Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
File: q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft (raw, json)
Hash identifier: 9r5Az/kewL1gZejuW5Q/auMCVMW8M8AHPyx5hwZgy3I=
Subject key identifier: 9B:0B:13:15:8F:1E:FF:66:B8:C2:2C:FB:01:68:DC:23:FB:AE:D8:B2
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 019FA2CF1073367EF88B7AFD64072DD9813B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
Manifest number: 1A33
Signing time: Mon 27 Jul 2026 09:01:46 +0000
Manifest this update: Mon 27 Jul 2026 09:01:46 +0000
Manifest next update: Tue 28 Jul 2026 09:01:46 +0000
Files and hashes: 1: q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl (hash: o3YbqzoHbYMWWSkpmOC9HsflDnJStXenFufuSrsEiOc=)
2: seBFYYQv0cvrV-jBttwLxGx-GgQ.roa (hash: ckniHG5YK95jMkTsaGk+p/q7us5X85VQ/bIV+gQNUtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:cf:10:73:36:7e:f8:8b:7a:fd:64:07:2d:d9:81:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Jul 27 09:01:46 2026 GMT
Not After : Jul 28 09:01:46 2026 GMT
Subject: CN=9b0b13158f1eff66b8c22cfb0168dc23fbaed8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:54:98:f1:e2:b8:cf:5c:e5:0a:c0:ec:a4:c9:
98:07:19:b0:96:37:49:f9:35:db:00:20:70:90:5d:
ea:6a:d2:2c:a6:34:9a:cf:f2:b1:b4:a6:39:08:23:
b8:1c:21:8b:fc:b2:8a:ba:1f:42:7c:dd:d7:81:ab:
19:68:0b:08:16:fa:ef:a9:be:4c:40:2c:1c:98:e7:
a6:7a:f8:e7:e7:ba:ec:b7:35:d2:4a:8f:eb:3f:d4:
8e:f0:a1:f1:93:67:47:44:92:ac:51:50:99:23:8f:
b3:cf:40:32:c1:f6:36:e2:a6:e7:ef:b0:06:7d:21:
e1:45:b9:b9:64:af:83:91:2d:4e:48:b4:5f:88:11:
ba:91:be:57:f8:8b:c4:ae:79:02:50:a8:e9:46:6c:
c3:64:a8:95:49:f9:4c:25:bd:c7:09:ce:0c:8e:d9:
46:b5:8b:a0:2b:78:91:d2:ca:1b:26:36:b2:11:73:
3b:a9:99:c7:59:16:78:cd:d4:04:c5:5b:52:7f:db:
6d:f1:bd:91:2d:55:7c:ea:89:91:da:60:a6:16:ee:
73:83:f2:71:f8:85:90:e4:7a:0d:7a:09:1b:b8:01:
7d:4e:cd:b0:06:b3:20:b6:1f:88:36:34:ac:19:51:
88:70:e1:3f:4b:00:17:2c:99:6a:e2:e2:ff:e8:57:
6c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:0B:13:15:8F:1E:FF:66:B8:C2:2C:FB:01:68:DC:23:FB:AE:D8:B2
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d0:83:21:c4:71:c4:60:b2:ef:3f:74:ad:c9:b3:b7:d8:47:
4a:32:98:31:0a:af:05:90:b7:5b:1c:aa:19:52:2e:f2:e5:d6:
d1:68:51:cf:14:6c:fe:8c:f1:69:51:a9:ec:b0:48:08:2d:d6:
b3:12:94:f3:11:1c:f6:7a:94:d1:85:10:d6:8d:52:d3:11:06:
e1:b6:27:cd:d5:65:b6:3f:a4:ef:7d:4f:7c:5a:13:93:28:bb:
e5:df:7e:3f:7f:df:cc:34:ae:83:e9:62:10:f6:80:20:46:15:
ee:98:fc:3c:2d:bc:7f:26:02:be:e5:3e:a5:36:57:b3:fd:6a:
d4:48:96:16:21:81:16:02:90:ba:5d:5c:09:88:f1:39:3a:f3:
09:db:3b:80:6d:97:c8:f8:e9:bf:99:d0:cf:3d:13:2f:a6:e6:
7e:38:2f:18:40:d3:8d:41:88:87:2e:d5:27:62:6d:ba:f6:e3:
73:13:2b:3c:78:a4:78:03:4b:38:10:6d:c6:b4:89:9c:eb:75:
3d:f3:ef:83:86:00:20:88:74:0c:0b:19:a4:5b:4a:54:0d:8c:
3b:b0:db:51:20:46:d7:2e:1f:28:7d:cf:1a:58:c3:2b:d0:b1:
fa:29:6e:9c:64:15:1f:e1:4e:24:3a:b8:bd:9b:ce:e5:98:7e:
de:a2:1e:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+izxBzNn74i3r9ZAct2YE7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNzFlOWIxM2Y1YzMzOWE1ODY5MmVlYWJlNzJlYWE0MDZi
YmJkN2QwHhcNMjYwNzI3MDkwMTQ2WhcNMjYwNzI4MDkwMTQ2WjAzMTEwLwYDVQQD
Eyg5YjBiMTMxNThmMWVmZjY2YjhjMjJjZmIwMTY4ZGMyM2ZiYWVkOGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFSY8eK4z1zlCsDspMmYBxmwljdJ
+TXbACBwkF3qatIspjSaz/KxtKY5CCO4HCGL/LKKuh9CfN3XgasZaAsIFvrvqb5M
QCwcmOemevjn57rstzXSSo/rP9SO8KHxk2dHRJKsUVCZI4+zz0AywfY24qbn77AG
fSHhRbm5ZK+DkS1OSLRfiBG6kb5X+IvErnkCUKjpRmzDZKiVSflMJb3HCc4MjtlG
tYugK3iR0sobJjayEXM7qZnHWRZ4zdQExVtSf9tt8b2RLVV86omR2mCmFu5zg/Jx
+IWQ5HoNegkbuAF9Ts2wBrMgth+INjSsGVGIcOE/SwAXLJlq4uL/6FdsfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJsLExWPHv9muMIs+wFo3CP7rtiyMB8GA1UdIwQY
MBaAFKtx6bE/XDOaWGku6r5y6qQGu719MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTNIcHNUOWNNNXBZYVM3cXZuTHFwQWE3dlgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82YmEzOWMtZWYxZC00ZDQ4LTk4MmIt
Y2Y0YjkwMDk5N2EwLzEvcTNIcHNUOWNNNXBZYVM3cXZuTHFwQWE3dlgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82YmEzOWMtZWYxZC00ZDQ4LTk4MmItY2Y0YjkwMDk5N2Ew
LzEvcTNIcHNUOWNNNXBZYVM3cXZuTHFwQWE3dlgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADtCDIcRx
xGCy7z90rcmzt9hHSjKYMQqvBZC3WxyqGVIu8uXW0WhRzxRs/ozxaVGp7LBICC3W
sxKU8xEc9nqU0YUQ1o1S0xEG4bYnzdVltj+k731PfFoTkyi75d9+P3/fzDSug+li
EPaAIEYV7pj8PC28fyYCvuU+pTZXs/1q1EiWFiGBFgKQul1cCYjxOTrzCds7gG2X
yPjpv5nQzz0TL6bmfjgvGEDTjUGIhy7VJ2JtuvbjcxMrPHikeANLOBBtxrSJnOt1
PfPvg4YAIIh0DAsZpFtKVA2MO7DbUSBG1y4fKH3PGljDK9Cx+ilunGQVH+FOJDq4
vZvO5Zh+3qIe6w==
-----END CERTIFICATE-----
Generated at Mon Jul 27 14:24:27 2026 by rpki-client