Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/qeYaOcqwlqd1rl65N0mg67NnEoU.mft
File: qeYaOcqwlqd1rl65N0mg67NnEoU.mft (raw, json)
Hash identifier: ggJbuhamApbFNNymPpw+swaiGvYkQ8EGvf8LNtdp/6I=
Subject key identifier: 36:20:75:3D:4B:83:80:50:08:9F:3F:EF:83:94:D3:DB:81:6D:44:38
Authority key identifier: A9:E6:1A:39:CA:B0:96:A7:75:AE:5E:B9:37:49:A0:EB:B3:67:12:85
Certificate issuer: /CN=a9e61a39cab096a775ae5eb93749a0ebb3671285
Certificate serial: 019FA89A494E7548A61FE17B65FA76D755F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qeYaOcqwlqd1rl65N0mg67NnEoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/qeYaOcqwlqd1rl65N0mg67NnEoU.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:51 +0000
Manifest this update: Tue 28 Jul 2026 12:01:51 +0000
Manifest next update: Wed 29 Jul 2026 12:01:51 +0000
Files and hashes: 1: 5O-01ndXn91lvA7IGVp_7JD4C-I.roa (hash: nMoMotkyMIOIoR19nWnqbdZxJYSLaTBAftysCvWr7wQ=)
2: H5RC6IGh5Sbx9PEDoFiqbRt3ynU.asa (hash: n2QJ0n4EloMxuDW9dgN6ie/KWyMZurH7F5vYNP7+oXA=)
3: oekYsitCnhsBLEDUo2OKvfy3f9c.roa (hash: 9ar9NhbD7Igy6b/ldj4/mv2tjbrOn9f4QbaYWVwOYjg=)
4: qeYaOcqwlqd1rl65N0mg67NnEoU.crl (hash: FV04N3tj63NktkZVHhYLR8ohtZ8fXCokeCqHWbPrZIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/qeYaOcqwlqd1rl65N0mg67NnEoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/qeYaOcqwlqd1rl65N0mg67NnEoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qeYaOcqwlqd1rl65N0mg67NnEoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:49:4e:75:48:a6:1f:e1:7b:65:fa:76:d7:55:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9e61a39cab096a775ae5eb93749a0ebb3671285
Validity
Not Before: Jul 28 12:01:51 2026 GMT
Not After : Jul 29 12:01:51 2026 GMT
Subject: CN=3620753d4b838050089f3fef8394d3db816d4438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:29:95:9d:33:4a:5c:18:7f:8c:a7:e7:37:5d:
d7:8c:a4:26:68:03:c2:70:ae:98:41:97:b7:70:52:
29:2d:4f:f0:74:b1:6f:5a:9a:ca:aa:3b:32:77:cd:
66:b6:19:4d:9a:84:c1:90:ad:f2:46:84:a1:81:7e:
26:17:c1:e7:8b:8d:06:89:ea:16:e2:57:33:3c:e6:
d0:00:6c:47:6d:dc:dc:d4:b9:b2:f1:31:8a:c3:9c:
91:84:e9:a7:83:b3:a5:1d:c6:6e:f6:f3:28:00:ef:
a6:6a:46:30:3d:f1:d5:4a:db:1e:7c:4d:19:f7:50:
df:70:c6:13:9d:00:b1:5e:17:a7:69:cb:3f:e3:c4:
68:5e:79:6b:a5:d6:fa:74:7a:81:4b:59:db:a4:31:
d6:b0:68:33:fb:dc:45:dc:4f:1f:c4:a0:df:1e:e0:
74:0b:b6:7d:b0:91:31:22:1d:97:27:85:5d:54:5c:
ef:d4:2a:ba:9c:44:e3:5d:1c:1c:0f:d4:30:d0:6b:
54:e8:04:ae:ba:a0:08:e8:61:62:68:1d:f4:30:d0:
57:4d:b8:3e:6e:a7:33:7a:dd:ed:e6:1d:e0:68:2b:
7e:c1:bd:dd:b8:01:d1:63:e9:50:62:05:b0:a6:15:
71:18:3a:f9:87:15:d4:e5:d7:a3:8a:ba:32:c6:b0:
5d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:20:75:3D:4B:83:80:50:08:9F:3F:EF:83:94:D3:DB:81:6D:44:38
X509v3 Authority Key Identifier:
keyid:A9:E6:1A:39:CA:B0:96:A7:75:AE:5E:B9:37:49:A0:EB:B3:67:12:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qeYaOcqwlqd1rl65N0mg67NnEoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/qeYaOcqwlqd1rl65N0mg67NnEoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/qeYaOcqwlqd1rl65N0mg67NnEoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:86:8e:4f:1a:e4:04:be:51:74:61:f0:42:1a:9b:10:cd:e5:
e4:9d:12:7f:e0:25:f0:2b:a1:7c:f9:e7:3e:52:9b:15:3c:b6:
22:c2:d9:7f:f1:79:ba:4b:6c:ca:3a:87:59:46:68:4e:9d:cf:
6f:c3:4d:55:6e:aa:0c:0c:fb:4f:ec:38:8d:f8:06:5a:5d:48:
11:28:0b:e7:7a:b2:b9:d0:f0:59:67:0d:2e:6d:65:a2:46:c6:
70:f4:fe:83:f3:af:20:84:fe:8a:af:03:90:aa:28:c8:25:7c:
41:b3:88:5d:6d:c3:c0:4f:b0:05:c8:53:33:e9:5c:a0:13:0e:
13:0d:30:c8:75:d0:99:fc:30:99:53:c6:b0:e6:f6:ae:18:7f:
88:d8:56:9a:1a:f5:87:0e:71:d9:86:b7:71:02:6d:c4:6b:e3:
b4:8a:3e:c5:52:57:7b:34:46:b3:a1:67:3f:9b:f1:d5:2b:e5:
14:1f:ad:c3:7f:ef:39:55:94:77:b6:e7:ce:8e:32:f7:a6:08:
b8:36:52:0d:e8:d3:92:38:c5:ae:ff:14:67:39:ea:c0:a2:b8:
df:ed:6a:46:d9:b6:2e:f5:f2:3e:29:23:8a:7c:c1:e2:cb:ff:
19:bf:d9:7c:cf:20:bc:8c:12:88:2a:89:51:90:23:04:b9:a4:
3e:12:63:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:38:58 2026 by rpki-client