Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
File: qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft (raw, json)
Hash identifier: d6UVKdStJrWavQ7aHlidRt7y76I0ajnPNS5Td9H+sG0=
Subject key identifier: C6:6C:71:5D:1F:B6:CE:DA:E2:13:DE:B6:7B:2F:4B:86:00:38:C0:F6
Authority key identifier: AA:FC:3D:2C:92:97:10:30:6E:84:7C:60:7D:38:11:4A:EB:B3:CC:08
Certificate issuer: /CN=aafc3d2c929710306e847c607d38114aebb3cc08
Certificate serial: 01A03DBA8F4B8906BDF51B026D31F2449865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
Manifest number: 1A20
Signing time: Wed 26 Aug 2026 11:00:31 +0000
Manifest this update: Wed 26 Aug 2026 11:00:31 +0000
Manifest next update: Thu 27 Aug 2026 11:00:31 +0000
Files and hashes: 1: 3qtjPVhy36B112_T9YD_k1D7PrQ.roa (hash: TnLbrW8cdvU0sgFs8JL8GKZ+s8BUvq1O8YCehip/3/4=)
2: b-_QLOAaiTLnrdshp-MjmUbpJAQ.asa (hash: zE9zRSorao8ZT6ov8SMASzQ+KxaurOF00HS44oG3cE8=)
3: qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl (hash: Cx8UnXB77DZTDpG+e4+e1lifYAYdcEEkpeYNt0RBJDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 11:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:ba:8f:4b:89:06:bd:f5:1b:02:6d:31:f2:44:98:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aafc3d2c929710306e847c607d38114aebb3cc08
Validity
Not Before: Aug 26 11:00:31 2026 GMT
Not After : Aug 27 11:00:31 2026 GMT
Subject: CN=c66c715d1fb6cedae213deb67b2f4b860038c0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4d:e0:9c:c1:54:c7:8e:0e:9d:c2:24:25:15:
bd:ad:8e:10:b5:8e:79:d0:b8:7c:42:5c:7a:d7:85:
05:17:49:dd:11:bc:a9:4a:63:7d:76:16:01:76:c5:
33:b7:25:44:1e:f5:ce:bd:19:6a:36:15:76:4e:d5:
b2:60:51:7c:b4:b2:e2:c2:a9:82:59:58:f5:ac:96:
36:44:84:41:28:51:19:a0:44:e3:b6:15:2b:68:2e:
46:79:a3:6a:f7:97:c1:50:06:26:7f:45:03:5d:82:
87:04:d2:91:6f:3f:24:14:1a:c5:08:ce:59:ef:b2:
10:91:71:55:43:0a:e0:27:02:69:13:08:87:1e:74:
e6:4a:6b:fe:99:57:1b:38:4c:a3:7e:96:2c:17:f4:
4c:4c:e0:04:1a:84:44:18:1e:ce:8e:b3:ae:b9:dc:
a5:a5:e1:61:4f:93:6c:33:12:e0:d6:c9:a7:0e:da:
9d:99:6a:d7:d0:89:2c:da:0b:e7:de:7f:8b:3c:7c:
53:ab:14:cb:32:d0:f0:f2:95:2f:c5:60:d5:0c:82:
aa:34:41:cd:cc:db:ad:c5:d0:7d:17:49:8d:a9:dc:
39:7a:2d:4a:9a:03:30:06:38:34:ef:18:0e:11:24:
1b:8e:1e:56:2c:8f:46:9b:08:db:6d:ec:37:39:5a:
0f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6C:71:5D:1F:B6:CE:DA:E2:13:DE:B6:7B:2F:4B:86:00:38:C0:F6
X509v3 Authority Key Identifier:
keyid:AA:FC:3D:2C:92:97:10:30:6E:84:7C:60:7D:38:11:4A:EB:B3:CC:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:3d:6f:ac:0d:e2:54:31:73:80:21:69:8e:1a:53:5a:fa:83:
dd:12:d7:0a:f6:5f:23:0f:74:a7:3d:ca:f6:f8:82:90:68:44:
cf:7e:b8:5a:cb:0f:9e:16:d0:19:39:5c:36:3e:01:58:c9:b8:
2b:27:eb:8e:37:56:34:bf:ee:25:43:51:c5:2a:71:1b:a0:0f:
d0:5c:55:d5:74:4d:e8:8d:a9:d5:fa:0e:04:0c:bf:8b:1f:7c:
fe:60:32:46:6c:23:56:46:23:69:80:ee:27:60:25:a8:93:57:
7f:8a:1b:f3:61:08:a8:49:2e:dd:19:0e:62:59:b0:1d:c9:2c:
10:4d:77:e9:b7:61:39:91:29:99:12:d9:d3:b1:12:e6:3f:8b:
cb:33:d1:50:ec:c1:2e:5f:bd:11:c9:4d:7f:ca:da:27:58:84:
50:6d:6d:2b:69:bc:5d:58:9a:f6:1f:1f:ad:3a:1a:68:27:b5:
a0:cf:a1:ee:87:06:a0:b6:53:40:ff:f7:56:9b:28:34:f9:38:
c4:94:38:61:de:41:85:13:46:77:5c:61:d8:ab:e3:90:30:0f:
e2:cd:b4:3d:e3:1d:a7:85:6c:9b:15:7b:e9:6a:e3:cb:8f:23:
8c:33:cd:d1:cc:6a:61:2d:48:23:64:37:e9:f5:2f:c8:b1:32:
21:ea:28:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 16:11:53 2026 by rpki-client