Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
File: qs5nJaCg3dFoBICoN4XSzVe_arA.mft (raw, json)
Hash identifier: S2leg1p4uXjOuV3ZD7ZMk23ORtrZnwXqE34Y5oNJE34=
Subject key identifier: 37:37:42:D4:13:2E:E5:92:32:21:AD:EB:80:7C:A6:7A:2C:40:06:86
Authority key identifier: AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0
Certificate issuer: /CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0
Certificate serial: 019F84C3ECC0F7C2996C25794B0282D198C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
Manifest number: 0DFF
Signing time: Tue 21 Jul 2026 13:01:00 +0000
Manifest this update: Tue 21 Jul 2026 13:01:00 +0000
Manifest next update: Wed 22 Jul 2026 13:01:00 +0000
Files and hashes: 1: 0UTNnPCaSBRChjd-4paFJAa8mvY.roa (hash: kU7KErkztorzfF4UTYyKtoYDyMlrOJjwkRRJcXS9JCM=)
2: 3XFseKD5P1HWKROwFzTd36OyHbE.roa (hash: BIeVIxGIOa2ePH8XQOOYNOlUDe/lxUqOSdtUmx3XDZE=)
3: 9kV8fUl_KriLSLVtxrkRq6q3Ix0.roa (hash: uExdYX2548cfGCpmCeNErn/kV2y3p/D6bqfR/PH26F0=)
4: eBB5lvjqAnBclLcWqTOlF_8lA7s.roa (hash: AOzQfZTfdGMYeAqIt8a663Hmw+/xidNofnCq2r4ivkQ=)
5: qs5nJaCg3dFoBICoN4XSzVe_arA.crl (hash: dIj5Ul/ogD0Iv7pS+KDzOmLWfjJsToqAFrSb+fLnfHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:c3:ec:c0:f7:c2:99:6c:25:79:4b:02:82:d1:98:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0
Validity
Not Before: Jul 21 13:01:00 2026 GMT
Not After : Jul 22 13:01:00 2026 GMT
Subject: CN=373742d4132ee5923221adeb807ca67a2c400686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:50:21:b0:ae:b3:6c:90:1d:fe:a0:ec:98:4e:
bf:71:3d:2d:49:b6:bb:bd:b1:14:8d:20:6e:b6:df:
3f:e4:37:68:01:89:0f:39:25:b3:c9:e9:79:12:09:
28:67:50:2b:58:33:2b:f3:be:f7:b9:1e:22:74:e1:
68:5a:d5:33:91:e5:0d:11:b4:68:76:d5:78:46:48:
01:d3:32:58:c8:98:63:d4:d4:d3:21:3e:20:28:71:
84:51:97:29:0d:a4:be:46:5b:f6:aa:b6:19:88:f1:
51:18:35:14:0d:31:34:6f:44:8e:c1:a4:70:bd:5a:
a9:91:2a:86:7e:01:8d:ba:b6:71:42:40:79:3e:ac:
1f:03:05:97:63:fb:6a:08:20:22:14:32:4c:5b:92:
31:61:4d:71:d1:64:c2:3a:05:f2:58:ae:93:25:83:
29:eb:1a:c0:f1:fc:36:91:09:59:1d:7e:ac:a8:b6:
0c:f7:12:60:90:33:fe:7f:0c:c1:22:98:04:d6:66:
87:7d:3c:ce:c3:d2:2c:94:5f:d0:6e:6f:54:d6:d4:
0b:45:14:da:c1:9a:6a:c4:cc:48:1d:7d:11:51:04:
1e:96:ed:a8:d0:69:71:3c:10:1c:b1:54:1c:d9:c9:
75:1b:39:65:86:19:6e:62:5d:6a:cf:12:ba:5a:84:
91:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:37:42:D4:13:2E:E5:92:32:21:AD:EB:80:7C:A6:7A:2C:40:06:86
X509v3 Authority Key Identifier:
keyid:AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:f6:93:7c:7a:7d:a9:40:26:f1:7b:c0:b0:3f:9b:e5:e9:97:
11:33:4f:6d:09:23:8b:09:c0:91:b3:d0:65:15:ac:df:22:0a:
ca:c8:94:c9:40:ce:ed:ef:e0:e4:14:e3:44:52:ef:a9:3f:f6:
42:d9:5c:9a:7f:82:34:8d:f9:5d:14:ed:5d:c4:29:29:b9:a5:
24:01:9d:5e:ae:ec:ec:76:9c:b8:e0:5e:33:cc:98:86:3b:65:
3d:13:16:b3:ac:e4:73:5e:31:bc:0a:dd:50:71:50:51:d5:b6:
90:2b:57:61:3d:b7:d3:b2:42:54:91:c7:8d:f2:d4:27:b7:2c:
ac:c7:e8:21:12:99:42:5b:3b:9a:4f:77:aa:0e:0c:90:f1:2c:
be:0f:14:aa:4d:15:8b:9e:6f:82:93:2d:cb:9f:70:2e:d5:0c:
36:22:99:75:c7:f2:19:11:77:9d:fb:54:40:b0:22:cd:78:e7:
07:c6:5f:65:43:5e:f1:5d:56:16:1a:01:ea:3d:1f:e1:53:cc:
44:a4:3a:7e:b1:16:eb:84:44:f2:5d:b4:1b:1a:1e:4e:08:35:
20:69:7a:d4:5f:20:c7:14:f4:ee:63:75:99:26:4d:73:eb:fc:
9c:de:bd:99:4d:91:e8:2d:aa:3a:f4:21:84:22:20:94:88:ca:
8b:1b:9e:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ew+zA98KZbCV5SwKC0ZjAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhY2U2NzI1YTBhMGRkZDE2ODA0ODBhODM3ODVkMmNkNTdi
ZjZhYjAwHhcNMjYwNzIxMTMwMTAwWhcNMjYwNzIyMTMwMTAwWjAzMTEwLwYDVQQD
EygzNzM3NDJkNDEzMmVlNTkyMzIyMWFkZWI4MDdjYTY3YTJjNDAwNjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41AhsK6zbJAd/qDsmE6/cT0tSba7
vbEUjSButt8/5DdoAYkPOSWzyel5EgkoZ1ArWDMr8773uR4idOFoWtUzkeUNEbRo
dtV4RkgB0zJYyJhj1NTTIT4gKHGEUZcpDaS+Rlv2qrYZiPFRGDUUDTE0b0SOwaRw
vVqpkSqGfgGNurZxQkB5PqwfAwWXY/tqCCAiFDJMW5IxYU1x0WTCOgXyWK6TJYMp
6xrA8fw2kQlZHX6sqLYM9xJgkDP+fwzBIpgE1maHfTzOw9IslF/Qbm9U1tQLRRTa
wZpqxMxIHX0RUQQelu2o0GlxPBAcsVQc2cl1GzllhhluYl1qzxK6WoSRGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDc3QtQTLuWSMiGt64B8pnosQAaGMB8GA1UdIwQY
MBaAFKrOZyWgoN3RaASAqDeF0s1Xv2qwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXM1bkphQ2czZEZvQklDb040WFN6VmVfYXJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84MTEyZmYtYjIxNi00MDZmLThmNTkt
NzJhMDgyY2RiMTgyLzEvcXM1bkphQ2czZEZvQklDb040WFN6VmVfYXJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84MTEyZmYtYjIxNi00MDZmLThmNTktNzJhMDgyY2RiMTgy
LzEvcXM1bkphQ2czZEZvQklDb040WFN6VmVfYXJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw/aTfHp9
qUAm8XvAsD+b5emXETNPbQkjiwnAkbPQZRWs3yIKysiUyUDO7e/g5BTjRFLvqT/2
Qtlcmn+CNI35XRTtXcQpKbmlJAGdXq7s7HacuOBeM8yYhjtlPRMWs6zkc14xvArd
UHFQUdW2kCtXYT2307JCVJHHjfLUJ7csrMfoIRKZQls7mk93qg4MkPEsvg8Uqk0V
i55vgpMty59wLtUMNiKZdcfyGRF3nftUQLAizXjnB8ZfZUNe8V1WFhoB6j0f4VPM
RKQ6frEW64RE8l20GxoeTgg1IGl61F8gxxT07mN1mSZNc+v8nN69mU2R6C2qOvQh
hCIglIjKixuecg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:11:16 2026 by rpki-client