f:9a:bf:b2:ca:94:19:fe:62:37:a9:a9:
b3:da:81:30:f1:f2:07:f1:bd:f4:51:c8:1b:8f:96:
d3:f1:95:08:0b:9d:67:a6:ad:58:89:5a:92:28:5d:
33:c1:90:1e:cc:4b:ab:c3:03:e9:df:c1:aa:87:36:
a1:c4:6e:96:94:9e:b2:df:05:bb:5b:c4:95:f3:65:
e5:aa:a6:d4:e7:37:a4:72:36:10:95:f0:1e:55:f3:
cc:a6:cb:43:9a:24:6f:a9:52:a0:5c:c6:6b:b5:a8:
37:88:c8:c5:d8:7b:09:3c:d4:7a:b4:66:2a:33:04:
d0:aa:6e:b0:e6:71:86:60:2a:ab:86:4e:7a:67:77:
2b:59:fd:dd:fc:32:68:d6:09:97:af:96:1b:1b:97:
8c:a2:dd:de:ac:51:a7:0b:be:be:77:f9:2e:22:0b:
2f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CB:9D:B6:82:B2:44:CE:B4:51:DB:C5:85:3C:3F:B6:82:1F:77:31
X509v3 Authority Key Identifier:
keyid:AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:b4:dd:44:47:6e:41:86:0d:13:05:7f:53:58:bf:50:16:26:
76:9a:65:8d:cf:96:ce:b2:ad:e3:5d:13:9b:cc:37:9a:25:e6:
92:cc:61:76:7d:c6:d5:b7:4e:0a:2c:96:6d:ca:9a:8d:d7:00:
f8:9f:59:51:00:c4:54:4d:7a:a1:e4:5c:2a:4e:7b:1a:f0:21:
78:20:b1:36:e1:71:4a:46:03:ad:3d:ca:c3:af:3b:85:05:08:
8e:65:30:85:44:17:2f:8c:8d:7b:dd:91:8d:8a:a9:05:54:2a:
18:ff:76:53:a0:b8:17:f7:d3:6c:1c:57:14:17:81:b0:86:c6:
2d:69:cb:b1:23:bf:62:d3:e0:46:ce:5f:32:c0:45:bb:85:84:
cc:b8:3a:30:b1:dc:fd:67:77:95:cb:93:3c:a3:41:7f:30:06:
41:b9:dd:c2:52:6c:16:f9:31:85:7e:aa:72:b5:46:3c:b5:27:
98:dc:ba:64:6e:46:09:92:ac:ef:0d:fe:05:8a:53:f6:de:10:
3b:61:4b:f2:2f:a7:57:3c:a5:e6:a7:43:74:43:c7:85:96:b9:
fd:a8:5d:47:09:24:55:33:8d:f8:20:ee:c6:2b:cc:f4:a2:1b:
36:29:c4:46:95:31:72:ea:c5:88:b6:11:38:2e:45:d2:f9:54:
c7:34:ca:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 10:35:52 2026 by rpki-client