Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
File: qGW64ld4vu2IgMCN8tPzf8N6vB4.mft (raw, json)
Hash identifier: hQfAY5llJQ5unIUXeazeZ76Qp0eQfitFjKpzt/34B38=
Subject key identifier: 60:FD:73:4A:C4:B7:89:42:3F:F3:77:6B:D1:42:E1:3E:42:F5:E5:9A
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Certificate issuer: /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial: 019FA8D044BAD18B3DD8C135719473C97CA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
Manifest number: 0DA7
Signing time: Tue 28 Jul 2026 13:00:49 +0000
Manifest this update: Tue 28 Jul 2026 13:00:49 +0000
Manifest next update: Wed 29 Jul 2026 13:00:49 +0000
Files and hashes: 1: F46yJZ1_ZtncXoXA1gqtcgSgxks.roa (hash: 4xB/U3VlaMjmD/USOo57UOd/gQlGLMP8wxFd8TZyukw=)
2: HDDUkhzgUOHlF7zi4DlC9_ywpGI.roa (hash: ob4GjBCgXhSHBsKltA+N4Bhya5B54UhmYsdP2O0rGB0=)
3: MdEs2m-IrHBQCFgn-JlK3Bk7udc.roa (hash: Mo1ibwxe067q8YpdjNU7MlbnD4U4Cl8kB+EULAl5HTk=)
4: RBsCiDLoRPUa1sEuFbaN0WsP-WA.roa (hash: 2UgnVxLlLuAenOg0pXBuNFTqN4KE476l2bQbrokLRSM=)
5: SZxwFn-rv4YHYIn11rPhhdZalEE.roa (hash: qGdnGUtcjilIGvYv6gZqj/DBGuFNWX/5F8NZ1f7ELoQ=)
6: dQp1_bF-2hRgZhoSUp2j8-OiYAI.roa (hash: Ktp1XPuBOcTSPdwju+u+aKIoeTI5yi+j2Ty+pydNaPA=)
7: qGW64ld4vu2IgMCN8tPzf8N6vB4.crl (hash: dBsm09B6JMD4xqk3oaDUSQ5HUdOZitvz7snn6IDdGkM=)
8: vzfccsFprMOY9JYnROqdf595jyk.roa (hash: 9XgNIgYKyBtoz7QowqkqXgsGwcOR4Db53f7gkwA+doE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:44:ba:d1:8b:3d:d8:c1:35:71:94:73:c9:7c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Validity
Not Before: Jul 28 13:00:49 2026 GMT
Not After : Jul 29 13:00:49 2026 GMT
Subject: CN=60fd734ac4b789423ff3776bd142e13e42f5e59a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5c:98:d7:d7:cd:48:a5:61:c1:e3:79:8c:e3:
e8:0a:51:6d:77:c9:d9:ef:83:b2:47:84:74:2a:d8:
72:c5:e5:2d:eb:cc:1a:7f:88:29:7b:bb:fe:e6:cd:
7b:2a:1c:28:75:04:d0:dd:04:96:47:20:e4:8f:ad:
36:61:3d:65:bc:3e:b7:03:df:31:53:b5:e0:50:6a:
10:5b:4d:e2:a0:1f:d1:1f:0d:9d:82:43:a2:62:4b:
9b:91:f5:be:b3:e6:bc:00:0e:51:a5:c1:9d:5c:d4:
57:7a:78:bf:d0:2a:20:11:79:6a:7b:ef:69:be:4b:
ee:cb:b2:b1:93:96:b4:d3:b7:8e:93:0f:9e:b1:b7:
b1:a3:66:92:8f:d5:fd:21:55:cc:ed:49:e8:72:2f:
ea:d1:4c:f1:93:e1:7a:fe:6a:e0:8f:8b:79:68:ca:
f1:e7:13:04:b4:b6:68:1f:b4:cd:dd:29:f6:4d:87:
79:25:5e:51:0e:a9:94:fa:34:97:f5:3a:99:20:b6:
67:00:04:4f:d8:d5:ec:1b:58:52:d9:db:3c:38:f3:
a6:c3:d3:f0:fd:90:39:f4:4b:88:3b:24:c3:3b:4c:
02:7d:5c:b1:4a:0d:58:5b:d8:ae:c0:9c:e6:28:09:
ef:f3:23:92:22:a8:18:3f:13:a8:7d:4f:29:3e:08:
06:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FD:73:4A:C4:B7:89:42:3F:F3:77:6B:D1:42:E1:3E:42:F5:E5:9A
X509v3 Authority Key Identifier:
keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:0a:90:4e:db:fb:0a:ee:55:ab:c6:1e:49:b3:1b:13:09:81:
da:c2:98:f6:d6:45:da:00:59:a0:cd:22:c3:6a:a5:00:b4:db:
9c:1f:0c:7e:20:68:fe:59:8e:96:5c:d8:f5:a9:bb:13:03:c1:
4c:c8:e4:65:d0:86:7c:05:af:97:69:a7:04:bb:1d:6e:fb:99:
35:62:cf:87:b4:83:6a:d2:d8:02:44:33:66:85:00:c9:50:f8:
db:7f:c0:b6:4c:ae:86:79:ea:f4:ab:37:0a:60:17:fc:42:17:
7f:d1:3d:6f:03:ae:3e:28:43:01:cb:73:d0:4d:92:06:7c:b4:
59:4e:ee:82:cb:a5:fd:e5:6e:74:9f:10:ab:b1:84:db:47:79:
95:b8:4e:53:93:e6:01:1a:06:46:87:a0:97:63:92:d5:cc:5f:
de:e4:61:3c:8a:e0:3c:05:39:c3:19:db:77:1d:e9:7b:1c:07:
3d:db:8f:07:ed:15:18:05:4b:63:45:df:5c:45:7b:0d:78:2c:
4d:27:18:c9:2d:20:14:ed:cb:e5:03:a0:61:67:d3:8f:cb:4f:
0d:c2:a9:a6:9c:3d:5f:2a:75:7d:70:60:bd:d9:ce:76:8f:86:
14:dc:90:fc:38:7b:64:d7:f9:f8:c9:32:b5:49:c0:78:ae:19:
38:d1:20:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+o0ES60Ys92ME1cZRzyXymMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NjViYWUyNTc3OGJlZWQ4ODgwYzA4ZGYyZDNmMzdmYzM3
YWJjMWUwHhcNMjYwNzI4MTMwMDQ5WhcNMjYwNzI5MTMwMDQ5WjAzMTEwLwYDVQQD
Eyg2MGZkNzM0YWM0Yjc4OTQyM2ZmMzc3NmJkMTQyZTEzZTQyZjVlNTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FyY19fNSKVhweN5jOPoClFtd8nZ
74OyR4R0KthyxeUt68waf4gpe7v+5s17KhwodQTQ3QSWRyDkj602YT1lvD63A98x
U7XgUGoQW03ioB/RHw2dgkOiYkubkfW+s+a8AA5RpcGdXNRXeni/0CogEXlqe+9p
vkvuy7Kxk5a007eOkw+esbexo2aSj9X9IVXM7Unoci/q0Uzxk+F6/mrgj4t5aMrx
5xMEtLZoH7TN3Sn2TYd5JV5RDqmU+jSX9TqZILZnAARP2NXsG1hS2ds8OPOmw9Pw
/ZA59EuIOyTDO0wCfVyxSg1YW9iuwJzmKAnv8yOSIqgYPxOofU8pPggGXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGD9c0rEt4lCP/N3a9FC4T5C9eWaMB8GA1UdIwQY
MBaAFKhluuJXeL7tiIDAjfLT83/DerweMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUdXNjRsZDR2dTJJZ01DTjh0UHpmOE42dkI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi82NDQ0ZDEtNWYwMC00ZTUwLTgwMTkt
MWI2Zjc1MGNmOWEyLzEvcUdXNjRsZDR2dTJJZ01DTjh0UHpmOE42dkI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi82NDQ0ZDEtNWYwMC00ZTUwLTgwMTktMWI2Zjc1MGNmOWEy
LzEvcUdXNjRsZDR2dTJJZ01DTjh0UHpmOE42dkI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlwqQTtv7
Cu5Vq8YeSbMbEwmB2sKY9tZF2gBZoM0iw2qlALTbnB8MfiBo/lmOllzY9am7EwPB
TMjkZdCGfAWvl2mnBLsdbvuZNWLPh7SDatLYAkQzZoUAyVD423/Atkyuhnnq9Ks3
CmAX/EIXf9E9bwOuPihDActz0E2SBny0WU7ugsul/eVudJ8Qq7GE20d5lbhOU5Pm
ARoGRoegl2OS1cxf3uRhPIrgPAU5wxnbdx3pexwHPduPB+0VGAVLY0XfXEV7DXgs
TScYyS0gFO3L5QOgYWfTj8tPDcKpppw9Xyp1fXBgvdnOdo+GFNyQ/Dh7ZNf5+Mky
tUnAeK4ZONEgTQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:57:30 2026 by rpki-client