Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
File: qlemjwii4wun1z1EyabiQA_Qo7E.mft (raw, json)
Hash identifier: H8+JYADN4OofGXf1/KgqfXoZR8n/c0SgbaVkJoFERGU=
Subject key identifier: 47:60:6E:FA:34:C1:D5:B5:41:8E:14:BD:7E:A8:E6:84:07:7A:23:E0
Authority key identifier: AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
Certificate issuer: /CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Certificate serial: 019FAABE34BB3F5292A7316EBE6983202974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
Manifest number: 0BAB
Signing time: Tue 28 Jul 2026 22:00:19 +0000
Manifest this update: Tue 28 Jul 2026 22:00:19 +0000
Manifest next update: Wed 29 Jul 2026 22:00:19 +0000
Files and hashes: 1: 6ixSBAJQlI9QTdVaxkNUntZMsmE.roa (hash: md0a0a+udrQg7g7OFxeWWB53q44wWyhdageagzGFqqY=)
2: qlemjwii4wun1z1EyabiQA_Qo7E.crl (hash: wjlJ8OSSgWvLOnzuqhad0bOsHMcldlbo9qu/Ji79fQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:34:bb:3f:52:92:a7:31:6e:be:69:83:20:29:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Validity
Not Before: Jul 28 22:00:19 2026 GMT
Not After : Jul 29 22:00:19 2026 GMT
Subject: CN=47606efa34c1d5b5418e14bd7ea8e684077a23e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b5:5b:3d:d4:63:fa:3f:3b:fb:d4:66:7c:aa:
9f:3b:81:6b:cc:c1:bb:54:f8:4d:59:10:d1:ea:b6:
02:0d:89:8d:07:f4:66:0f:33:8b:1b:a2:45:62:a9:
48:c4:5a:76:c6:72:ad:1c:de:59:50:60:62:4b:c0:
5e:db:9a:78:80:cd:14:8e:7f:74:de:1f:25:3b:45:
79:09:a6:a2:0f:ae:99:16:4c:43:cf:c0:d1:cc:d6:
4d:23:c8:45:59:19:a7:20:f3:d8:cc:77:48:79:1e:
d0:4b:49:b2:11:b6:af:0a:c6:53:9a:99:5b:3c:5e:
be:25:a7:30:1a:3c:c4:81:31:1c:8f:05:d1:76:1d:
09:80:3e:03:89:98:47:37:07:6f:1e:90:dc:f0:f5:
fd:62:d4:a3:7e:4f:59:de:b2:00:39:88:23:97:bd:
d7:5f:f9:f0:17:60:67:e5:b5:fd:e5:45:67:4e:24:
92:3e:1f:c6:8b:49:4a:e2:71:34:52:02:95:3e:20:
70:8f:50:87:37:d0:e8:86:b6:56:2c:cc:f1:ea:6d:
96:cf:43:d8:d0:af:32:b4:2b:5b:b2:9a:1a:82:9f:
11:d9:9d:12:9e:9a:29:06:b0:13:56:03:15:86:dd:
97:17:43:93:f5:c3:88:b5:2a:d7:de:20:4c:c4:42:
d9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:60:6E:FA:34:C1:D5:B5:41:8E:14:BD:7E:A8:E6:84:07:7A:23:E0
X509v3 Authority Key Identifier:
keyid:AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ea:be:bb:51:41:78:4f:8c:9a:50:e1:ba:6f:1e:4b:db:52:
57:58:22:7e:5b:3c:9d:60:05:ce:cd:77:35:b0:c2:17:e8:c6:
78:e0:9f:35:af:d2:d3:2f:b0:b1:23:1e:08:cd:95:e6:af:2b:
da:6b:5a:42:79:5b:5c:61:87:1f:6e:47:4f:a0:a8:19:c2:90:
83:fb:c5:59:2b:9b:ec:67:26:35:d1:dc:d8:3a:7d:cc:13:2a:
0d:e1:2d:79:dd:99:c6:45:17:1e:5b:ec:1e:9f:59:94:16:15:
d3:4b:cd:72:64:2c:27:ed:55:d1:a2:51:b6:41:ea:cb:e8:8a:
cb:2e:a5:6f:55:9a:a3:3e:9b:bb:d4:c4:d5:19:77:99:6b:38:
e8:82:71:bc:d3:68:f6:c8:6f:98:59:47:ca:4d:6b:d3:ce:c6:
92:c3:af:e4:d3:04:cd:a4:4d:bb:c3:11:47:20:b9:83:a4:49:
1e:93:ff:06:38:91:a0:f8:93:04:aa:1b:64:50:19:c7:c1:ae:
5a:45:89:89:96:5d:dd:34:0a:d1:49:ef:ca:49:37:c2:3e:1e:
f1:a9:f9:ae:a9:d9:e9:6e:b7:a1:99:03:a8:7e:91:34:2b:fc:
af:b2:5b:86:67:d6:79:c7:cd:6b:83:60:1a:3f:86:ba:81:4b:
10:5d:ae:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:54:04 2026 by rpki-client