Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
File: qQYfL0mm16-epna60D3xzi9QJg0.mft (raw, json)
Hash identifier: alSZOpKufs47US8JNKyiKe0q4JrEw9nS7LUetCmZJW8=
Subject key identifier: 52:C5:55:46:FA:E3:72:74:70:83:73:7F:5D:87:1A:21:F1:69:B7:CB
Authority key identifier: A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
Certificate issuer: /CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Certificate serial: 019FAD1B2ECA239ABDD108BA339DB64870C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
Manifest number: 0DC6
Signing time: Wed 29 Jul 2026 09:01:07 +0000
Manifest this update: Wed 29 Jul 2026 09:01:07 +0000
Manifest next update: Thu 30 Jul 2026 09:01:07 +0000
Files and hashes: 1: JZJx4L1hE5SD9mcU3dDsqxkA624.roa (hash: aZtriA7sGW64atFxZesGv0mQUg9eckBShedQMDCxoFw=)
2: qQYfL0mm16-epna60D3xzi9QJg0.crl (hash: k6DjwpGNimdU+Ds0tkjPZ9ArKHtg6RDOISpy3F+fLls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1b:2e:ca:23:9a:bd:d1:08:ba:33:9d:b6:48:70:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Validity
Not Before: Jul 29 09:01:07 2026 GMT
Not After : Jul 30 09:01:07 2026 GMT
Subject: CN=52c55546fae372747083737f5d871a21f169b7cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ea:be:48:60:e5:6d:28:1e:b0:e8:21:30:71:
32:b8:5a:b2:b7:4d:af:f4:11:40:56:57:62:52:8a:
da:20:e3:0b:03:48:3b:a3:33:37:92:2c:93:4f:fc:
57:1d:f8:24:7d:5b:5e:c1:a0:cb:01:37:a5:29:cd:
6a:78:70:ca:08:a6:8d:6c:0b:2e:2a:e1:ad:d8:9a:
db:d5:ca:9a:51:cc:86:48:9e:9c:2e:de:cb:84:53:
90:e4:dd:f8:13:33:bf:b2:5c:6b:b7:54:39:94:21:
58:2d:61:1b:db:67:42:11:b1:7d:6a:52:cc:78:56:
46:31:3e:5a:01:4c:ba:33:8f:f8:2a:56:ad:c7:dd:
bc:ef:68:95:69:94:38:e3:9b:82:65:cb:ef:d9:5d:
83:be:2b:a9:8d:e5:9f:e5:b3:da:70:a6:2e:bd:c2:
96:13:38:db:bc:0f:7d:1e:fc:0f:aa:3f:e2:e1:49:
2c:75:4c:92:b2:e4:1d:9a:ae:c9:f6:3e:bd:61:05:
f1:04:24:d4:c8:93:ce:81:16:c2:83:8e:90:97:b7:
14:e3:67:05:e1:86:c6:0a:22:fe:5c:d2:4a:87:46:
4a:7b:b8:e3:80:4d:4e:a4:7c:92:33:9b:86:52:7a:
58:00:87:e1:9f:a5:6a:82:a4:30:33:67:01:b3:98:
33:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C5:55:46:FA:E3:72:74:70:83:73:7F:5D:87:1A:21:F1:69:B7:CB
X509v3 Authority Key Identifier:
keyid:A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:03:a6:60:de:03:ed:6a:12:96:43:31:a0:9d:e1:ae:b0:f0:
b3:a8:7b:e2:c6:0f:18:9c:b7:93:48:1a:5d:e3:a4:17:7f:b1:
c9:1f:d5:bd:6e:c6:7e:fa:e0:0a:12:28:5c:55:71:8d:33:e3:
9c:8e:ea:d2:67:f3:1d:b3:bb:78:7e:c2:85:95:8c:14:04:d3:
21:a1:df:30:a3:7b:39:8e:68:92:72:af:0c:c5:16:81:58:c0:
94:18:85:29:87:49:35:61:16:ed:87:e6:51:ad:15:88:af:ab:
2b:cd:b3:e2:44:ea:d3:1a:26:d4:73:3d:38:09:00:69:9a:94:
cc:ca:29:91:e4:7f:ea:25:98:39:f0:b8:ba:cd:c6:d6:5f:f8:
37:79:a3:01:db:47:61:65:71:e2:0f:1c:80:af:e1:77:12:b5:
02:d7:04:a7:ac:25:3f:dd:7f:ec:5f:83:7c:6b:58:be:78:65:
52:ab:a3:52:45:95:65:a3:94:de:bc:69:65:7e:f3:6f:3c:be:
e2:3e:98:9f:91:3f:c2:74:47:8d:f4:e4:33:80:5e:51:d4:f6:
04:f3:ab:b6:23:04:fd:56:64:e1:06:2f:d3:6f:ad:85:1f:49:
b9:fb:1e:38:0d:61:27:e7:fd:20:7d:57:46:ae:a6:ae:78:fd:
43:5c:57:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:28:57 2026 by rpki-client