Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/qaHWsnXkY50IGRt8RqsjlCgod0Y.mft
File: qaHWsnXkY50IGRt8RqsjlCgod0Y.mft (raw, json)
Hash identifier: 1v2JUrhJ57hpExywlyo+XdMsn8Zxc9C5gnVXhSHElxM=
Subject key identifier: A2:5F:07:45:21:E8:03:BF:D3:92:A9:01:46:45:7B:3B:BF:14:99:F4
Authority key identifier: A9:A1:D6:B2:75:E4:63:9D:08:19:1B:7C:46:AB:23:94:28:28:77:46
Certificate issuer: /CN=a9a1d6b275e4639d08191b7c46ab239428287746
Certificate serial: 019FAE644A3F2F374891C6A8A8B48BE9C5FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaHWsnXkY50IGRt8RqsjlCgod0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/qaHWsnXkY50IGRt8RqsjlCgod0Y.mft
Manifest number: 4F
Signing time: Wed 29 Jul 2026 15:00:35 +0000
Manifest this update: Wed 29 Jul 2026 15:00:35 +0000
Manifest next update: Thu 30 Jul 2026 15:00:35 +0000
Files and hashes: 1: ab6rMUVn3A5Dtq5dYI7GOWhDpls.roa (hash: hYA//IrWljegAbclM/Dg53bUXQQ8j8qJOOVapxZlnWw=)
2: e95uvzijUfA8PskqB29MCQITY0c.roa (hash: 5t2e4qTsbvRPuZzQuH0LgBYqoRjK8h1rvy0dZQHvLOQ=)
3: h4HTnmNQ40S0AlgZb0tILyqRtAs.roa (hash: x8PyCmmrpbL3asDF+bPUyXhIWSTsgb0lr6OUsDywpqw=)
4: qaHWsnXkY50IGRt8RqsjlCgod0Y.crl (hash: PmYyI5P2XTM3RHNqeSQ/D8VsGug9v+iqipLBoD3L6D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/qaHWsnXkY50IGRt8RqsjlCgod0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/qaHWsnXkY50IGRt8RqsjlCgod0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qaHWsnXkY50IGRt8RqsjlCgod0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:64:4a:3f:2f:37:48:91:c6:a8:a8:b4:8b:e9:c5:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a1d6b275e4639d08191b7c46ab239428287746
Validity
Not Before: Jul 29 15:00:35 2026 GMT
Not After : Jul 30 15:00:35 2026 GMT
Subject: CN=a25f074521e803bfd392a90146457b3bbf1499f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:94:e2:68:f6:06:6a:ef:30:4d:fd:24:9e:bc:
0a:db:81:73:d3:e4:c4:95:53:b5:0a:db:c4:88:0b:
01:5e:90:19:80:80:66:c6:1d:c2:27:94:fd:88:bd:
ef:d9:c1:f5:6f:e5:0b:3c:bc:62:02:24:4b:93:21:
e8:8b:7e:75:26:48:3c:8c:e2:19:84:8e:09:8d:a7:
30:8a:bb:d7:6f:91:a3:df:b9:66:ac:e4:c5:41:ae:
d7:84:0e:07:91:98:14:6c:ec:0a:73:d9:43:23:0b:
bd:47:42:0b:66:dd:8f:96:0b:1d:5e:43:1f:9b:0f:
b6:0d:0b:8e:03:ec:e1:09:92:9f:89:ea:77:bd:df:
8f:bd:2b:ce:bb:61:96:23:1a:cc:13:bf:6f:9e:91:
6b:d1:83:9c:66:e5:7d:03:3e:27:24:36:02:99:ce:
17:2f:ec:4c:2e:0d:cd:ed:25:03:4c:f9:53:89:9a:
a5:8c:2a:54:c7:3c:7b:8f:09:dd:39:96:4e:2c:98:
f9:01:3b:ab:c1:ac:4b:4c:ed:b0:54:f2:ab:9b:7d:
5e:6c:a3:21:19:34:bb:e1:fd:38:7f:cc:8a:42:ce:
74:85:b8:c0:c4:75:3e:8d:40:f7:c2:77:b2:54:89:
87:dd:74:15:51:ad:82:83:1b:82:91:bf:82:5d:19:
7c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5F:07:45:21:E8:03:BF:D3:92:A9:01:46:45:7B:3B:BF:14:99:F4
X509v3 Authority Key Identifier:
keyid:A9:A1:D6:B2:75:E4:63:9D:08:19:1B:7C:46:AB:23:94:28:28:77:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaHWsnXkY50IGRt8RqsjlCgod0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/qaHWsnXkY50IGRt8RqsjlCgod0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/qaHWsnXkY50IGRt8RqsjlCgod0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:31:23:b6:ad:7d:62:61:bf:54:d8:a0:f4:6a:1e:32:5e:e5:
48:e5:a8:64:bc:f3:69:04:5b:08:52:c4:b2:7e:5f:f2:f4:f8:
34:a8:51:c3:50:30:2f:de:c6:b9:a3:9b:c7:cf:dd:63:07:23:
0c:38:30:dc:bc:85:26:c3:6d:c7:bb:32:e7:72:1f:57:f4:2f:
c2:6e:0d:08:d9:18:59:b7:74:cc:5b:8e:9c:9e:2b:60:81:ea:
a6:c3:b1:7b:09:09:c4:7a:df:39:dd:5d:9a:49:94:5c:c9:b5:
52:f6:ef:a1:d1:18:0d:34:6d:2d:ac:9a:86:a4:d9:4c:fe:2d:
4b:d6:13:2d:99:5f:73:ec:5b:6c:04:eb:f9:61:fb:9f:81:f2:
94:c4:de:8f:15:93:f9:3d:a2:a7:79:32:54:db:64:ce:cf:81:
61:d3:37:bd:b5:29:0d:92:b8:26:be:0c:8d:30:e5:3a:9a:ce:
25:42:39:3d:1d:94:3b:37:fc:ee:6f:39:26:64:fa:32:12:12:
94:91:ee:fa:14:11:59:c6:64:ec:fc:9a:2d:9b:b7:6a:cc:f3:
92:95:b5:8c:46:40:95:04:dd:e3:4b:4d:ba:63:86:2d:1c:a7:
a0:15:ab:4f:e6:fb:01:7d:07:8e:71:63:ed:0c:96:99:cd:b2:
f6:2e:f2:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+uZEo/LzdIkcaoqLSL6cX8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5YTFkNmIyNzVlNDYzOWQwODE5MWI3YzQ2YWIyMzk0Mjgy
ODc3NDYwHhcNMjYwNzI5MTUwMDM1WhcNMjYwNzMwMTUwMDM1WjAzMTEwLwYDVQQD
EyhhMjVmMDc0NTIxZTgwM2JmZDM5MmE5MDE0NjQ1N2IzYmJmMTQ5OWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpTiaPYGau8wTf0knrwK24Fz0+TE
lVO1CtvEiAsBXpAZgIBmxh3CJ5T9iL3v2cH1b+ULPLxiAiRLkyHoi351Jkg8jOIZ
hI4JjacwirvXb5Gj37lmrOTFQa7XhA4HkZgUbOwKc9lDIwu9R0ILZt2PlgsdXkMf
mw+2DQuOA+zhCZKfiep3vd+PvSvOu2GWIxrME79vnpFr0YOcZuV9Az4nJDYCmc4X
L+xMLg3N7SUDTPlTiZqljCpUxzx7jwndOZZOLJj5ATurwaxLTO2wVPKrm31ebKMh
GTS74f04f8yKQs50hbjAxHU+jUD3wneyVImH3XQVUa2CgxuCkb+CXRl8WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJfB0Uh6AO/05KpAUZFezu/FJn0MB8GA1UdIwQY
MBaAFKmh1rJ15GOdCBkbfEarI5QoKHdGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWFIV3NuWGtZNTBJR1J0OFJxc2psQ2dvZDBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kNGY4M2QtZmI1My00MjRmLTg1MWQt
YzBkMDYyYTc1MzU0LzEvcWFIV3NuWGtZNTBJR1J0OFJxc2psQ2dvZDBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9kNGY4M2QtZmI1My00MjRmLTg1MWQtYzBkMDYyYTc1MzU0
LzEvcWFIV3NuWGtZNTBJR1J0OFJxc2psQ2dvZDBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOTEjtq19
YmG/VNig9GoeMl7lSOWoZLzzaQRbCFLEsn5f8vT4NKhRw1AwL97GuaObx8/dYwcj
DDgw3LyFJsNtx7sy53IfV/Qvwm4NCNkYWbd0zFuOnJ4rYIHqpsOxewkJxHrfOd1d
mkmUXMm1UvbvodEYDTRtLayahqTZTP4tS9YTLZlfc+xbbATr+WH7n4HylMTejxWT
+T2ip3kyVNtkzs+BYdM3vbUpDZK4Jr4MjTDlOprOJUI5PR2UOzf87m85JmT6MhIS
lJHu+hQRWcZk7PyaLZu3aszzkpW1jEZAlQTd40tNumOGLRynoBWrT+b7AX0HjnFj
7QyWmc2y9i7yzg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 23:51:49 2026 by rpki-client