Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.mft
File: qp8GoFvDKfAAVRK56LgYUDtKlwI.mft (raw, json)
Hash identifier: eG4g/qkthGU3Bpbw9953hEIq4AFbA2Eeq7PomhI5Vn8=
Subject key identifier: 70:7B:23:74:5E:72:C4:AF:E5:63:18:03:E6:77:7D:38:80:47:09:C7
Authority key identifier: AA:9F:06:A0:5B:C3:29:F0:00:55:12:B9:E8:B8:18:50:3B:4A:97:02
Certificate issuer: /CN=aa9f06a05bc329f0005512b9e8b818503b4a9702
Certificate serial: 019FA0E04B319A1AE0741647E14DEC50A61F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qp8GoFvDKfAAVRK56LgYUDtKlwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.mft
Manifest number: 01E6
Signing time: Mon 27 Jul 2026 00:01:21 +0000
Manifest this update: Mon 27 Jul 2026 00:01:21 +0000
Manifest next update: Tue 28 Jul 2026 00:01:21 +0000
Files and hashes: 1: _4VYQRquhP3n7V0ZIUcFIYF3tcc.roa (hash: E+o4HFAoGMbScOOdpRNVFuEWt1wZ9tuocl+KZhVyuoo=)
2: qp8GoFvDKfAAVRK56LgYUDtKlwI.crl (hash: KsOmk7TUubdqd756W0xGdYagJqcDgLD+otHPZZmHEnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qp8GoFvDKfAAVRK56LgYUDtKlwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:4b:31:9a:1a:e0:74:16:47:e1:4d:ec:50:a6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9f06a05bc329f0005512b9e8b818503b4a9702
Validity
Not Before: Jul 27 00:01:21 2026 GMT
Not After : Jul 28 00:01:21 2026 GMT
Subject: CN=707b23745e72c4afe5631803e6777d38804709c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c5:e9:71:56:88:41:ac:03:f5:d8:56:65:31:
33:a3:04:67:35:d8:f4:78:9b:47:a3:da:a7:4d:97:
ea:00:78:d6:d6:12:70:99:25:20:81:7a:4c:e4:84:
0e:9b:90:4c:be:43:c3:3f:4d:61:94:4d:4d:3c:bb:
04:73:76:17:3b:8c:ff:d0:33:f6:38:91:63:12:cd:
57:e6:c9:24:e7:a2:99:04:b9:07:15:34:07:d5:16:
b3:f9:32:da:cb:a7:65:0f:d1:36:2d:cc:65:0a:e0:
25:4d:c6:e3:92:86:32:5f:0a:b9:08:7d:d2:cb:f2:
1b:e9:87:29:3b:6d:ca:e0:5b:91:f5:b1:f7:d2:a1:
d4:f1:98:8e:57:60:fa:66:6f:36:6c:98:5a:3e:41:
3c:bc:cc:f6:eb:45:31:fb:08:aa:05:fd:d2:94:e6:
97:60:da:d7:81:5f:c4:a4:ec:77:16:4b:60:b2:29:
93:5b:63:65:e9:9c:27:fc:4f:8c:bf:16:5e:7f:6d:
42:5d:94:f6:d5:85:ff:10:0c:79:e7:b3:25:96:8f:
94:02:a6:bb:c4:c5:3d:a8:11:fb:db:79:66:77:d1:
9b:50:64:60:f7:fa:31:e4:27:8d:e6:94:31:79:64:
76:a0:4b:48:99:a0:e7:14:c6:26:1c:91:b1:3f:6f:
8b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7B:23:74:5E:72:C4:AF:E5:63:18:03:E6:77:7D:38:80:47:09:C7
X509v3 Authority Key Identifier:
keyid:AA:9F:06:A0:5B:C3:29:F0:00:55:12:B9:E8:B8:18:50:3B:4A:97:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qp8GoFvDKfAAVRK56LgYUDtKlwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:5b:5c:2e:92:d0:9c:9c:ca:aa:62:7a:5c:20:fe:2a:6b:e4:
40:ed:36:ef:6d:ae:ec:6c:e6:9d:d9:83:ce:c9:26:a7:2b:a5:
da:81:75:4f:e7:f7:e8:81:fd:1c:2a:12:4f:9e:08:d1:9a:a0:
0f:fe:55:67:d8:12:9b:93:99:68:98:46:48:87:b0:76:e6:24:
da:38:c4:c2:65:6c:a0:c0:bd:f7:83:7a:df:5a:26:a7:3f:d3:
14:b0:ae:81:e6:10:ab:5a:b8:65:b1:ac:99:78:4d:34:38:15:
81:25:1a:c4:03:11:05:8a:9a:e1:86:be:9c:8b:1c:ab:18:1e:
8b:a0:c7:c5:3a:26:f0:4e:59:69:42:c3:60:2b:b9:3b:e2:45:
be:6e:f3:b2:36:4b:03:9b:9d:ea:5f:7e:7f:22:32:3e:5b:a9:
4e:b6:7e:91:82:f9:ea:81:27:56:a5:1c:b1:0a:24:fa:41:02:
94:2d:cb:4c:30:8a:d9:df:c5:f9:3a:60:fa:7f:9e:a4:98:90:
70:2f:85:1b:5f:2d:5b:e6:76:90:fb:cb:23:cf:69:cb:cb:c2:
a5:f2:ff:aa:33:1c:78:39:5c:29:80:ce:0d:e5:0a:8f:c7:3c:
67:15:0a:5c:fc:94:68:44:6d:bb:65:51:7b:75:95:f3:ac:18:
d0:d4:42:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:43:21 2026 by rpki-client