Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
File: QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft (raw, json)
Hash identifier: IsHCQKItAVqJH6ejsH7LqMOT/rzXufzP3deP7wKJd/I=
Subject key identifier: 9F:73:2E:E6:57:E2:F0:7A:31:F3:2F:21:88:89:8F:6E:3C:5A:73:A3
Authority key identifier: 40:08:C4:86:EF:56:17:0C:41:2F:26:61:5D:0A:40:94:BC:A1:FB:2C
Certificate issuer: /CN=4008c486ef56170c412f26615d0a4094bca1fb2c
Certificate serial: 019F9EBAC6FA627C14EE58B6A8B36540337D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
Manifest number: 027C
Signing time: Sun 26 Jul 2026 14:01:08 +0000
Manifest this update: Sun 26 Jul 2026 14:01:08 +0000
Manifest next update: Mon 27 Jul 2026 14:01:08 +0000
Files and hashes: 1: LJsNdySzgVhzx0jmB1MhskD9sjw.roa (hash: vvBtgWk4yOZ39bGRHX8IHXL1uvrBI1sSum79JzJWzi4=)
2: QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl (hash: u+CN7I6p5bMSkCbyHA1wEOVTfqmRjzsHq5O6BeH2oI0=)
3: gwoZZje1uQSgGQlJSX6ThKbi_v4.roa (hash: yNNrupm/CBG1AsTLbQhGB7upwtdrSdYjgUOcddBU48E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:ba:c6:fa:62:7c:14:ee:58:b6:a8:b3:65:40:33:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4008c486ef56170c412f26615d0a4094bca1fb2c
Validity
Not Before: Jul 26 14:01:08 2026 GMT
Not After : Jul 27 14:01:08 2026 GMT
Subject: CN=9f732ee657e2f07a31f32f2188898f6e3c5a73a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d8:a5:91:25:c1:e0:73:0a:22:10:98:68:e7:
cb:d8:47:eb:ff:48:8c:c1:2e:a9:82:a4:7c:79:eb:
83:dc:04:98:98:5f:98:85:d4:19:4e:62:51:6d:4c:
2c:7b:4c:8a:60:bf:0c:5a:52:1a:81:d9:34:f6:ea:
6f:01:22:23:1d:0b:6f:31:4d:6a:2e:0f:9c:94:7f:
7e:14:52:e9:14:ba:d1:b6:ab:b0:c1:b5:79:da:94:
1f:69:50:2a:7b:6e:e9:b7:c4:b0:d7:8a:68:b5:fb:
b3:22:55:2e:ee:68:99:ca:fb:bc:b9:91:5c:22:00:
4e:75:f0:70:f3:52:b2:9d:e3:23:e1:d4:5e:12:39:
2d:51:0f:59:bb:90:aa:f3:ee:15:bb:31:6c:aa:79:
26:00:61:d0:bf:1b:e2:0e:48:bc:b9:ce:22:40:03:
82:8e:85:61:48:d4:0d:f2:1e:59:e0:5d:e4:94:83:
3d:b2:fc:3e:71:3d:9b:0a:bd:0c:24:7d:ca:0f:18:
6e:2c:20:a9:87:c7:3a:7f:d1:6f:6a:89:7d:84:62:
db:a1:37:08:fa:e3:2c:2a:02:ac:5d:5d:a2:34:81:
98:8a:41:69:82:98:5d:b2:63:9f:9b:0c:96:e1:7e:
a0:d5:9a:27:af:56:d5:ac:2d:10:c5:5a:7d:eb:2a:
39:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:73:2E:E6:57:E2:F0:7A:31:F3:2F:21:88:89:8F:6E:3C:5A:73:A3
X509v3 Authority Key Identifier:
keyid:40:08:C4:86:EF:56:17:0C:41:2F:26:61:5D:0A:40:94:BC:A1:FB:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e0:64:f4:ef:e8:f0:ac:64:4e:12:30:36:63:4e:93:af:e1:
26:c3:89:e3:de:a7:f6:12:34:d5:ad:12:65:ae:11:54:c4:30:
51:09:e6:2e:e0:c9:62:01:4a:ee:bf:68:b2:a4:9b:a6:12:80:
40:3f:92:51:a3:8b:c7:51:bb:f2:2e:84:62:97:11:cf:66:c0:
ae:99:1b:33:58:05:26:87:e9:30:0f:4b:15:64:55:77:63:07:
ad:a6:22:f0:39:e7:a4:5e:a7:3b:17:d2:90:a4:f5:06:22:ad:
61:e3:c7:1b:45:44:bf:2b:28:9e:89:fc:f9:62:8d:3c:97:70:
23:e4:4b:f7:5f:d2:5e:b8:d5:66:b8:fa:0e:49:40:20:94:c9:
f2:f3:5b:32:9f:5d:db:55:42:17:1e:c9:f3:42:1b:2c:46:97:
20:8f:59:ba:ba:92:1b:13:01:7f:74:01:22:a4:b2:9e:83:27:
b0:ca:ac:03:5d:9e:b5:0b:fa:30:22:c3:38:22:d4:be:c4:5d:
0d:51:06:ea:8e:b5:0c:8f:b5:fd:22:38:9c:a4:d6:3c:21:79:
50:cf:95:c5:4f:b1:aa:f7:8c:34:26:69:51:44:a1:b6:c8:bf:
9d:f4:95:69:49:6d:8f:26:6a:40:c9:9a:f7:f4:1b:24:27:24:
86:dc:1b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:36:32 2026 by rpki-client