Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
File: qfxWMNV7GXHzolbtbZg6-tayjXU.mft (raw, json)
Hash identifier: OLBgBNu+iTsVr/Gq2oGEplO7TZHJKvBsPd2vXcLquQ8=
Subject key identifier: C5:8D:79:06:94:AD:BB:33:7C:38:E9:C4:C1:0E:93:8B:B3:73:07:87
Authority key identifier: A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
Certificate issuer: /CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Certificate serial: 019FAD1B151F19F3E058F553FFB90EEA4844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
Manifest number: 19D9
Signing time: Wed 29 Jul 2026 09:01:00 +0000
Manifest this update: Wed 29 Jul 2026 09:01:00 +0000
Manifest next update: Thu 30 Jul 2026 09:01:00 +0000
Files and hashes: 1: KIREq3B_mRi_ruYLjq_b_qaPiMU.roa (hash: XxQhGm3arKEfc0Jix82KOHGdF1oeChWiOIWCuWRPrpg=)
2: RLTq3d76GisC1LZTNSb9nCNxxt8.roa (hash: x4c1QBZG0KpP+BhZ849r1Wv8Cus10ftjdq8hO7xYuIU=)
3: qfxWMNV7GXHzolbtbZg6-tayjXU.crl (hash: zmmHPVQ5xt8BwIQFyeFEHBkxf4bwlbnSc8bOedeA9E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1b:15:1f:19:f3:e0:58:f5:53:ff:b9:0e:ea:48:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Validity
Not Before: Jul 29 09:01:00 2026 GMT
Not After : Jul 30 09:01:00 2026 GMT
Subject: CN=c58d790694adbb337c38e9c4c10e938bb3730787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0c:90:21:e6:ce:2e:40:1e:3f:11:f8:de:97:
fc:77:e0:74:83:80:2f:f6:5f:ba:2f:21:c1:3a:da:
9a:49:a4:7f:9b:d6:25:5b:b3:b6:be:18:11:d2:83:
d2:f5:0c:65:6b:ae:38:eb:62:8e:b4:45:46:ec:c9:
78:43:a6:c2:96:06:46:06:05:af:07:00:98:eb:0a:
66:1e:1c:a2:b5:13:04:12:53:51:b3:8f:a6:dd:ad:
17:ee:da:de:89:31:20:02:c5:40:13:86:08:45:af:
06:70:c0:8c:96:5f:98:9b:70:8b:1f:bb:85:ad:89:
af:46:a3:eb:46:00:d1:ea:37:d2:d0:7d:40:8b:a6:
f1:10:7a:1c:33:ef:24:f2:e8:7d:57:ef:47:ee:88:
22:42:6a:d8:ac:76:98:42:0c:6f:38:d1:83:d2:74:
73:52:80:84:30:4c:9f:9b:48:e5:7f:7e:26:14:e3:
60:1b:6e:81:ac:34:94:e5:8b:bf:63:4c:16:f7:cf:
4b:d6:fe:1a:4b:c4:86:3a:30:7b:f8:3c:3b:cf:e0:
97:13:dc:02:b9:53:98:e2:77:6f:28:78:c0:d9:e8:
99:a7:75:35:d3:7a:a6:e5:04:cd:7e:02:2a:7d:a4:
e9:ca:0b:96:01:bd:48:8b:71:71:ac:0e:27:ee:d1:
72:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8D:79:06:94:AD:BB:33:7C:38:E9:C4:C1:0E:93:8B:B3:73:07:87
X509v3 Authority Key Identifier:
keyid:A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b7:8d:24:09:c1:f1:6e:ba:8c:a8:5a:8b:57:d2:b5:49:eb:
4b:4d:20:30:a5:ff:4f:df:b8:b8:90:18:1b:3a:8c:f0:92:80:
42:64:c9:be:61:77:d2:3a:b3:6e:f5:6b:e1:27:32:fb:16:fa:
c1:c1:36:c8:ce:02:6f:a4:9a:e9:36:0e:26:11:a6:6c:97:2c:
9b:d9:1e:90:15:89:01:e4:bd:d0:2e:93:c0:f3:62:f2:d8:2f:
4d:fa:93:4a:f4:a9:02:0a:4e:f3:de:a2:61:44:b8:1a:db:97:
92:91:9c:0e:b3:c4:ab:55:30:c4:f4:0a:48:e0:b8:fd:ab:39:
58:0c:0a:20:14:ab:e8:9e:36:72:ee:64:84:b1:8b:e3:4d:26:
76:f0:63:03:d3:b4:fd:9e:03:27:24:aa:02:52:99:7d:26:17:
ac:a4:72:f7:d1:59:20:49:60:b6:e3:84:23:48:c5:c2:28:68:
19:8f:33:39:21:4c:6a:94:ba:e4:6f:9d:4b:4f:f0:8f:59:c6:
49:df:8d:6b:80:34:f4:05:0d:47:d8:0b:cb:99:79:ca:4a:4c:
02:2d:f9:12:ad:a7:a2:97:97:10:a8:3b:d4:f0:d0:e1:7c:84:
d4:3b:50:19:38:df:81:4f:bd:a1:ca:70:89:10:e2:d8:5e:7b:
76:55:54:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tGxUfGfPgWPVT/7kO6khEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZmM1NjMwZDU3YjE5NzFmM2EyNTZlZDZkOTgzYWZhZDZi
MjhkNzUwHhcNMjYwNzI5MDkwMTAwWhcNMjYwNzMwMDkwMTAwWjAzMTEwLwYDVQQD
EyhjNThkNzkwNjk0YWRiYjMzN2MzOGU5YzRjMTBlOTM4YmIzNzMwNzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6AyQIebOLkAePxH43pf8d+B0g4Av
9l+6LyHBOtqaSaR/m9YlW7O2vhgR0oPS9Qxla64462KOtEVG7Ml4Q6bClgZGBgWv
BwCY6wpmHhyitRMEElNRs4+m3a0X7treiTEgAsVAE4YIRa8GcMCMll+Ym3CLH7uF
rYmvRqPrRgDR6jfS0H1Ai6bxEHocM+8k8uh9V+9H7ogiQmrYrHaYQgxvONGD0nRz
UoCEMEyfm0jlf34mFONgG26BrDSU5Yu/Y0wW989L1v4aS8SGOjB7+Dw7z+CXE9wC
uVOY4ndvKHjA2eiZp3U103qm5QTNfgIqfaTpyguWAb1Ii3FxrA4n7tFyIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMWNeQaUrbszfDjpxMEOk4uzcweHMB8GA1UdIwQY
MBaAFKn8VjDVexlx86JW7W2YOvrWso11MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWZ4V01OVjdHWEh6b2xidGJaZzYtdGF5alhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wZjA3ODgtZjFjNC00ZWFlLWIwYzMt
YzVkNGYwYTAwOTA3LzEvcWZ4V01OVjdHWEh6b2xidGJaZzYtdGF5alhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8wZjA3ODgtZjFjNC00ZWFlLWIwYzMtYzVkNGYwYTAwOTA3
LzEvcWZ4V01OVjdHWEh6b2xidGJaZzYtdGF5alhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd7eNJAnB
8W66jKhai1fStUnrS00gMKX/T9+4uJAYGzqM8JKAQmTJvmF30jqzbvVr4Scy+xb6
wcE2yM4Cb6Sa6TYOJhGmbJcsm9kekBWJAeS90C6TwPNi8tgvTfqTSvSpAgpO896i
YUS4GtuXkpGcDrPEq1UwxPQKSOC4/as5WAwKIBSr6J42cu5khLGL400mdvBjA9O0
/Z4DJySqAlKZfSYXrKRy99FZIElgtuOEI0jFwihoGY8zOSFMapS65G+dS0/wj1nG
Sd+Na4A09AUNR9gLy5l5ykpMAi35Eq2nopeXEKg71PDQ4XyE1DtQGTjfgU+9ocpw
iRDi2F57dlVUrg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 14:18:30 2026 by rpki-client