Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
File: r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft (raw, json)
Hash identifier: WqJE+WY5jmoSjT2Qzhseb/5iqc14FQ4QjgYxtqZIEiY=
Subject key identifier: 2A:F1:5B:AA:87:60:B8:B4:84:33:6F:29:7D:30:A2:BC:1F:AC:DE:51
Authority key identifier: AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
Certificate issuer: /CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Certificate serial: 019FA14D765D4628A979D53C3D4551BA442C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
Manifest number: 16C4
Signing time: Mon 27 Jul 2026 02:00:36 +0000
Manifest this update: Mon 27 Jul 2026 02:00:36 +0000
Manifest next update: Tue 28 Jul 2026 02:00:36 +0000
Files and hashes: 1: 0llklTGwRpo1D7HWMMbydisxDQ4.roa (hash: 3z2IZ4s8AyOuNF65gLQqbep0m2rYxv6RvjyL7CQP75U=)
2: QWs1csGK8KUFGhfj2QFKlBU8El0.roa (hash: 0iVAN86kduscSDUBK67oi4SEPANLs+DqgTgFkRGgbJQ=)
3: r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl (hash: sJaYMtSsgcHlmoMxOvaoNgh/VKec05j1XIwMl50x2K8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:76:5d:46:28:a9:79:d5:3c:3d:45:51:ba:44:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Validity
Not Before: Jul 27 02:00:36 2026 GMT
Not After : Jul 28 02:00:36 2026 GMT
Subject: CN=2af15baa8760b8b484336f297d30a2bc1facde51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8e:b5:f0:38:66:bd:b0:6e:41:e8:96:f7:39:
aa:66:5f:3d:07:70:9e:49:1f:3a:da:93:9e:b8:ae:
02:cb:32:b8:b1:8c:33:b6:23:8c:5a:4c:15:50:5b:
4f:1a:49:ff:7b:0d:19:37:6d:2b:e1:f6:3f:b7:cd:
88:fc:38:e5:df:f8:e1:3c:bd:4c:9a:2d:86:40:d8:
40:5e:43:7e:39:5b:1c:93:67:85:66:04:89:87:03:
ed:5b:82:f9:10:a0:69:05:b8:67:f4:b1:d8:5a:61:
71:a5:20:b3:ed:20:e4:57:28:59:b2:3f:a6:c7:47:
06:95:07:b5:8c:ef:e5:a0:d1:d6:e9:74:9e:1c:cf:
28:08:68:93:d5:42:0c:fd:30:ee:73:bb:5d:a2:a2:
63:0c:e5:15:b4:6e:8d:5e:0b:bc:80:14:69:d7:d0:
a5:6b:10:5a:45:0e:88:b4:2c:4a:a3:49:5c:b3:74:
77:04:87:88:b2:50:be:03:e0:b8:f2:06:1f:40:f0:
33:93:03:43:68:3a:8c:0d:62:c8:9e:e4:6a:c3:ad:
d5:20:03:f2:f8:fe:81:d6:dd:d1:c6:d0:1f:d0:77:
3e:35:a4:56:0e:34:d2:f6:2d:d7:a3:3f:92:4e:f9:
93:4e:f6:13:6c:ea:20:89:74:62:f0:37:0e:9f:b4:
29:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F1:5B:AA:87:60:B8:B4:84:33:6F:29:7D:30:A2:BC:1F:AC:DE:51
X509v3 Authority Key Identifier:
keyid:AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:12:43:72:b7:b8:02:be:94:08:4d:1a:ec:7a:c7:14:87:a9:
c0:32:58:a2:2e:c9:e3:33:c7:a0:7a:7f:b3:dd:af:f3:93:32:
6c:ac:f4:a6:5a:19:26:1d:7e:5e:02:8a:f1:44:5c:69:02:ae:
8c:46:47:43:3a:2b:ea:1f:21:eb:31:cb:29:75:1d:96:69:b4:
05:2a:02:c2:fd:35:a8:d2:bf:b6:c7:28:20:76:81:33:5b:03:
fc:19:93:4b:fb:a0:de:09:13:e7:91:08:5d:c4:50:98:be:5d:
8c:ff:4f:05:ff:73:8e:8f:7d:a7:f8:3c:5c:07:5f:03:94:74:
1e:80:e1:c1:22:bf:22:bb:29:8d:c9:f6:a6:95:0f:6e:51:f1:
cd:a6:9d:04:02:52:84:ba:37:4e:c8:07:cb:dc:10:4a:c9:cd:
63:6d:a5:d6:10:3f:4c:ba:d4:1a:9c:b7:fc:8b:d2:c9:fb:0a:
15:c6:a8:6c:43:cd:13:82:2f:cd:c6:91:b3:e5:fc:6c:19:9f:
20:ee:4b:30:bf:c5:ed:72:7c:94:73:8a:98:d8:2b:51:8f:8f:
89:a5:a4:43:ca:24:0f:6c:09:e4:93:1f:a9:93:ff:b9:15:f6:
b1:28:47:60:bf:bd:0e:13:f5:f4:e9:dd:5f:12:4f:2f:84:57:
d8:19:9f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:01:33 2026 by rpki-client