Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
File: qjX0oGEfcqiSww2CEtIfhswTqWc.mft (raw, json)
Hash identifier: UejaIknMwU1Fmuohl9yrl2kffIkojr9e/lNfOaWEOSE=
Subject key identifier: 6A:FB:41:08:DC:B6:99:DD:73:5F:85:97:2F:43:7B:0E:56:0A:9E:04
Authority key identifier: AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
Certificate issuer: /CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Certificate serial: 019F8569090FA4FCE3B20A3A9E203A2DAE98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
Manifest number: 0A59
Signing time: Tue 21 Jul 2026 16:01:21 +0000
Manifest this update: Tue 21 Jul 2026 16:01:21 +0000
Manifest next update: Wed 22 Jul 2026 16:01:21 +0000
Files and hashes: 1: XdHfu4aNbbqY05djIHZSat5N9NA.asa (hash: AUEcvgTMi0kC5OD2yO9q7Au5IXQUp3/LdfUmGStQlvw=)
2: qjX0oGEfcqiSww2CEtIfhswTqWc.crl (hash: yov+uw5wP0yWkk16ot3Lf7tu52dX/jAcu1UXfXIHQnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:69:09:0f:a4:fc:e3:b2:0a:3a:9e:20:3a:2d:ae:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Validity
Not Before: Jul 21 16:01:21 2026 GMT
Not After : Jul 22 16:01:21 2026 GMT
Subject: CN=6afb4108dcb699dd735f85972f437b0e560a9e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0c:0b:0e:80:61:d8:fc:05:3e:5c:13:e9:9d:
93:5a:93:b2:24:f0:23:e5:ba:43:b9:b1:d7:4b:ff:
59:b3:bf:bb:84:52:63:41:12:85:aa:7e:e3:19:72:
8b:59:78:91:ad:cb:61:b3:93:3b:e2:14:99:ad:f5:
43:13:fd:cb:01:7f:d4:67:91:45:2a:c2:b2:73:7c:
90:2f:9b:38:e3:2d:75:76:48:8c:10:bd:97:3a:60:
0b:6c:ca:2d:a2:19:9d:2f:06:16:cc:84:19:2e:ea:
c6:93:4a:bd:3e:22:f5:c3:8a:1d:b5:93:57:11:e7:
30:54:c2:fa:54:59:d0:67:dc:bc:79:42:7c:aa:d2:
60:07:a0:2c:9a:ee:87:be:65:f2:4c:93:91:2e:e3:
91:eb:94:d3:1c:df:19:04:ac:4a:78:8a:21:0b:a4:
d9:25:1b:a2:35:eb:88:89:02:61:fe:a2:ee:93:ec:
73:2c:5f:ad:c2:9d:1f:50:45:ea:99:0f:e2:be:2a:
8d:3a:e9:96:e4:67:06:ea:38:60:11:63:0c:20:71:
6c:a4:e0:69:7c:eb:02:ae:69:ba:89:eb:a8:ba:63:
c8:62:10:77:7a:77:b5:08:80:8d:e8:4a:32:a9:c5:
68:91:2b:1f:1f:b6:2a:8a:97:ef:c3:98:6a:4c:cc:
c4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FB:41:08:DC:B6:99:DD:73:5F:85:97:2F:43:7B:0E:56:0A:9E:04
X509v3 Authority Key Identifier:
keyid:AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:cb:07:75:eb:65:cc:69:cb:3b:4c:70:1f:cc:2e:19:6c:77:
30:38:b0:f4:64:d7:b4:e0:84:7e:53:e8:c7:f9:bd:03:4f:a3:
2e:8a:ad:17:ad:eb:ca:cb:11:77:93:dd:dc:82:da:49:3e:7e:
5e:29:b3:cf:10:ce:93:13:e2:07:04:d3:dd:95:2d:c6:16:a0:
a7:9b:ce:87:0f:97:e0:d1:0e:62:c0:33:c9:82:71:c9:58:aa:
fb:27:c6:61:ec:1e:a8:7e:11:c8:de:94:01:e5:21:59:52:7a:
e0:f0:d7:13:e1:e9:2f:c3:7f:9c:f8:74:94:a9:2e:9b:ef:60:
93:38:00:03:5f:1a:d9:a5:6d:13:12:1c:6c:05:a6:04:8b:f7:
a8:7f:f8:5f:e7:43:89:ea:30:36:1b:82:fe:6f:07:e8:b7:96:
b4:f0:c8:bc:63:39:7f:0c:4a:fd:16:86:fa:0f:98:6c:5a:5d:
b8:fc:29:39:00:af:42:ff:88:4f:50:09:dc:1e:d4:02:97:69:
fb:c0:c5:d2:a6:bb:31:43:af:88:68:b0:e4:2b:ce:7c:4d:61:
a6:95:f1:48:00:8b:a4:1a:a7:e0:6a:52:6c:ee:ae:a9:6a:b2:
92:09:53:e9:61:7b:93:6d:f4:02:8c:b4:af:84:2b:40:ca:42:
d8:ae:01:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+FaQkPpPzjsgo6niA6La6YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMzVmNGEwNjExZjcyYTg5MmMzMGQ4MjEyZDIxZjg2Y2Mx
M2E5NjcwHhcNMjYwNzIxMTYwMTIxWhcNMjYwNzIyMTYwMTIxWjAzMTEwLwYDVQQD
Eyg2YWZiNDEwOGRjYjY5OWRkNzM1Zjg1OTcyZjQzN2IwZTU2MGE5ZTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gwLDoBh2PwFPlwT6Z2TWpOyJPAj
5bpDubHXS/9Zs7+7hFJjQRKFqn7jGXKLWXiRrcths5M74hSZrfVDE/3LAX/UZ5FF
KsKyc3yQL5s44y11dkiMEL2XOmALbMotohmdLwYWzIQZLurGk0q9PiL1w4odtZNX
EecwVML6VFnQZ9y8eUJ8qtJgB6Asmu6HvmXyTJORLuOR65TTHN8ZBKxKeIohC6TZ
JRuiNeuIiQJh/qLuk+xzLF+twp0fUEXqmQ/iviqNOumW5GcG6jhgEWMMIHFspOBp
fOsCrmm6ieuoumPIYhB3ene1CICN6EoyqcVokSsfH7Yqipfvw5hqTMzERwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGr7QQjctpndc1+Fly9Dew5WCp4EMB8GA1UdIwQY
MBaAFKo19KBhH3KoksMNghLSH4bME6lnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWpYMG9HRWZjcWlTd3cyQ0V0SWZoc3dUcVdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hYTFmOTQtODgyNS00YmRkLWI0ZDgt
NmJiZmU1OGExY2EwLzEvcWpYMG9HRWZjcWlTd3cyQ0V0SWZoc3dUcVdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9hYTFmOTQtODgyNS00YmRkLWI0ZDgtNmJiZmU1OGExY2Ew
LzEvcWpYMG9HRWZjcWlTd3cyQ0V0SWZoc3dUcVdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjMsHdetl
zGnLO0xwH8wuGWx3MDiw9GTXtOCEflPox/m9A0+jLoqtF63ryssRd5Pd3ILaST5+
XimzzxDOkxPiBwTT3ZUtxhagp5vOhw+X4NEOYsAzyYJxyViq+yfGYeweqH4RyN6U
AeUhWVJ64PDXE+HpL8N/nPh0lKkum+9gkzgAA18a2aVtExIcbAWmBIv3qH/4X+dD
ieowNhuC/m8H6LeWtPDIvGM5fwxK/RaG+g+YbFpduPwpOQCvQv+IT1AJ3B7UApdp
+8DF0qa7MUOviGiw5CvOfE1hppXxSACLpBqn4GpSbO6uqWqykglT6WF7k230Aoy0
r4QrQMpC2K4BSg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:16:29 2026 by rpki-client