Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
File: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft (raw, json)
Hash identifier: HzIEVsi9s+ciNkMwvj67zn+nhOLMMdiZVkgk9pWB+R8=
Subject key identifier: EE:80:DB:F4:F0:19:BC:68:DF:B7:45:CD:CA:D4:34:2F:D9:DC:98:9B
Authority key identifier: A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
Certificate issuer: /CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Certificate serial: 019FAC08FA74A82AB91C1D3741B07F60E621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
Manifest number: 1570
Signing time: Wed 29 Jul 2026 04:01:37 +0000
Manifest this update: Wed 29 Jul 2026 04:01:37 +0000
Manifest next update: Thu 30 Jul 2026 04:01:37 +0000
Files and hashes: 1: 3FimOljJosTayAtjbZa6x1Z1MXs.roa (hash: MeEGr+necOtlrJoGJSW1/wG4DV94jp5QrV4hS1BQHCg=)
2: QP9nM5PMiejN9yhohpS-UJYwohQ.roa (hash: YoeG5CqmyBDeclyGv/x1kOlmle614YEmox8sx9pd0fU=)
3: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl (hash: 6oQLAwHXzgrmraILu/R+6CSkv/tvdFsoTeR7WbbF2Pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 04:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:fa:74:a8:2a:b9:1c:1d:37:41:b0:7f:60:e6:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Validity
Not Before: Jul 29 04:01:37 2026 GMT
Not After : Jul 30 04:01:37 2026 GMT
Subject: CN=ee80dbf4f019bc68dfb745cdcad4342fd9dc989b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e4:a1:e7:17:54:51:7f:99:7f:8b:dc:39:8e:
bd:c5:2f:e1:14:d6:ca:46:f8:cd:a0:cb:79:f9:a6:
f7:f8:f1:db:f0:d5:67:8a:14:33:a0:c7:ee:97:eb:
3d:d0:ce:d9:65:b6:92:76:f5:83:d8:94:85:0a:de:
5e:dd:a4:a0:1f:1c:12:ad:c8:6a:8e:a6:52:0c:df:
3d:99:03:b4:35:31:9f:94:1d:7c:dc:af:a2:ab:a0:
df:3c:19:11:34:45:8c:47:f7:b4:13:ae:38:22:c4:
22:ab:db:9c:df:48:24:7c:83:19:84:0f:9d:79:d9:
88:0c:be:d9:39:2a:3f:1c:03:7c:0c:d2:ce:3a:c3:
f7:78:93:d5:b6:17:b3:e7:34:f9:6b:c6:42:ac:ee:
f0:64:25:73:27:00:1d:80:32:c5:41:e8:d6:21:c2:
68:8c:53:cb:0d:18:78:a8:f8:64:bf:c2:53:50:7d:
21:8e:67:5b:d3:ee:1b:66:20:c1:10:ae:2c:9d:82:
49:aa:84:47:c2:e4:d4:04:c2:74:ad:14:5f:6f:14:
a0:32:8a:14:5e:c0:42:76:9b:64:3d:93:d5:c1:c6:
de:4a:fc:ab:c2:e8:12:70:f8:98:fd:28:20:cd:60:
7a:fb:a5:a8:04:f9:7e:9b:25:19:49:12:52:9c:09:
a5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:80:DB:F4:F0:19:BC:68:DF:B7:45:CD:CA:D4:34:2F:D9:DC:98:9B
X509v3 Authority Key Identifier:
keyid:A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:1b:7b:0b:19:c1:76:0c:6c:56:e3:bc:c4:e1:06:15:8c:a4:
ee:44:8c:0a:6a:49:f6:e2:41:b5:0c:d9:be:29:50:9e:3d:d5:
5e:0e:40:a4:9f:47:59:35:1e:96:80:33:8f:a0:a0:ce:0a:81:
5d:6a:e4:3f:b6:50:65:8b:fa:62:b6:19:6c:ea:07:f1:43:97:
7e:0c:73:7d:59:8c:d0:f3:07:89:cc:39:72:c1:4b:7d:2d:12:
77:c2:0b:14:3c:10:09:9f:eb:ad:72:c1:da:f5:ff:37:3e:8a:
d6:93:71:ac:6c:41:ed:65:08:81:78:46:87:60:eb:fc:86:a1:
a0:18:af:58:cb:64:30:b8:09:82:8d:ca:20:2a:d5:30:d7:42:
b3:c4:e4:6d:9d:b8:6e:86:f1:1f:cc:c1:88:bb:bc:a4:7d:ed:
94:d9:ee:f1:ea:90:02:db:4b:a2:c2:3f:e7:66:a7:e5:44:f3:
cd:57:5c:48:4b:cb:be:a4:0f:df:54:9c:b6:58:90:dc:2b:be:
f2:15:29:4f:31:8e:0a:52:23:e6:4d:c7:82:f4:dd:ad:89:f2:
d5:8f:02:2e:cc:46:ac:05:20:41:54:7c:94:61:98:59:53:ee:
4f:cf:04:83:63:69:31:b8:10:3c:33:cc:13:a0:99:c8:41:9c:
0e:df:e2:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sCPp0qCq5HB03QbB/YOYhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZGZmMDFmNTZlMzQxOWQwMjdiZTc1OTFjZWVmNjI4NTFj
ZTBmNmIwHhcNMjYwNzI5MDQwMTM3WhcNMjYwNzMwMDQwMTM3WjAzMTEwLwYDVQQD
EyhlZTgwZGJmNGYwMTliYzY4ZGZiNzQ1Y2RjYWQ0MzQyZmQ5ZGM5ODliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OSh5xdUUX+Zf4vcOY69xS/hFNbK
RvjNoMt5+ab3+PHb8NVnihQzoMful+s90M7ZZbaSdvWD2JSFCt5e3aSgHxwSrchq
jqZSDN89mQO0NTGflB183K+iq6DfPBkRNEWMR/e0E644IsQiq9uc30gkfIMZhA+d
edmIDL7ZOSo/HAN8DNLOOsP3eJPVthez5zT5a8ZCrO7wZCVzJwAdgDLFQejWIcJo
jFPLDRh4qPhkv8JTUH0hjmdb0+4bZiDBEK4snYJJqoRHwuTUBMJ0rRRfbxSgMooU
XsBCdptkPZPVwcbeSvyrwugScPiY/SggzWB6+6WoBPl+myUZSRJSnAmlAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO6A2/TwGbxo37dFzcrUNC/Z3JibMB8GA1UdIwQY
MBaAFKjf8B9W40GdAnvnWRzu9ihRzg9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU5fd0gxYmpRWjBDZS1kWkhPNzJLRkhPRDJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS80NzMzNjYtNzAyZC00NzNmLWJmYmUt
ODgyYzQ0OGUyZWY2LzEvcU5fd0gxYmpRWjBDZS1kWkhPNzJLRkhPRDJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS80NzMzNjYtNzAyZC00NzNmLWJmYmUtODgyYzQ0OGUyZWY2
LzEvcU5fd0gxYmpRWjBDZS1kWkhPNzJLRkhPRDJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYht7CxnB
dgxsVuO8xOEGFYyk7kSMCmpJ9uJBtQzZvilQnj3VXg5ApJ9HWTUeloAzj6CgzgqB
XWrkP7ZQZYv6YrYZbOoH8UOXfgxzfVmM0PMHicw5csFLfS0Sd8ILFDwQCZ/rrXLB
2vX/Nz6K1pNxrGxB7WUIgXhGh2Dr/IahoBivWMtkMLgJgo3KICrVMNdCs8TkbZ24
bobxH8zBiLu8pH3tlNnu8eqQAttLosI/52an5UTzzVdcSEvLvqQP31SctliQ3Cu+
8hUpTzGOClIj5k3HgvTdrYny1Y8CLsxGrAUgQVR8lGGYWVPuT88Eg2NpMbgQPDPM
E6CZyEGcDt/itw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:01:02 2026 by rpki-client