Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/a82835-123b-4532-aba6-d60d5127825d/1/qhWXLPu3b6dqmjPaeXxnM8NItP4.mft
File: qhWXLPu3b6dqmjPaeXxnM8NItP4.mft (raw, json)
Hash identifier: 9e77x4PQCadJsvI5ZQ80oBphurpLg0Yd6I561ZSjMuw=
Subject key identifier: 59:A0:A5:AC:A3:4F:F2:BA:45:1B:56:0C:34:82:67:31:27:AA:8A:44
Authority key identifier: AA:15:97:2C:FB:B7:6F:A7:6A:9A:33:DA:79:7C:67:33:C3:48:B4:FE
Certificate issuer: /CN=aa15972cfbb76fa76a9a33da797c6733c348b4fe
Certificate serial: 01A03A4C840B10B6AA56B2EF386259DFAD7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qhWXLPu3b6dqmjPaeXxnM8NItP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a82835-123b-4532-aba6-d60d5127825d/1/qhWXLPu3b6dqmjPaeXxnM8NItP4.mft
Manifest number: 01B0
Signing time: Tue 25 Aug 2026 19:01:27 +0000
Manifest this update: Tue 25 Aug 2026 19:01:27 +0000
Manifest next update: Wed 26 Aug 2026 19:01:27 +0000
Files and hashes: 1: f-tD8eTfmg96rXItlzB5NU95HTc.asa (hash: dsO4U94ntj0LR9lV9Plk0cr+ZXf5ETUXO5D2F4wmKsI=)
2: jrpa6ffgl6ZLg25PBip0s0JQIn4.roa (hash: V9w3w4fEjx0PYusw02oT6lMuGBaV9qjr55iLXhK3FqQ=)
3: qhWXLPu3b6dqmjPaeXxnM8NItP4.crl (hash: +tusik9fRmWQ3wrCwm1dv66UH7JniCNzglrvlH84neg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a82835-123b-4532-aba6-d60d5127825d/1/qhWXLPu3b6dqmjPaeXxnM8NItP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a82835-123b-4532-aba6-d60d5127825d/1/qhWXLPu3b6dqmjPaeXxnM8NItP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qhWXLPu3b6dqmjPaeXxnM8NItP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 14:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3a:4c:84:0b:10:b6:aa:56:b2:ef:38:62:59:df:ad:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa15972cfbb76fa76a9a33da797c6733c348b4fe
Validity
Not Before: Aug 25 19:01:27 2026 GMT
Not After : Aug 26 19:01:27 2026 GMT
Subject: CN=59a0a5aca34ff2ba451b560c3482673127aa8a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2d:94:bc:af:f3:b0:e0:6c:79:13:e2:93:07:
f6:38:63:26:3f:e9:19:f7:9f:de:7f:74:10:fc:4f:
b9:d7:38:b8:f2:0d:b1:f2:61:d7:08:fd:75:2a:46:
14:0c:83:a5:50:7b:73:e8:0e:7a:8d:7c:4d:fc:88:
04:c5:4a:f1:4f:1d:22:c4:8f:a2:c9:9f:46:b3:e0:
2f:83:30:3a:60:6e:e1:ee:bf:87:3c:ac:88:dc:3e:
ac:62:f4:69:e9:ae:c2:d7:87:db:aa:95:d7:e4:ff:
b8:5f:89:be:04:ec:d3:e6:96:33:78:07:5f:89:d2:
4d:49:32:25:13:ec:cb:18:65:1e:ba:6f:c6:ea:7f:
f3:3d:7c:a0:9c:1b:1f:3e:fe:c1:76:db:e1:23:33:
8b:35:62:da:32:73:7a:02:c6:c7:f6:d3:80:ad:e0:
ec:cb:3e:cc:a5:b0:25:03:0b:9f:5b:0a:67:34:e8:
09:23:0b:3c:0a:af:fb:49:cc:a1:78:f9:2c:11:8d:
1d:e0:e7:17:67:31:83:e0:1e:09:a3:30:b2:49:da:
ed:62:11:7b:a9:48:94:bf:35:42:17:eb:a7:64:d7:
fd:23:2c:b8:42:d4:bd:a5:d7:c0:52:65:8f:44:df:
93:bc:59:0d:f0:c2:6f:95:c3:39:f8:87:fc:9a:7f:
26:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A0:A5:AC:A3:4F:F2:BA:45:1B:56:0C:34:82:67:31:27:AA:8A:44
X509v3 Authority Key Identifier:
keyid:AA:15:97:2C:FB:B7:6F:A7:6A:9A:33:DA:79:7C:67:33:C3:48:B4:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qhWXLPu3b6dqmjPaeXxnM8NItP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a82835-123b-4532-aba6-d60d5127825d/1/qhWXLPu3b6dqmjPaeXxnM8NItP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a82835-123b-4532-aba6-d60d5127825d/1/qhWXLPu3b6dqmjPaeXxnM8NItP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:61:f1:bc:7f:9d:fa:cc:80:4f:a4:b8:36:40:4b:45:b4:33:
6b:ac:69:3f:ac:55:a5:3f:fa:04:a2:56:12:cb:2b:15:50:bc:
34:bb:55:8e:b0:75:12:27:06:49:ff:c8:b8:71:64:58:ac:d4:
a2:72:51:fe:50:77:f4:06:ac:6f:d3:3c:2b:e9:57:4d:8b:1c:
99:7b:48:b2:c9:b9:d7:48:11:a3:0a:39:a0:cd:11:e4:57:6f:
c7:70:c5:44:3e:05:db:90:98:8c:ca:96:2f:bb:45:f9:5c:82:
e8:cc:90:33:72:07:3f:25:19:11:6b:d9:55:b9:30:b6:ec:ea:
32:b5:6f:bc:ac:26:ab:33:9f:50:5a:c3:29:41:ae:89:ff:fb:
42:db:94:ad:f7:c9:e9:32:7e:12:4d:fc:18:b3:18:4f:21:88:
4c:e4:27:26:87:0d:87:99:08:24:80:a2:74:d6:4f:8a:54:e9:
69:82:5c:34:5f:7f:d0:16:e8:51:b2:29:d3:b9:d2:f4:02:f4:
56:da:f8:b2:2d:df:46:dd:bb:92:ae:04:a7:75:77:4e:a2:22:
5a:4d:91:e2:b5:eb:6f:7d:b9:b7:94:70:fa:d3:56:f2:e9:41:
cd:a1:bc:22:09:0b:a6:d0:ae:82:e4:e1:6e:92:64:22:88:89:
dd:8d:9e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 23:43:32 2026 by rpki-client