Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
File: qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft (raw, json)
Hash identifier: 04n4TEsv/CAsjGvCCn8j65szMmA2eDEP8Vrfpu183Kw=
Subject key identifier: A7:F8:EF:03:D8:3C:10:C2:33:26:5F:D0:73:0B:DF:AF:3B:D6:17:A0
Authority key identifier: A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C
Certificate issuer: /CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c
Certificate serial: 019FAA8733826A212D5A7EBD606EA5EC93C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 21:00:14 +0000
Manifest this update: Tue 28 Jul 2026 21:00:14 +0000
Manifest next update: Wed 29 Jul 2026 21:00:14 +0000
Files and hashes: 1: U4sjdHd-gX-XqAKv1_i_s77A5sw.roa (hash: R8Ebp8RZ69ktsKpPiMp0a78DZiZYGn/b1MPxbWALvI0=)
2: qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl (hash: FHlMKS0JHn8ftym+nBU1v1qvF4AvbnjWUwl7MDB6H/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:33:82:6a:21:2d:5a:7e:bd:60:6e:a5:ec:93:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c
Validity
Not Before: Jul 28 21:00:14 2026 GMT
Not After : Jul 29 21:00:14 2026 GMT
Subject: CN=a7f8ef03d83c10c233265fd0730bdfaf3bd617a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:89:82:89:46:a0:fc:ae:4a:71:65:10:0f:1e:
9f:f8:08:df:15:d0:9a:3d:49:b9:73:97:e7:0a:31:
1a:a9:ea:40:85:39:de:05:87:b6:06:17:9a:75:5c:
51:04:14:84:80:19:8f:5f:79:fd:f8:be:1c:25:9c:
6c:53:a7:8f:0b:d1:c9:4f:6c:b0:07:85:0e:46:20:
f9:87:59:8d:09:84:90:5b:67:3b:21:d8:c1:d0:d0:
78:af:c3:d4:b0:b3:9e:52:92:91:5b:57:fe:5d:a3:
c4:5e:92:c5:0c:67:9d:7a:4d:a6:b1:ca:46:22:0b:
06:3f:b3:f2:26:3a:d0:23:14:42:28:f8:c1:82:46:
14:1b:e9:f5:fa:b2:06:a8:93:fc:c4:12:f8:15:67:
91:9d:27:5b:96:40:da:13:13:c3:6d:ef:2b:e7:fe:
9f:e4:56:d6:39:45:e8:10:a8:3c:4a:26:93:17:29:
c1:38:ef:e9:52:b4:6b:9b:30:7e:1e:e8:03:11:d5:
fb:69:84:d1:3a:20:73:6e:fe:bd:c8:87:06:39:09:
9c:34:84:97:df:ef:f4:a8:b5:79:2f:e6:c8:4d:e5:
d7:05:1f:2f:14:e2:b4:10:f1:0d:f1:73:e8:81:99:
da:d4:d6:3e:72:2b:77:cd:30:28:92:59:6b:59:6e:
21:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F8:EF:03:D8:3C:10:C2:33:26:5F:D0:73:0B:DF:AF:3B:D6:17:A0
X509v3 Authority Key Identifier:
keyid:A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:02:94:9f:e3:bc:53:da:bd:5f:00:cb:88:96:61:e5:ef:86:
1f:09:d9:6e:0d:8b:fc:63:44:2b:8f:dc:b2:cc:5a:bd:58:29:
19:0d:b0:1c:ff:fe:b0:37:8b:ac:dd:4f:31:52:56:bd:97:a7:
da:66:f5:73:83:93:a3:f0:a6:ca:08:77:ff:5b:37:40:ca:bf:
78:b8:f6:be:b1:16:a6:4f:b7:34:4c:c6:e8:a7:3f:33:69:92:
50:9b:8b:7a:e6:48:78:2d:a3:d7:fb:09:ec:54:c4:d4:64:d1:
90:11:8c:29:b1:a2:e2:92:fb:fd:f0:c2:4c:b2:6a:90:da:64:
69:a8:3d:87:55:cf:36:7b:bd:da:b7:bc:08:63:73:69:ac:19:
18:b5:4c:8a:5b:4f:ad:ab:62:8d:3b:88:2b:42:0b:cb:cc:05:
3c:87:2f:5e:e6:81:51:f6:0c:9e:c3:05:49:c7:65:03:ed:94:
74:de:a6:98:19:15:3a:0a:57:5c:30:51:cb:da:65:0d:eb:3f:
28:4d:0f:d3:2d:88:5f:e5:d4:2c:90:f3:bc:71:57:b5:51:7c:
f9:6d:b2:42:2e:52:8c:62:7d:dc:18:2d:83:be:f9:0f:61:4f:
a6:9a:de:ae:8c:ea:46:cd:7d:6e:6e:1e:0d:30:20:97:b6:7f:
31:6c:f7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:49:01 2026 by rpki-client