Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
File: qYB_bVDZfZcdzy4uUGTpuQets-w.mft (raw, json)
Hash identifier: /cd+oEcrtJ3jxpGAAdSCLf4cNZE7/vuQUlSM0Hbxz9M=
Subject key identifier: 7D:01:F5:DE:FD:AC:51:EE:18:F0:ED:2E:3E:73:06:2E:9D:0B:FC:C3
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial: 019FAC76F5EAE13B39418D7DA44F68F2BA08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
Manifest number: 1A01
Signing time: Wed 29 Jul 2026 06:01:45 +0000
Manifest this update: Wed 29 Jul 2026 06:01:45 +0000
Manifest next update: Thu 30 Jul 2026 06:01:45 +0000
Files and hashes: 1: MUooZ1Ov9expLMpavng4DbjsbpE.roa (hash: eswDXNZ/AXtbqsm+yzDr7T0oqWysTnskZK6VmBCDemc=)
2: qYB_bVDZfZcdzy4uUGTpuQets-w.crl (hash: p0iC5uVEjJyXbuhgBKsL1p4a1hAJNP3BKVJw/4H/HEQ=)
3: rX1Ss2CK_g4_GFrLEnzxw6wGXIU.roa (hash: cw+3g+tlflCYhhvX9gDsDKPmWsCROnLpk0xinhWv2AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:f5:ea:e1:3b:39:41:8d:7d:a4:4f:68:f2:ba:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Validity
Not Before: Jul 29 06:01:45 2026 GMT
Not After : Jul 30 06:01:45 2026 GMT
Subject: CN=7d01f5defdac51ee18f0ed2e3e73062e9d0bfcc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:df:e7:a7:e6:3d:84:fc:a7:77:46:23:74:a4:
a6:e9:c7:c8:ec:f9:be:60:8e:d0:b6:3c:69:27:f7:
31:f4:3c:86:65:f8:6e:bb:b2:6b:65:d7:f7:0f:6b:
98:4c:d0:06:20:9b:3e:61:a6:42:c5:54:cb:5b:b3:
f3:90:38:06:d4:a0:9c:10:41:42:02:4a:44:04:f5:
e7:4b:ee:d2:33:38:1b:0d:2c:51:8f:77:1a:23:86:
23:4b:70:0a:92:2b:0c:fc:03:8f:f5:0a:d7:5a:41:
8e:44:44:93:8c:3b:65:11:a2:c7:85:72:6c:ac:e3:
46:5e:98:1d:f2:fa:61:0b:d3:46:b8:b0:85:9e:2d:
e8:a7:b2:44:30:1b:2a:1b:0a:e2:3b:73:8b:ce:95:
fe:11:e0:95:20:d4:5b:ac:38:38:61:16:c8:e1:4f:
a1:99:76:d4:88:a9:5a:51:b1:b6:cb:99:93:9e:2f:
9c:98:31:09:66:29:23:de:e2:9f:82:3f:3b:59:96:
7e:c7:1c:76:9d:91:80:86:1e:49:46:e3:d8:b9:79:
70:45:e7:d6:e1:5b:14:d0:c7:42:01:43:48:31:90:
98:62:5c:80:4a:a6:76:c5:14:8d:b7:f0:5e:0b:00:
41:1e:a5:44:f8:2e:d1:51:d6:88:13:57:f9:0f:1c:
36:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:01:F5:DE:FD:AC:51:EE:18:F0:ED:2E:3E:73:06:2E:9D:0B:FC:C3
X509v3 Authority Key Identifier:
keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:da:a1:36:b0:15:cf:57:fb:c9:f8:3a:15:3e:58:3d:82:fa:
2d:ef:f2:98:67:8b:ab:55:f6:76:16:db:d6:5a:70:6d:3e:3e:
3e:76:19:ca:d1:73:4a:22:cb:3e:93:e5:ac:a0:6c:30:a1:f4:
ee:ff:d5:5c:2f:a2:57:57:35:6d:a2:7e:32:f8:b8:bd:f6:b6:
87:d0:f7:6d:3f:fc:ee:bf:ee:2f:91:09:b5:3c:8f:2c:a3:e6:
70:fc:67:30:92:60:8b:79:d6:3e:8d:d9:40:2e:58:22:9c:aa:
3f:3b:00:07:2e:96:a1:9a:bb:91:c0:77:94:49:16:3b:4a:ce:
cd:50:fe:65:09:69:98:33:dd:c3:80:c8:17:95:75:41:5f:18:
6b:74:f3:61:f0:ec:57:be:74:08:41:15:48:b1:04:4f:bb:22:
ea:90:ae:97:f9:b4:d8:68:50:90:b2:de:51:00:38:93:5b:21:
14:cf:d0:5d:80:dd:95:8e:79:07:ab:3d:d7:2a:13:81:1f:ed:
d0:f3:5c:90:7e:03:41:16:40:76:cd:06:84:61:70:7d:9e:7e:
aa:49:8b:ef:d0:c6:bf:80:22:38:01:3d:70:c3:30:48:8a:88:
8d:18:08:0c:1c:d1:e6:fc:dd:83:18:11:68:5a:f0:73:1f:d7:
90:d0:5e:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdvXq4Ts5QY19pE9o8roIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ODA3ZjZkNTBkOTdkOTcxZGNmMmUyZTUwNjRlOWI5MDdh
ZGIzZWMwHhcNMjYwNzI5MDYwMTQ1WhcNMjYwNzMwMDYwMTQ1WjAzMTEwLwYDVQQD
Eyg3ZDAxZjVkZWZkYWM1MWVlMThmMGVkMmUzZTczMDYyZTlkMGJmY2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAht/np+Y9hPynd0YjdKSm6cfI7Pm+
YI7QtjxpJ/cx9DyGZfhuu7JrZdf3D2uYTNAGIJs+YaZCxVTLW7PzkDgG1KCcEEFC
AkpEBPXnS+7SMzgbDSxRj3caI4YjS3AKkisM/AOP9QrXWkGORESTjDtlEaLHhXJs
rONGXpgd8vphC9NGuLCFni3op7JEMBsqGwriO3OLzpX+EeCVINRbrDg4YRbI4U+h
mXbUiKlaUbG2y5mTni+cmDEJZikj3uKfgj87WZZ+xxx2nZGAhh5JRuPYuXlwRefW
4VsU0MdCAUNIMZCYYlyASqZ2xRSNt/BeCwBBHqVE+C7RUdaIE1f5Dxw2QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0B9d79rFHuGPDtLj5zBi6dC/zDMB8GA1UdIwQY
MBaAFKmAf21Q2X2XHc8uLlBk6bkHrbPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jYTlkYmUtMDA5NS00MGYzLWI5MzIt
MGQ4ZjdkZDhjY2U2LzEvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9jYTlkYmUtMDA5NS00MGYzLWI5MzItMGQ4ZjdkZDhjY2U2
LzEvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdtqhNrAV
z1f7yfg6FT5YPYL6Le/ymGeLq1X2dhbb1lpwbT4+PnYZytFzSiLLPpPlrKBsMKH0
7v/VXC+iV1c1baJ+Mvi4vfa2h9D3bT/87r/uL5EJtTyPLKPmcPxnMJJgi3nWPo3Z
QC5YIpyqPzsABy6WoZq7kcB3lEkWO0rOzVD+ZQlpmDPdw4DIF5V1QV8Ya3TzYfDs
V750CEEVSLEET7si6pCul/m02GhQkLLeUQA4k1shFM/QXYDdlY55B6s91yoTgR/t
0PNckH4DQRZAds0GhGFwfZ5+qkmL79DGv4AiOAE9cMMwSIqIjRgIDBzR5vzdgxgR
aFrwcx/XkNBe9w==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:26:29 2026 by rpki-client