Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
File: QtT25CKV9UA7hFtSu6lnl2HYhNg.mft (raw, json)
Hash identifier: dlJz+D0BLQ7rCRAMub93n2fBgFXaXQRXwK7NEBLaAPw=
Subject key identifier: AF:7A:48:33:A2:3E:98:B4:22:8B:28:B2:38:52:FD:7A:BF:04:70:F9
Authority key identifier: 42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
Certificate issuer: /CN=42d4f6e42295f5403b845b52bba9679761d884d8
Certificate serial: 019FA9074D61918965AA3ADB58613E53F289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
Manifest number: 0DCE
Signing time: Tue 28 Jul 2026 14:00:55 +0000
Manifest this update: Tue 28 Jul 2026 14:00:55 +0000
Manifest next update: Wed 29 Jul 2026 14:00:55 +0000
Files and hashes: 1: CZes9ucne-93ugwSp9Uj8QRuyUI.roa (hash: SmIb+DlDVr+RAK+c6/UM+iCQn51gq6QKyPu2qNkBKg8=)
2: QtT25CKV9UA7hFtSu6lnl2HYhNg.crl (hash: CmA4lrjiFTZHRf1GMfWb4l+jff27l/hIpAW/70WrJGE=)
3: mdvmy6IQAdVPllVNujJTmgLBeMk.roa (hash: 8bJ+OELFjDn0Z1urqhVSsIZSC0xHEOIJenSspzmy9DY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:4d:61:91:89:65:aa:3a:db:58:61:3e:53:f2:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42d4f6e42295f5403b845b52bba9679761d884d8
Validity
Not Before: Jul 28 14:00:55 2026 GMT
Not After : Jul 29 14:00:55 2026 GMT
Subject: CN=af7a4833a23e98b4228b28b23852fd7abf0470f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:88:73:fe:81:75:7a:2d:de:c5:f1:58:bf:ec:
20:da:6d:b6:cd:ce:fd:28:62:48:99:b9:4b:57:24:
89:0b:62:6a:8f:cf:fd:72:1e:67:9a:4f:53:b4:0b:
b9:af:3e:d1:3b:79:2d:63:a7:a2:cf:48:cc:78:2b:
59:2b:3f:f3:3e:d5:42:eb:0c:2d:57:07:07:6c:f4:
3f:a3:40:e1:d3:5c:32:0b:08:5a:66:5c:74:17:23:
38:98:a0:16:2f:d0:02:0f:ac:24:aa:47:62:a9:02:
1c:59:fa:fe:e5:f4:f0:69:bc:37:a0:0b:6a:7f:93:
20:ad:ab:7f:a7:bf:c9:8c:20:7a:a0:17:bb:22:eb:
d9:5e:fb:b2:9d:c4:10:3c:c3:41:c0:ec:35:ec:76:
9f:16:4d:21:37:49:41:18:dc:04:b6:27:d3:72:1e:
9c:f0:49:6b:40:cc:4a:01:df:40:04:13:b2:3b:bd:
55:d8:b3:32:d1:d4:c6:7d:37:83:ce:17:4f:ed:b6:
bd:5c:80:32:cf:a9:b4:af:ab:37:c1:b4:24:5c:85:
21:af:9a:86:d4:04:46:29:90:be:93:17:11:ed:8e:
00:b1:ac:10:8a:1d:f4:95:39:26:0f:45:60:63:1c:
ab:5f:28:6b:f0:91:7a:ea:1a:df:bd:11:8c:af:32:
58:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7A:48:33:A2:3E:98:B4:22:8B:28:B2:38:52:FD:7A:BF:04:70:F9
X509v3 Authority Key Identifier:
keyid:42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c5:4f:08:f7:e5:ed:9b:c0:e6:2d:8a:68:cc:8e:d1:29:04:
43:b6:53:db:83:34:d3:0d:af:37:38:65:99:02:cc:3a:6e:44:
a0:72:2d:d1:87:d8:42:09:c0:96:3c:fb:e4:45:9c:bd:17:57:
e8:18:21:0c:32:a6:72:e4:40:74:27:e3:2c:22:77:bb:f9:34:
10:f9:4d:4c:c3:9b:a5:63:c4:4b:84:78:97:da:f7:65:69:1b:
03:c0:29:e1:b3:74:89:3a:55:8b:41:55:70:7d:58:6e:43:c1:
0a:0d:4b:18:3f:43:93:1e:0a:0d:e3:6d:3a:40:29:13:3a:42:
31:9b:a6:0c:cb:90:49:ec:c3:de:0d:94:36:86:7d:15:f6:af:
5f:33:79:d6:d0:d1:31:d4:e5:51:ed:62:51:31:f8:49:dd:40:
dd:47:07:37:83:20:c0:66:96:b4:7c:50:16:f3:73:9f:6f:20:
aa:50:8c:27:1d:b4:b3:21:e5:79:51:40:b1:2b:b3:9c:c7:ac:
13:36:77:5c:50:a7:db:37:27:ec:81:bc:28:f7:c8:38:e2:25:
06:94:ea:4f:f3:cf:de:72:65:d2:5f:d2:15:8e:b4:75:23:cd:
2a:ee:c2:08:31:e1:95:4e:a8:3a:3f:4c:3f:ca:67:70:18:1f:
fd:8f:fa:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pB01hkYllqjrbWGE+U/KJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZDRmNmU0MjI5NWY1NDAzYjg0NWI1MmJiYTk2Nzk3NjFk
ODg0ZDgwHhcNMjYwNzI4MTQwMDU1WhcNMjYwNzI5MTQwMDU1WjAzMTEwLwYDVQQD
EyhhZjdhNDgzM2EyM2U5OGI0MjI4YjI4YjIzODUyZmQ3YWJmMDQ3MGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24hz/oF1ei3exfFYv+wg2m22zc79
KGJImblLVySJC2Jqj8/9ch5nmk9TtAu5rz7RO3ktY6eiz0jMeCtZKz/zPtVC6wwt
VwcHbPQ/o0Dh01wyCwhaZlx0FyM4mKAWL9ACD6wkqkdiqQIcWfr+5fTwabw3oAtq
f5Mgrat/p7/JjCB6oBe7IuvZXvuyncQQPMNBwOw17HafFk0hN0lBGNwEtifTch6c
8ElrQMxKAd9ABBOyO71V2LMy0dTGfTeDzhdP7ba9XIAyz6m0r6s3wbQkXIUhr5qG
1ARGKZC+kxcR7Y4AsawQih30lTkmD0VgYxyrXyhr8JF66hrfvRGMrzJYnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK96SDOiPpi0IososjhS/Xq/BHD5MB8GA1UdIwQY
MBaAFELU9uQilfVAO4RbUrupZ5dh2ITYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXRUMjVDS1Y5VUE3aEZ0U3U2bG5sMkhZaE5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82MDUyMmYtMzUzOS00YzZkLTk0YzEt
M2M3NmRkNDkxMDA2LzEvUXRUMjVDS1Y5VUE3aEZ0U3U2bG5sMkhZaE5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS82MDUyMmYtMzUzOS00YzZkLTk0YzEtM2M3NmRkNDkxMDA2
LzEvUXRUMjVDS1Y5VUE3aEZ0U3U2bG5sMkhZaE5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMVPCPfl
7ZvA5i2KaMyO0SkEQ7ZT24M00w2vNzhlmQLMOm5EoHIt0YfYQgnAljz75EWcvRdX
6BghDDKmcuRAdCfjLCJ3u/k0EPlNTMObpWPES4R4l9r3ZWkbA8Ap4bN0iTpVi0FV
cH1YbkPBCg1LGD9Dkx4KDeNtOkApEzpCMZumDMuQSezD3g2UNoZ9FfavXzN51tDR
MdTlUe1iUTH4Sd1A3UcHN4MgwGaWtHxQFvNzn28gqlCMJx20syHleVFAsSuznMes
EzZ3XFCn2zcn7IG8KPfIOOIlBpTqT/PP3nJl0l/SFY60dSPNKu7CCDHhlU6oOj9M
P8pncBgf/Y/6yA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:15:05 2026 by rpki-client