Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
File: qTnMFiHuMBCumOEnvSVKeDP9KCc.mft (raw, json)
Hash identifier: sTv/sNkg6NAc6kIZFv7aySc8RI9BK78roDodlAwicuM=
Subject key identifier: 1C:65:42:1A:ED:94:CB:96:5A:04:1F:2B:3E:78:F9:EC:47:62:01:E0
Authority key identifier: A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
Certificate issuer: /CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Certificate serial: 019FA1BB45EA39969EEEBD880A7089A3570E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
Manifest number: 12EC
Signing time: Mon 27 Jul 2026 04:00:32 +0000
Manifest this update: Mon 27 Jul 2026 04:00:32 +0000
Manifest next update: Tue 28 Jul 2026 04:00:32 +0000
Files and hashes: 1: 2laheRZxUjH9nDxMrHlm80h7z5Q.roa (hash: iosXrqOVeIIOelMUJUYMuylT0ggApUkiu1y8GJhCfso=)
2: NotYCgUHoY2zetpjr5kSm9qBY_k.roa (hash: oJRB8iWYyMlRGM13QOWyb/5+9ImlksyZccjTnLMZZYE=)
3: YOBJXpEHAMny3YxgbXhGFE9H1Dc.roa (hash: ubjGl6NH+8cXpUPkiXxOW4R61YalXFLiA+y8Gn0QEic=)
4: qTnMFiHuMBCumOEnvSVKeDP9KCc.crl (hash: m6KUrz85d7LsNfS5v8TNtAXHMSqRwsK7qqQlI7UbT6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:45:ea:39:96:9e:ee:bd:88:0a:70:89:a3:57:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Validity
Not Before: Jul 27 04:00:32 2026 GMT
Not After : Jul 28 04:00:32 2026 GMT
Subject: CN=1c65421aed94cb965a041f2b3e78f9ec476201e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:64:70:6e:42:fd:66:ea:20:61:17:42:9e:b9:
5f:6f:7a:6f:1b:46:53:40:56:8c:21:85:2e:a9:20:
1c:29:5e:30:39:c0:2e:8a:1e:1b:f1:92:8e:fd:ba:
0e:2f:89:59:1e:61:06:c3:9d:1d:82:50:30:81:3c:
c2:37:bb:31:25:05:98:ef:cb:22:5b:6c:f6:05:0f:
b9:53:f7:9b:43:e5:b3:ec:9b:91:d3:1f:38:cc:c3:
5a:e9:d2:63:c9:aa:65:c8:10:c8:6f:df:89:7b:8c:
55:02:e7:25:6d:cb:d6:0e:ce:12:31:5a:f3:7d:ec:
86:e7:91:3c:9e:c7:06:92:14:c8:51:f9:21:d8:b0:
40:18:75:15:95:e8:4a:09:12:51:7b:8d:92:3d:2d:
e2:fd:6f:7b:bd:42:28:0b:33:61:44:6c:7f:2d:bb:
91:d9:55:e1:46:f2:60:b0:75:74:24:06:75:97:18:
15:13:7a:7e:95:97:da:bd:69:66:51:76:95:9d:58:
d8:55:46:68:24:3c:c9:a0:21:e2:e2:14:ae:10:6b:
3b:46:4c:4b:07:e4:92:42:79:01:29:3c:a2:e6:e1:
1d:83:a7:03:cb:77:53:0b:3b:41:8a:c3:e6:27:a1:
6c:80:dd:d4:f6:78:37:26:e3:48:ba:60:2b:1d:cb:
2a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:65:42:1A:ED:94:CB:96:5A:04:1F:2B:3E:78:F9:EC:47:62:01:E0
X509v3 Authority Key Identifier:
keyid:A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:64:cd:ed:38:03:98:ea:c8:23:bb:90:b9:2b:f8:ee:85:14:
da:36:d9:33:4f:86:0d:b7:57:58:63:30:29:80:59:a5:08:fa:
a7:82:93:91:92:22:d7:d7:56:33:41:58:6d:35:e2:54:18:8b:
5a:cc:7c:57:2a:60:d7:56:0e:07:0f:c6:b5:8e:c8:e3:4d:62:
77:4d:e9:ea:e9:21:0d:7d:d1:f5:a8:b4:75:03:f3:c3:2d:76:
5a:53:55:ac:ca:b0:d2:eb:8d:c8:87:22:b9:24:62:72:69:ac:
44:7c:fa:e0:6b:90:0e:58:44:52:51:70:3f:b6:68:ab:d4:05:
a0:d3:44:3a:3c:21:e6:e0:f9:86:18:78:0f:7a:ac:14:f3:d0:
e9:e3:e9:98:79:63:ad:26:e6:c4:33:93:4f:ce:c0:5a:d4:2a:
66:36:aa:b7:b7:cb:15:39:77:5e:c1:b1:b1:72:66:bb:a9:62:
b1:14:17:b7:50:9e:52:b3:83:bf:78:23:9b:6a:b7:08:34:87:
9d:44:6b:45:92:fa:5d:e5:79:88:7f:ee:8a:9b:05:2d:9d:73:
15:19:f5:76:ed:29:9c:ec:26:ac:d5:84:0e:f3:86:be:7f:a2:
a2:1d:b3:81:61:a3:8e:17:1a:92:3a:c2:91:cd:c9:a1:9c:c6:
2e:b9:50:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:46:39 2026 by rpki-client