Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
File: qGBDVsdQGuIQSyzO087cXb3BFjs.mft (raw, json)
Hash identifier: Aa3vcrynQ4hzxAPAQWPqPAI3/YjjIjlNVZg2QIueYT0=
Subject key identifier: 41:67:2B:45:6A:09:89:A6:84:E8:E2:30:7C:0A:4F:1E:C2:FD:90:36
Authority key identifier: A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
Certificate issuer: /CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Certificate serial: 019FCB5E2F601E996B2B5335AE82FFDDD390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
Manifest number: 0AA6
Signing time: Tue 04 Aug 2026 06:02:54 +0000
Manifest this update: Tue 04 Aug 2026 06:02:54 +0000
Manifest next update: Wed 05 Aug 2026 06:02:54 +0000
Files and hashes: 1: 7bHKsta4Dp1Yop5z_TE4GuyF-pw.roa (hash: D3+G4Ub921rB7gMLWBKfq6fOLKtP+5fJMq67UB4TEGk=)
2: E6joSh_KCsRZIeJuWns6mUSAvaQ.roa (hash: /pkjUktJxl5tikLBDBKNXbabaHGDBXecObDRlAAJ4OY=)
3: qGBDVsdQGuIQSyzO087cXb3BFjs.crl (hash: NzvWnXZs2YPPU5gpFubqsrMMGKSWzo3DLi7/Zas2DJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:5e:2f:60:1e:99:6b:2b:53:35:ae:82:ff:dd:d3:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Validity
Not Before: Aug 4 06:02:54 2026 GMT
Not After : Aug 5 06:02:54 2026 GMT
Subject: CN=41672b456a0989a684e8e2307c0a4f1ec2fd9036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:27:72:11:43:92:91:e5:00:d6:f4:4c:0f:56:
0d:55:1b:66:9a:55:95:b0:e6:59:a3:4a:3b:27:77:
16:ca:93:46:6b:a2:88:3d:9f:b7:54:a2:88:28:cc:
ac:d5:79:36:90:ae:3c:13:bd:63:ee:51:80:ea:ab:
50:e8:0e:cb:33:b3:63:3e:bc:cb:e6:97:c6:94:ec:
3a:f6:66:4d:05:1a:88:d1:56:6d:84:d3:0f:7a:a3:
60:81:ad:15:c6:a9:66:bf:de:c1:ee:67:69:ee:fc:
90:67:3c:95:aa:fa:14:84:44:f0:7d:45:d9:c0:22:
aa:38:4e:ac:71:dd:43:d7:f6:d2:5a:7e:16:11:ed:
5a:b9:90:63:cc:01:c1:7f:43:70:ff:f3:2f:06:da:
96:b2:7b:3c:d0:4b:d5:d2:75:21:90:94:fd:e2:ca:
a8:81:ef:f5:53:cf:91:8f:8f:3b:e2:9a:ff:f7:f1:
a8:10:64:20:79:be:b1:9f:64:4f:5a:80:fe:b6:d0:
c9:31:84:ce:27:dc:ba:b1:4f:3a:7e:47:12:82:61:
0d:85:1d:18:e5:70:8f:0f:f6:2d:f5:71:b3:a1:56:
cc:70:4b:c1:4b:b9:dd:d2:4d:60:29:7c:b5:75:69:
bb:b7:a9:e0:ba:a9:0d:62:48:fa:0a:22:b4:42:54:
43:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:67:2B:45:6A:09:89:A6:84:E8:E2:30:7C:0A:4F:1E:C2:FD:90:36
X509v3 Authority Key Identifier:
keyid:A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:92:e4:a9:5a:8c:8b:d0:89:0c:eb:ce:f5:59:6d:9e:a2:20:
54:ca:52:7f:d6:c8:98:7d:3f:0e:7a:31:27:3b:63:e4:22:15:
0a:a3:af:ca:85:52:65:d1:7d:ab:1f:0d:0a:9e:d3:89:e9:0f:
e2:3b:a6:53:a2:76:4f:ed:4b:f5:e9:bf:7a:6c:db:3f:1c:f4:
9d:90:27:de:a7:4f:aa:85:96:a3:60:3d:12:8f:76:66:1c:68:
ee:fb:2c:f4:3b:06:52:70:ec:9a:e6:55:59:04:47:f5:44:2a:
57:68:cb:3b:f0:7f:76:18:1e:5a:de:dc:98:f2:6a:43:d9:8e:
95:7b:b3:7b:2e:0e:52:46:2c:22:42:a7:5c:93:38:26:c9:2a:
e4:b2:ea:d6:b4:5c:d1:20:2c:53:45:37:a4:ad:c4:7f:db:00:
64:4e:7d:08:c2:fc:bc:85:a2:a3:df:cb:28:2a:c4:81:64:2e:
0b:d7:94:b1:75:ec:69:94:99:33:c1:88:d1:45:76:fb:81:ab:
9a:61:10:22:63:f5:2c:38:28:cf:36:c7:02:53:36:13:cb:11:
c0:f3:26:1a:17:cb:29:a6:c0:ab:78:c1:1c:c2:e3:48:81:1a:
f0:7f:5a:22:dd:99:f6:25:a9:08:53:36:13:84:0b:24:53:cd:
02:d1:80:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 08:52:37 2026 by rpki-client