Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
File: qgYKY9op1_lWF6b_u09RzMvHhlE.mft (raw, json)
Hash identifier: +aLUjO8DKo+x97h6/OpzwtwRY3n0J6wylAK+Km3jkzM=
Subject key identifier: 36:91:5A:BA:ED:69:75:E0:B1:1E:FA:12:86:F7:B7:4A:0F:2C:89:CE
Authority key identifier: AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51
Certificate issuer: /CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
Certificate serial: 019FAB639DA7C2462C6241A79489595F3B06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
Manifest number: 1645
Signing time: Wed 29 Jul 2026 01:00:59 +0000
Manifest this update: Wed 29 Jul 2026 01:00:59 +0000
Manifest next update: Thu 30 Jul 2026 01:00:59 +0000
Files and hashes: 1: 13KLyP6gZAyfsLYlKYob4QTrBOY.roa (hash: UC903c/BhGuwxFubD7WJePOBlwZE5lZusD52hX3+scI=)
2: JDIQvJOOgOU1198oLwbvPRw_rhI.roa (hash: ULh5noQt/vxcOhnB+/7fGlpNTGaGPtsJ4TS11neT8M4=)
3: qgYKY9op1_lWF6b_u09RzMvHhlE.crl (hash: 2yAcwcu5fmgCPjqbBEwkNltL+vkBm/Rnmm4TEn3Twr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:9d:a7:c2:46:2c:62:41:a7:94:89:59:5f:3b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
Validity
Not Before: Jul 29 01:00:59 2026 GMT
Not After : Jul 30 01:00:59 2026 GMT
Subject: CN=36915abaed6975e0b11efa1286f7b74a0f2c89ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:24:09:ce:8c:2a:fa:d4:3a:a3:03:c0:f0:a1:
34:de:09:be:4b:82:58:a0:ff:b9:18:a4:2a:1d:e4:
ba:ec:24:2f:30:cb:ac:6d:e2:ec:8f:61:1a:db:44:
bd:b4:e1:30:08:45:59:0c:9c:fc:7e:84:7c:d6:60:
eb:46:12:35:bb:bc:df:6c:d5:d9:36:54:49:4b:ea:
a6:df:ab:24:ac:05:05:b4:85:cb:8f:2c:d4:6d:38:
38:54:bb:a3:58:ea:d7:63:c2:75:fb:0c:1b:c3:9d:
03:c0:c5:7c:1e:83:23:65:6d:4e:cf:4d:1b:3d:00:
66:3b:d1:0f:f4:14:70:85:1f:50:6c:61:b0:c8:75:
c4:c6:65:3b:a6:1a:b2:3a:b7:0c:3b:12:d5:6f:4a:
d0:ce:78:d1:ce:13:73:05:96:0e:42:ef:fe:2f:3c:
55:80:ec:45:93:cd:0c:4d:82:7c:16:88:33:34:4f:
34:63:96:f6:60:48:fa:23:7a:46:6e:72:82:e7:df:
88:fc:28:98:37:3d:c6:1e:be:50:16:00:04:31:bf:
6f:83:ea:00:74:b7:75:3d:6c:42:37:f8:00:d0:a9:
9c:19:ac:01:34:05:f2:d2:14:b7:85:53:03:bb:51:
0b:17:47:ce:1e:c9:06:da:fc:63:42:14:e7:d8:6b:
5d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:91:5A:BA:ED:69:75:E0:B1:1E:FA:12:86:F7:B7:4A:0F:2C:89:CE
X509v3 Authority Key Identifier:
keyid:AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ef:92:0b:01:50:8f:ae:f3:1c:67:31:ec:5b:a9:40:cc:89:
e8:84:91:f8:89:cf:0b:5e:98:e7:73:38:c0:e6:ae:ec:23:40:
f0:58:87:7a:52:f4:be:b6:4c:ba:78:eb:a5:b4:d4:83:ad:61:
06:1d:55:50:20:39:f4:1e:f6:95:85:dd:ad:9f:d7:65:a8:55:
3a:fa:ec:21:2a:70:c4:49:8f:fb:31:35:6c:43:69:c3:4e:4a:
f8:6a:e3:2e:26:ec:b3:ed:e9:2f:08:e2:9a:ba:07:1e:89:38:
2d:38:59:25:2e:70:9d:89:48:34:7c:b5:ce:64:93:db:26:40:
82:1a:31:36:55:4f:26:71:b6:62:8b:60:54:3e:26:64:73:11:
f1:d6:27:d1:6c:7b:18:8e:60:67:1e:23:df:3f:25:a2:17:6b:
73:dd:36:55:78:bc:d1:5b:67:f2:9d:b7:29:4e:1d:d9:77:e6:
2c:02:b3:e2:fb:2a:e9:35:44:83:87:11:bb:db:34:9c:2e:cf:
f9:23:e5:d4:c1:e3:2f:3e:5e:da:a3:e5:ec:4d:c9:f8:c3:42:
07:5a:33:2c:9f:92:54:2b:58:58:b0:2e:dc:79:1f:a5:ba:1c:
80:b3:b7:4e:94:01:42:c9:05:3f:4b:cf:79:33:12:ff:ce:a1:
1c:8d:ea:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rY52nwkYsYkGnlIlZXzsGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMDYwYTYzZGEyOWQ3Zjk1NjE3YTZmZmJiNGY1MWNjY2Jj
Nzg2NTEwHhcNMjYwNzI5MDEwMDU5WhcNMjYwNzMwMDEwMDU5WjAzMTEwLwYDVQQD
EygzNjkxNWFiYWVkNjk3NWUwYjExZWZhMTI4NmY3Yjc0YTBmMmM4OWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyQJzowq+tQ6owPA8KE03gm+S4JY
oP+5GKQqHeS67CQvMMusbeLsj2Ea20S9tOEwCEVZDJz8foR81mDrRhI1u7zfbNXZ
NlRJS+qm36skrAUFtIXLjyzUbTg4VLujWOrXY8J1+wwbw50DwMV8HoMjZW1Oz00b
PQBmO9EP9BRwhR9QbGGwyHXExmU7phqyOrcMOxLVb0rQznjRzhNzBZYOQu/+LzxV
gOxFk80MTYJ8FogzNE80Y5b2YEj6I3pGbnKC59+I/CiYNz3GHr5QFgAEMb9vg+oA
dLd1PWxCN/gA0KmcGawBNAXy0hS3hVMDu1ELF0fOHskG2vxjQhTn2GtdEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDaRWrrtaXXgsR76Eob3t0oPLInOMB8GA1UdIwQY
MBaAFKoGCmPaKdf5Vhem/7tPUczLx4ZRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWdZS1k5b3AxX2xXRjZiX3UwOVJ6TXZIaGxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8xN2U4MmEtMGUwYy00MjZiLWExNzAt
NzVmZWE2YTcwZWI3LzEvcWdZS1k5b3AxX2xXRjZiX3UwOVJ6TXZIaGxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8xN2U4MmEtMGUwYy00MjZiLWExNzAtNzVmZWE2YTcwZWI3
LzEvcWdZS1k5b3AxX2xXRjZiX3UwOVJ6TXZIaGxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALe+SCwFQ
j67zHGcx7FupQMyJ6ISR+InPC16Y53M4wOau7CNA8FiHelL0vrZMunjrpbTUg61h
Bh1VUCA59B72lYXdrZ/XZahVOvrsISpwxEmP+zE1bENpw05K+GrjLibss+3pLwji
mroHHok4LThZJS5wnYlINHy1zmST2yZAghoxNlVPJnG2YotgVD4mZHMR8dYn0Wx7
GI5gZx4j3z8lohdrc902VXi80Vtn8p23KU4d2XfmLAKz4vsq6TVEg4cRu9s0nC7P
+SPl1MHjLz5e2qPl7E3J+MNCB1ozLJ+SVCtYWLAu3HkfpbocgLO3TpQBQskFP0vP
eTMS/86hHI3quw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:01:16 2026 by rpki-client