Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/quDn_oLDpsQmokwM_6ILDjowT6I.mft
File: quDn_oLDpsQmokwM_6ILDjowT6I.mft (raw, json)
Hash identifier: raX0LfSXm1LaJjMyFRvFbovuXW54ePIGtq1uOtoBuHk=
Subject key identifier: 66:C7:7A:E6:0E:5E:13:6C:EE:2D:CD:C2:DB:6B:21:CE:66:4B:C4:DE
Authority key identifier: AA:E0:E7:FE:82:C3:A6:C4:26:A2:4C:0C:FF:A2:0B:0E:3A:30:4F:A2
Certificate issuer: /CN=aae0e7fe82c3a6c426a24c0cffa20b0e3a304fa2
Certificate serial: 019FA899AC80B82AA225A4F81B3A0B3FF00B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quDn_oLDpsQmokwM_6ILDjowT6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/quDn_oLDpsQmokwM_6ILDjowT6I.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:11 +0000
Manifest this update: Tue 28 Jul 2026 12:01:11 +0000
Manifest next update: Wed 29 Jul 2026 12:01:11 +0000
Files and hashes: 1: UL8l5IwcVO4oalkF_m08Q-lh138.roa (hash: Ft4/BZpxSn/GVsZnEbmyHTlyfLxd+14L0O7a+0FPi2w=)
2: quDn_oLDpsQmokwM_6ILDjowT6I.crl (hash: Ul5s1PXQwkjJchZrzI4vHgnedviai8VTO1S03YAFHAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/quDn_oLDpsQmokwM_6ILDjowT6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/quDn_oLDpsQmokwM_6ILDjowT6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/quDn_oLDpsQmokwM_6ILDjowT6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:ac:80:b8:2a:a2:25:a4:f8:1b:3a:0b:3f:f0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae0e7fe82c3a6c426a24c0cffa20b0e3a304fa2
Validity
Not Before: Jul 28 12:01:11 2026 GMT
Not After : Jul 29 12:01:11 2026 GMT
Subject: CN=66c77ae60e5e136cee2dcdc2db6b21ce664bc4de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8f:3e:d5:12:2a:34:34:ce:ff:c8:8b:16:49:
dc:f6:26:b0:89:ab:70:ec:a0:f6:16:3c:4d:ae:2d:
ba:36:ed:bb:69:1d:66:1d:81:e5:4c:86:92:2f:59:
63:12:08:96:04:63:4e:02:54:f9:a9:56:19:05:99:
28:61:21:be:15:bf:2f:21:f7:70:86:50:15:3c:ef:
b1:ee:53:3a:8e:f6:20:16:38:a8:d8:a7:94:fe:d8:
1e:bc:1b:b0:5a:3b:90:e8:70:a5:64:8d:c0:8f:c6:
08:07:71:a1:61:02:d3:25:3a:34:32:e0:bf:02:9d:
91:6c:97:b2:fa:49:66:6e:f6:c9:c0:56:1d:16:46:
1a:06:74:e6:51:c4:92:2d:99:94:72:6b:d4:35:ab:
11:41:d3:78:e3:0d:ec:34:6a:24:b0:25:1e:9f:4d:
7b:30:07:5a:4f:36:85:79:05:8e:f7:6c:5b:45:52:
76:ad:5d:75:43:37:72:43:40:0a:fb:27:2d:09:2f:
85:b3:de:21:56:d3:49:79:77:70:fd:2c:6b:5f:5a:
6c:e6:79:2e:ed:9d:b1:cb:a3:d1:b3:37:b8:d4:b5:
f6:cd:59:74:0e:8f:22:3f:42:10:33:ea:49:97:d5:
29:04:6e:5f:06:49:26:15:b9:a5:c8:cf:0e:4b:13:
27:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C7:7A:E6:0E:5E:13:6C:EE:2D:CD:C2:DB:6B:21:CE:66:4B:C4:DE
X509v3 Authority Key Identifier:
keyid:AA:E0:E7:FE:82:C3:A6:C4:26:A2:4C:0C:FF:A2:0B:0E:3A:30:4F:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quDn_oLDpsQmokwM_6ILDjowT6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/quDn_oLDpsQmokwM_6ILDjowT6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/quDn_oLDpsQmokwM_6ILDjowT6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:69:c4:7a:8c:6b:46:80:9c:c6:ac:3b:41:37:d2:b4:20:4e:
87:31:d1:e5:91:e0:1a:68:61:5d:77:72:95:0d:ef:5e:7f:74:
9f:2a:f2:53:fd:9c:0d:6f:3d:63:05:2a:30:5f:16:03:aa:17:
ff:a1:04:ab:5c:ea:c4:2b:8a:14:06:6f:87:5f:53:0c:04:98:
05:00:44:27:b8:d4:ad:40:53:78:64:3c:56:6e:db:33:dd:3b:
cb:29:64:9f:61:b9:8f:a5:50:62:87:12:04:f8:90:4b:f1:7a:
5a:ec:9b:9d:fe:0a:e6:18:5d:38:9f:a8:b6:eb:26:4f:ff:ae:
b5:bb:52:fa:17:25:ba:e3:cb:97:1a:a2:a0:5d:72:15:8e:b7:
29:0c:07:fa:09:5a:01:b7:44:91:58:69:e6:ba:40:bf:f9:15:
32:5f:db:83:95:c9:05:42:29:4e:b3:9f:77:2e:80:9d:0c:66:
0b:e8:7c:d0:ad:99:ea:c5:38:f1:f8:ab:2f:c6:30:38:5d:4e:
d1:45:f9:75:4c:b0:1f:c3:38:8a:45:ea:48:d5:75:52:75:34:
20:71:4e:41:41:bb:c7:06:74:98:1a:cf:f1:53:5f:75:bf:d7:
95:d1:7c:6c:4a:c4:5c:c5:61:5a:a6:c9:da:81:27:bf:7d:53:
cf:8d:ec:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:48:06 2026 by rpki-client