Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
File: qsqNwMC5IbCJ8WAmGORVN5enR0I.mft (raw, json)
Hash identifier: odcnP7J57Y21/xadI05W3mezxSXHLvSzUDOZRAjWi/o=
Subject key identifier: 24:AF:30:36:04:9E:C1:5A:96:69:AF:1E:02:0E:7A:20:EC:B8:3C:CC
Authority key identifier: AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42
Certificate issuer: /CN=aaca8dc0c0b921b089f1602618e4553797a74742
Certificate serial: 019FAC08B17270B4684B192EC909866D9995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
Manifest number: 0577
Signing time: Wed 29 Jul 2026 04:01:18 +0000
Manifest this update: Wed 29 Jul 2026 04:01:18 +0000
Manifest next update: Thu 30 Jul 2026 04:01:18 +0000
Files and hashes: 1: G8uE_YXvAUsbhoJ7QQgS2ptGK4I.roa (hash: BCzWL8FjjNpuELNVuLODI9jH/96WSdwiWl+ywyyb3Cc=)
2: qsqNwMC5IbCJ8WAmGORVN5enR0I.crl (hash: jg5oFA/HQEprbQOU/33fMLzEX6aWiB8p7aFnddzwHlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:b1:72:70:b4:68:4b:19:2e:c9:09:86:6d:99:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaca8dc0c0b921b089f1602618e4553797a74742
Validity
Not Before: Jul 29 04:01:18 2026 GMT
Not After : Jul 30 04:01:18 2026 GMT
Subject: CN=24af3036049ec15a9669af1e020e7a20ecb83ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c7:07:b0:37:11:64:89:f1:45:6b:8c:9e:1d:
3d:5d:94:0d:29:d9:ee:b5:dc:cf:8a:09:91:31:51:
4b:ae:eb:8b:57:7e:92:68:3c:4f:22:d0:bc:48:ad:
2e:46:bc:e2:1b:cf:2e:c1:6c:58:b3:b5:cd:dd:ca:
87:02:8c:5c:20:fd:5d:b3:cf:3b:a6:11:c6:56:8d:
93:82:9c:9b:a2:05:c9:06:90:74:a1:ac:61:1b:96:
d0:54:f5:67:4c:66:a3:f5:9b:aa:ef:88:ed:78:e6:
5d:c7:61:90:fb:c7:13:ec:75:7d:f8:d9:8c:26:86:
81:5d:a2:8d:a0:fe:27:8f:88:df:44:a9:28:69:d4:
c7:56:d9:96:a8:5a:3a:2f:de:22:d2:84:93:a8:91:
0e:77:50:34:a6:dd:6c:f1:31:34:1e:8f:07:76:34:
2a:07:b7:64:e8:e6:ab:5a:13:62:b1:23:c0:e1:f6:
34:bf:00:2c:b4:f0:2b:fd:87:de:43:17:01:84:7e:
1e:8b:1d:14:fe:e1:3f:ad:23:3e:37:75:ed:b1:04:
4a:64:0d:8a:88:ad:58:d5:4c:c9:15:6c:17:f0:2a:
d9:a7:9e:bd:44:ee:d1:cd:de:59:77:c9:80:32:e1:
bb:ac:9b:6e:dc:6d:51:32:db:00:d2:f1:6d:70:9e:
d4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:AF:30:36:04:9E:C1:5A:96:69:AF:1E:02:0E:7A:20:EC:B8:3C:CC
X509v3 Authority Key Identifier:
keyid:AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:47:37:10:5e:67:d2:d2:fc:a9:d1:56:c0:ad:8d:bb:b4:dc:
08:9f:58:57:60:73:1d:72:7c:de:de:d0:2c:2f:4d:3e:0e:72:
58:a8:d9:78:9a:a0:32:1e:55:fc:e2:80:27:38:ce:d3:2c:12:
2b:3f:df:71:46:60:ec:ff:d8:01:9f:13:99:77:be:5c:a1:a8:
10:64:a6:dc:58:e2:c4:ee:cb:ba:96:14:2b:31:c6:1f:f0:af:
f4:2a:b6:c6:5a:25:88:89:b1:f6:79:66:16:7b:3e:63:89:58:
54:17:f2:47:12:f2:b5:e0:fe:00:2a:dc:06:a0:5f:31:5c:80:
4b:f7:3f:2f:f1:76:2b:a7:34:ae:8c:9e:d7:0a:2d:0f:86:ac:
86:4d:9f:3c:19:fe:7f:07:08:60:3f:ec:37:e6:eb:f4:7e:8a:
af:65:5a:a8:16:03:7a:fa:b0:a3:5c:03:ad:f8:42:6f:eb:5e:
64:4b:a5:b7:24:12:16:39:43:41:09:1e:f6:14:61:36:3d:38:
4f:89:1e:bb:5c:04:8a:ad:d9:26:53:bb:30:b5:1b:0a:cd:68:
dd:3b:5c:fa:47:a5:a7:67:42:fa:6c:b1:19:2b:b8:59:54:2e:
e1:bf:70:c6:7f:23:33:9a:85:4f:b5:d6:84:96:9b:5e:ae:9b:
b4:f6:79:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:25:59 2026 by rpki-client