Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
File: qQYfL0mm16-epna60D3xzi9QJg0.mft (raw, json)
Hash identifier: DDIyf8zk65BG95OuBVwYad37EukUTOEJ5faJwlgq28M=
Subject key identifier: 90:EF:B0:04:04:66:27:A1:22:E0:A0:90:33:16:71:D4:95:B9:FF:20
Authority key identifier: A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
Certificate issuer: /CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Certificate serial: 019FAB2CA44E03CC66D56A84D8AC237D3FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
Manifest number: 0DC5
Signing time: Wed 29 Jul 2026 00:00:57 +0000
Manifest this update: Wed 29 Jul 2026 00:00:57 +0000
Manifest next update: Thu 30 Jul 2026 00:00:57 +0000
Files and hashes: 1: JZJx4L1hE5SD9mcU3dDsqxkA624.roa (hash: aZtriA7sGW64atFxZesGv0mQUg9eckBShedQMDCxoFw=)
2: qQYfL0mm16-epna60D3xzi9QJg0.crl (hash: jcaISBAMkkSppG2VIp2gZIQEp13i6sQEQLpiEiHnBpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:a4:4e:03:cc:66:d5:6a:84:d8:ac:23:7d:3f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Validity
Not Before: Jul 29 00:00:57 2026 GMT
Not After : Jul 30 00:00:57 2026 GMT
Subject: CN=90efb004046627a122e0a090331671d495b9ff20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d7:e3:46:a3:ba:6f:c6:28:a5:2e:9d:c9:a8:
97:61:9c:0a:44:5d:d7:ee:42:e5:ea:18:41:93:2c:
33:0d:65:ab:77:cb:ca:3a:43:9b:d3:fd:28:f8:c6:
b9:e3:25:95:cd:b2:a2:89:e9:0f:ec:9e:b2:e8:dd:
0f:f3:0d:5f:ba:f1:13:4b:f5:c5:be:37:dc:35:ba:
45:4a:ce:1f:48:c4:43:20:94:86:9b:0b:3d:88:76:
c2:77:16:fa:d9:11:dc:37:e9:51:55:1f:ef:6d:2e:
3b:c8:75:27:74:43:30:88:92:1c:e1:a6:b3:98:7c:
1f:51:34:5b:bd:22:71:e2:80:92:3e:ab:1f:e7:68:
5a:c8:89:fe:f4:18:fa:44:0a:9c:79:4c:20:6a:57:
7d:3e:95:76:9b:98:76:5b:7b:47:81:04:79:07:cb:
f1:c0:a2:72:a5:62:dd:8a:af:76:00:90:fa:54:1e:
35:f2:0e:4f:90:98:fe:94:6b:b8:c5:81:0a:15:c0:
e0:76:f2:c7:73:75:da:a0:ab:6f:fa:c4:c4:c9:75:
f5:f4:6e:c4:0b:79:23:12:72:11:ac:d6:50:65:20:
44:9d:5a:e6:ea:7b:64:f1:4d:94:f8:26:14:22:98:
e3:a8:da:d2:c5:c6:bd:06:cc:64:0c:fb:ea:41:09:
9c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:EF:B0:04:04:66:27:A1:22:E0:A0:90:33:16:71:D4:95:B9:FF:20
X509v3 Authority Key Identifier:
keyid:A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:4b:15:48:15:78:f1:1d:c7:fb:27:6a:88:b6:8a:59:67:72:
0b:03:64:27:31:cb:f1:bc:0c:19:a8:0a:d7:b2:b5:5f:29:c9:
db:2a:50:a8:9f:79:18:3c:91:5d:b5:5e:13:90:55:1e:39:51:
2a:e4:7b:39:96:96:57:7c:a0:91:97:5c:00:ee:34:d2:3d:f5:
c4:5d:54:a1:01:02:8f:a9:0c:00:e0:7f:2b:b5:13:4a:ec:57:
6c:9a:52:7e:2e:e7:b1:ad:46:6b:40:4d:3e:ef:88:75:ae:c1:
51:e0:84:51:2c:f9:15:e4:ff:5e:95:aa:56:6e:8f:3c:02:cb:
6e:74:83:05:f7:5f:31:90:b2:2c:d6:7a:c9:78:c7:14:93:e5:
d8:2c:ae:55:b6:99:48:14:5e:2f:e9:e7:2b:6c:68:14:91:b4:
b1:2e:1e:49:8f:af:0f:47:4b:31:f8:a1:34:dc:97:8e:51:ba:
5a:64:12:d3:48:4e:d3:89:f1:a6:57:e2:01:4a:2e:9b:ff:66:
58:a9:e7:52:68:39:a9:9c:c0:f9:c8:22:17:fb:96:96:db:c3:
84:56:2a:32:b5:c1:6c:44:80:10:ca:5f:64:19:9a:e3:b0:09:
63:5d:da:8d:0b:ea:08:3f:11:81:4b:d8:08:1a:c8:eb:1c:42:
f0:5a:e7:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rLKROA8xm1WqE2KwjfT/rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MDYxZjJmNDlhNmQ3YWY5ZWE2NzZiYWQwM2RmMWNlMmY1
MDI2MGQwHhcNMjYwNzI5MDAwMDU3WhcNMjYwNzMwMDAwMDU3WjAzMTEwLwYDVQQD
Eyg5MGVmYjAwNDA0NjYyN2ExMjJlMGEwOTAzMzE2NzFkNDk1YjlmZjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9fjRqO6b8YopS6dyaiXYZwKRF3X
7kLl6hhBkywzDWWrd8vKOkOb0/0o+Ma54yWVzbKiiekP7J6y6N0P8w1fuvETS/XF
vjfcNbpFSs4fSMRDIJSGmws9iHbCdxb62RHcN+lRVR/vbS47yHUndEMwiJIc4aaz
mHwfUTRbvSJx4oCSPqsf52hayIn+9Bj6RAqceUwgald9PpV2m5h2W3tHgQR5B8vx
wKJypWLdiq92AJD6VB418g5PkJj+lGu4xYEKFcDgdvLHc3XaoKtv+sTEyXX19G7E
C3kjEnIRrNZQZSBEnVrm6ntk8U2U+CYUIpjjqNrSxca9BsxkDPvqQQmcmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJDvsAQEZiehIuCgkDMWcdSVuf8gMB8GA1UdIwQY
MBaAFKkGHy9JptevnqZ2utA98c4vUCYNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVFZZkwwbW0xNi1lcG5hNjBEM3h6aTlRSmcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTliZTEtMWZhMi00MjUzLWJmMDEt
ZjZjMjY4NjEyZmM3LzEvcVFZZkwwbW0xNi1lcG5hNjBEM3h6aTlRSmcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9iYTliZTEtMWZhMi00MjUzLWJmMDEtZjZjMjY4NjEyZmM3
LzEvcVFZZkwwbW0xNi1lcG5hNjBEM3h6aTlRSmcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPUsVSBV4
8R3H+ydqiLaKWWdyCwNkJzHL8bwMGagK17K1XynJ2ypQqJ95GDyRXbVeE5BVHjlR
KuR7OZaWV3ygkZdcAO400j31xF1UoQECj6kMAOB/K7UTSuxXbJpSfi7nsa1Ga0BN
Pu+Ida7BUeCEUSz5FeT/XpWqVm6PPALLbnSDBfdfMZCyLNZ6yXjHFJPl2CyuVbaZ
SBReL+nnK2xoFJG0sS4eSY+vD0dLMfihNNyXjlG6WmQS00hO04nxplfiAUoum/9m
WKnnUmg5qZzA+cgiF/uWltvDhFYqMrXBbESAEMpfZBma47AJY13ajQvqCD8RgUvY
CBrI6xxC8Frn5g==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:08:31 2026 by rpki-client