Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
File: qft75iSm8jMZjio089nZhCmrpGE.mft (raw, json)
Hash identifier: 9rIM9+ltCSEjzdWS+OKiB9SptxuK1rAYkU8Fh84SxIw=
Subject key identifier: 43:26:4C:0E:79:4E:D7:B0:B7:EB:E9:14:A3:A7:80:C0:18:06:C8:16
Authority key identifier: A9:FB:7B:E6:24:A6:F2:33:19:8E:2A:34:F3:D9:D9:84:29:AB:A4:61
Certificate issuer: /CN=a9fb7be624a6f233198e2a34f3d9d98429aba461
Certificate serial: 019F9EF187CED87D76BF01F9F9C78A937460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qft75iSm8jMZjio089nZhCmrpGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
Manifest number: 022D
Signing time: Sun 26 Jul 2026 15:00:56 +0000
Manifest this update: Sun 26 Jul 2026 15:00:56 +0000
Manifest next update: Mon 27 Jul 2026 15:00:56 +0000
Files and hashes: 1: DEtXANHZs-ySfJ2DbeIG2FY0feA.roa (hash: CiC1X69cIhHbTBPnPYg9pS10KzYxN0NPXzJ/qp7bwgE=)
2: qft75iSm8jMZjio089nZhCmrpGE.crl (hash: /UioNPhfAHZIm8zo7L0gcI1JE0J1+voU38zSJZw5Cxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qft75iSm8jMZjio089nZhCmrpGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:f1:87:ce:d8:7d:76:bf:01:f9:f9:c7:8a:93:74:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9fb7be624a6f233198e2a34f3d9d98429aba461
Validity
Not Before: Jul 26 15:00:56 2026 GMT
Not After : Jul 27 15:00:56 2026 GMT
Subject: CN=43264c0e794ed7b0b7ebe914a3a780c01806c816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e7:a3:4f:7a:9d:30:c6:18:e8:85:46:d9:26:
44:9b:c4:b7:34:bc:09:67:6b:ba:9f:05:35:2f:11:
d7:9a:8f:5b:fc:ff:24:86:c6:8f:2c:02:e0:1a:ef:
ad:43:0b:92:35:50:97:9a:c4:c4:e7:2c:65:81:c8:
b1:10:22:66:89:ad:10:1e:62:4d:6b:07:f5:9e:60:
e0:12:9e:95:ea:7c:1a:73:50:2f:96:30:8c:42:d1:
68:47:81:36:83:e7:0e:20:a2:7e:a5:23:a9:31:02:
c5:5e:81:f2:fc:7a:0d:55:f8:47:1d:cf:b9:df:16:
5b:2b:58:ed:a7:a2:71:57:fd:77:fd:3f:d3:f2:6f:
db:b4:94:5e:12:0e:f2:34:11:7d:96:26:91:ef:1d:
e7:f1:05:70:eb:1b:1e:e1:b9:0f:63:2a:c3:ad:9f:
0f:49:bf:fa:e7:a0:c3:ce:0f:d3:3a:83:b4:bc:1b:
31:9c:1d:14:f0:4c:18:d8:a8:5a:0a:f7:c1:aa:b8:
f1:03:cf:db:3f:96:54:29:34:17:f0:95:d4:88:5b:
1d:bf:f8:cd:85:6c:f3:2e:d2:5b:97:1f:9a:61:26:
03:a1:20:5a:68:a5:9e:b5:02:9d:0b:42:d8:81:f3:
5a:2e:69:18:21:0b:ad:e2:29:46:b3:5b:11:54:d2:
08:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:26:4C:0E:79:4E:D7:B0:B7:EB:E9:14:A3:A7:80:C0:18:06:C8:16
X509v3 Authority Key Identifier:
keyid:A9:FB:7B:E6:24:A6:F2:33:19:8E:2A:34:F3:D9:D9:84:29:AB:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qft75iSm8jMZjio089nZhCmrpGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:56:65:ff:ef:4a:ab:aa:1c:f9:00:0a:36:b5:3a:90:3d:d9:
d3:b6:1e:c8:4c:a1:d9:dd:65:ef:a1:dd:7d:a5:4a:8d:ee:16:
f3:49:4f:f1:51:ea:89:28:9c:c9:33:e9:36:48:1c:e3:1b:a4:
18:4c:e7:c9:2b:20:11:f1:72:27:b1:dd:e7:6f:85:4d:c0:73:
34:a5:ec:be:46:e6:8b:1b:70:f0:b7:eb:54:ca:dc:4e:fd:49:
74:5b:d8:c3:ca:cc:f8:9d:5d:f9:cd:c2:a4:4d:14:58:f1:05:
da:4e:f8:0e:50:91:c0:3b:87:c4:f4:ff:3d:48:c2:17:18:83:
d2:a3:4c:16:eb:b8:61:29:ca:0f:b0:e2:28:05:eb:8d:6a:36:
58:62:09:13:4e:82:52:73:f8:eb:56:3e:3d:29:81:13:42:19:
94:3e:27:2f:01:bc:0e:b2:d0:e9:ee:83:22:18:f9:e7:72:87:
b2:7d:00:3c:9e:a3:26:9d:06:be:dd:72:25:90:5e:fe:db:43:
8b:46:09:5c:7f:a7:ed:7f:c6:a6:55:32:22:a4:ba:36:07:27:
d2:28:c3:74:26:82:7e:7d:5a:61:6b:4b:05:09:91:da:d2:56:
29:06:26:86:35:53:32:ae:80:5e:2a:44:5d:8c:00:a5:4a:5a:
07:6a:34:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:08:26 2026 by rpki-client