Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
File: qltHHQugidnp9GwpExlnT6yBKNA.mft (raw, json)
Hash identifier: pSFbp33AOK713aMXOYmo6+agPDPRdUVxV/dnBVI66cA=
Subject key identifier: FB:0F:DC:37:AC:07:94:15:1E:BE:B6:4C:C7:BB:EE:87:A8:6A:B0:D6
Authority key identifier: AA:5B:47:1D:0B:A0:89:D9:E9:F4:6C:29:13:19:67:4F:AC:81:28:D0
Certificate issuer: /CN=aa5b471d0ba089d9e9f46c291319674fac8128d0
Certificate serial: 019FAB6401555B0885E71ADBEBF5A496BE68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
Manifest number: 1026
Signing time: Wed 29 Jul 2026 01:01:25 +0000
Manifest this update: Wed 29 Jul 2026 01:01:25 +0000
Manifest next update: Thu 30 Jul 2026 01:01:25 +0000
Files and hashes: 1: RGHMhabHZkPW5wXprVh6WUeUNEU.roa (hash: aWxpktwD4HwK4DqUq/i3jSDZlGsjYGbb6rrk+6zxpz0=)
2: hW9pmZmoOAPv4EQxUHQXTXDJr6s.roa (hash: mjwhxdNEgH8aH/IfZWkqyz4fW356i+YVNu/YE2e6m8A=)
3: qltHHQugidnp9GwpExlnT6yBKNA.crl (hash: nXBOS4te65FTADe5xugIne5Ea5EDeahRkgScVrl1E5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:64:01:55:5b:08:85:e7:1a:db:eb:f5:a4:96:be:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa5b471d0ba089d9e9f46c291319674fac8128d0
Validity
Not Before: Jul 29 01:01:25 2026 GMT
Not After : Jul 30 01:01:25 2026 GMT
Subject: CN=fb0fdc37ac0794151ebeb64cc7bbee87a86ab0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2b:8f:97:8d:7e:24:fe:77:0c:95:2d:ad:7e:
d2:a7:68:dc:15:79:04:3f:e4:27:95:0c:cf:ee:7e:
64:5e:e0:c0:b3:aa:33:d7:ae:5e:79:7c:d9:6c:ec:
0e:05:23:e7:fe:08:38:9d:4b:22:b7:81:51:c4:13:
67:36:4a:0c:77:c1:f6:b6:1d:47:27:dd:c2:1c:13:
d7:db:3c:a9:6e:fa:ab:31:6f:14:71:a8:f6:0c:44:
cc:5a:54:41:49:9d:10:83:32:9d:d3:3c:e7:ea:e6:
61:9a:34:4f:e7:d7:48:6a:38:03:6a:ec:ff:eb:10:
70:47:fa:78:ec:8e:35:66:e8:0c:76:35:ff:92:74:
3d:5d:c9:75:3b:57:46:fd:12:d7:92:55:ad:f9:06:
35:03:d6:22:00:09:e4:41:b1:f7:a3:f6:e2:37:01:
14:97:a6:62:23:04:60:22:7f:7c:6c:81:4b:6c:73:
87:d5:a9:aa:f1:d2:04:dd:12:5f:1a:fb:09:85:b0:
94:05:75:46:20:54:17:3d:e2:e5:32:15:97:12:ae:
24:3e:5a:88:ba:9c:1d:22:48:c1:26:54:b9:71:04:
68:5e:64:24:3f:54:85:1c:97:26:17:c2:5c:5a:15:
c1:bb:06:9e:76:62:20:90:59:82:f9:41:e7:03:4a:
9b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0F:DC:37:AC:07:94:15:1E:BE:B6:4C:C7:BB:EE:87:A8:6A:B0:D6
X509v3 Authority Key Identifier:
keyid:AA:5B:47:1D:0B:A0:89:D9:E9:F4:6C:29:13:19:67:4F:AC:81:28:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:77:5f:bd:d7:88:4a:d0:76:4d:e6:de:b7:74:a8:ce:ff:7f:
4e:bd:ed:2a:be:7f:a1:c1:52:73:05:6c:82:c3:65:7e:e3:76:
42:41:1b:fc:77:6b:2c:bf:5b:27:3f:b8:f2:57:24:53:48:6b:
ab:f6:61:6f:ed:b2:52:05:91:04:70:d4:2a:06:9e:de:65:14:
f6:5e:af:b5:0d:28:43:72:53:d6:e3:7d:53:d3:b4:17:06:bf:
9a:68:fb:84:f8:fd:e6:c6:ab:9f:47:5e:0a:3b:5f:fd:ce:06:
ce:eb:63:ad:5a:7f:55:1c:28:71:ea:be:85:e0:30:50:4a:06:
63:90:e6:86:1c:00:f2:3f:eb:1d:fd:49:87:e9:85:28:2e:12:
18:db:4f:48:39:58:13:b6:dc:80:b6:f2:bf:1e:b2:8e:1b:02:
06:47:45:e1:f3:bd:6b:e7:7a:dc:42:c9:ca:a5:0f:e4:dc:41:
bf:16:74:45:26:45:24:d0:42:e7:e7:68:66:e9:23:a3:82:e5:
ea:42:5e:60:ba:52:31:4f:43:b4:28:e1:93:a9:49:ab:8e:c4:
4f:4d:7b:36:2d:6c:c9:40:cf:4e:0f:d4:f2:f6:f3:c4:a6:a7:
f3:91:33:33:cf:60:0d:41:8b:14:f5:d2:35:b9:51:96:45:b7:
2d:f9:50:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:49:36 2026 by rpki-client