Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
File: r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft (raw, json)
Hash identifier: mNO22sz4iGcrwm68FxwzdLcEDtoNg8ZB+E5rPKLZo+A=
Subject key identifier: 8F:AB:91:A2:FD:A9:47:DE:3F:87:50:BD:29:80:97:53:7B:B0:82:6E
Authority key identifier: AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
Certificate issuer: /CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Certificate serial: 019FA33C68565F048ED8D2303279DA5EF876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
Manifest number: 16C5
Signing time: Mon 27 Jul 2026 11:01:12 +0000
Manifest this update: Mon 27 Jul 2026 11:01:12 +0000
Manifest next update: Tue 28 Jul 2026 11:01:12 +0000
Files and hashes: 1: 0llklTGwRpo1D7HWMMbydisxDQ4.roa (hash: 3z2IZ4s8AyOuNF65gLQqbep0m2rYxv6RvjyL7CQP75U=)
2: QWs1csGK8KUFGhfj2QFKlBU8El0.roa (hash: 0iVAN86kduscSDUBK67oi4SEPANLs+DqgTgFkRGgbJQ=)
3: r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl (hash: lJVrwTU9ULgoccvkO5Qxu1hY0PSo4AT1IQdeEjNK6nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3c:68:56:5f:04:8e:d8:d2:30:32:79:da:5e:f8:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Validity
Not Before: Jul 27 11:01:12 2026 GMT
Not After : Jul 28 11:01:12 2026 GMT
Subject: CN=8fab91a2fda947de3f8750bd298097537bb0826e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:46:99:8b:a8:26:04:b4:88:d3:da:03:ef:cc:
f3:cc:01:81:2a:1b:68:5e:2e:1a:ca:04:ef:60:e0:
82:21:e9:69:7b:4f:e3:0c:3e:78:86:a6:34:d1:b4:
3c:95:63:46:d0:fc:31:a4:df:3e:a4:c7:19:2a:99:
9e:10:da:54:94:f8:34:83:07:11:ab:0d:11:33:43:
4a:ea:2a:b3:a7:4a:b6:35:6e:71:fc:08:a9:04:c8:
c1:4d:f2:0c:a6:9d:e5:02:41:fd:e3:c7:56:7c:c6:
fa:69:70:06:0f:b3:70:16:5f:3d:e9:b8:7b:c6:dc:
79:f4:ab:ed:76:e6:f3:99:71:fd:37:a9:c2:04:5a:
d1:f7:00:61:37:a6:2a:67:44:8e:30:0d:a0:2c:e0:
95:3e:90:8d:3b:c7:3b:4d:25:51:95:25:05:43:99:
2a:c5:ef:c0:44:f8:ff:2a:66:11:cb:ee:cd:5a:de:
28:0a:85:48:78:d6:9a:24:22:ea:5f:7e:f2:7f:83:
6f:47:9c:fd:97:6d:50:6f:5f:a2:6b:24:83:4e:e0:
d3:3c:a7:e2:dd:60:6a:f4:66:06:83:cd:76:2c:09:
b5:81:4d:07:9a:43:02:1a:56:cf:07:20:0a:31:99:
70:6f:6e:fe:36:16:4d:e8:9e:d6:9b:b7:dd:94:9f:
f9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AB:91:A2:FD:A9:47:DE:3F:87:50:BD:29:80:97:53:7B:B0:82:6E
X509v3 Authority Key Identifier:
keyid:AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:88:fe:19:f3:44:b2:32:5a:02:a9:39:fc:e1:1a:93:39:39:
8a:05:9f:3d:f3:fc:34:d3:e2:61:b0:70:d0:03:c8:f8:47:de:
71:6a:85:7b:6a:38:10:4b:5f:6d:1c:4b:3c:cc:31:2d:d1:28:
70:97:39:f3:88:38:9d:80:44:cd:37:c7:43:fe:47:a1:0f:77:
2e:b2:51:0a:71:90:95:2e:7c:7a:b8:89:07:f6:d8:89:2e:d6:
39:d5:a0:ea:4f:a9:32:27:96:a0:8c:58:0e:e5:5b:d8:40:03:
2e:f6:9e:31:48:a9:6f:5a:a9:4c:f5:70:61:41:dd:35:0c:f1:
24:9d:0e:b4:e0:c4:9b:4f:4d:96:36:90:58:48:6c:54:6e:fd:
cb:b2:d4:f5:c4:77:ef:e2:a8:00:18:b7:ba:53:2b:d2:4c:66:
56:43:a2:ee:dd:4b:7d:8d:8b:d5:e9:29:34:bc:fc:a0:74:d4:
9b:ee:7b:97:61:a4:22:15:b2:ec:b6:43:0f:14:7f:c8:9b:f4:
01:db:83:be:86:cb:fe:cc:a2:ee:95:84:f1:a2:7f:31:4b:5b:
87:87:0e:b7:4e:3a:bb:d4:f7:9b:06:13:32:50:b8:b3:eb:ab:
f2:5c:55:bd:99:c4:f0:d0:26:94:c6:0b:f5:a6:0d:01:ab:d8:
61:52:e8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:07:50 2026 by rpki-client