Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
File: qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft (raw, json)
Hash identifier: wAIvDYSKjiPQkUmJnhzPffbeaP3ohJLoSy5VeePF/Js=
Subject key identifier: F8:8E:5A:98:94:8E:C9:FE:0B:C7:7B:55:D3:AB:41:5C:B8:44:90:7A
Authority key identifier: AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
Certificate issuer: /CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Certificate serial: 019FADC00018FAB50E96031E3276DD2F78D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
Manifest number: 19AE
Signing time: Wed 29 Jul 2026 12:01:08 +0000
Manifest this update: Wed 29 Jul 2026 12:01:08 +0000
Manifest next update: Thu 30 Jul 2026 12:01:08 +0000
Files and hashes: 1: L-HwD3a1YvSj02j1QCP8hdaPo2Q.roa (hash: 5Wk7yg6Zqe4Rx0Uz4L8PVzxHV08SwQbCHKVJQ29cOi4=)
2: qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl (hash: WAmIt+RDmSk/WV8rWcAu9oTSr94hzsvy++xjyKyMfpc=)
3: yDO02X54f1LQ0eg7vIsPILfqVfg.roa (hash: QejEGgHdQAnoB+VVS4oCOej9y3m34VK1Ik/jfXOr3V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 12:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:c0:00:18:fa:b5:0e:96:03:1e:32:76:dd:2f:78:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Validity
Not Before: Jul 29 12:01:08 2026 GMT
Not After : Jul 30 12:01:08 2026 GMT
Subject: CN=f88e5a98948ec9fe0bc77b55d3ab415cb844907a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:93:cc:50:9a:58:66:41:5e:88:70:34:f8:93:
84:01:9c:77:8e:57:aa:1b:fa:78:c4:ff:c5:f4:be:
e6:b1:1b:e8:f1:fb:9e:54:a3:06:47:ed:e3:dd:50:
60:a7:2b:59:f6:81:4b:74:bc:06:56:f2:2d:5f:29:
d0:20:dd:d5:f9:4d:db:09:29:10:4c:d0:12:b3:df:
59:86:20:5e:82:3e:f2:a4:f5:cb:50:fe:86:3c:76:
e5:60:b2:6c:70:32:c8:f6:cc:3c:8c:01:13:eb:46:
c9:ec:72:86:f7:12:ec:75:f3:cc:03:0d:46:25:bf:
62:f0:15:02:c6:45:08:e8:b5:97:b9:64:67:dd:f6:
96:74:5b:92:7c:f6:eb:64:d9:37:5a:88:5e:28:59:
21:51:d9:c2:2b:bd:cf:03:37:81:13:79:ef:17:96:
a0:13:55:c7:65:1e:fd:98:d4:7a:e6:9c:b2:52:13:
e8:9c:31:52:bb:46:1d:84:3c:f9:81:02:ee:50:59:
b0:fa:bd:35:15:ed:c4:20:4d:c8:ed:fd:9b:53:01:
56:4c:6a:09:8e:c2:d7:ae:96:44:06:d1:cb:99:82:
f2:6a:08:aa:58:75:e4:02:dd:7d:c0:d2:6d:c3:13:
af:f5:b6:3c:5a:01:4f:11:ef:99:9f:a7:a7:63:fa:
91:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8E:5A:98:94:8E:C9:FE:0B:C7:7B:55:D3:AB:41:5C:B8:44:90:7A
X509v3 Authority Key Identifier:
keyid:AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:fb:7a:2f:af:67:b6:0b:53:f8:75:6d:07:12:c5:15:fd:4f:
45:29:cb:04:c5:d6:22:43:eb:d7:1f:eb:1d:70:4a:32:af:84:
fd:24:c3:ea:a5:ce:45:8b:1a:c1:15:04:9c:26:d5:3a:a0:a4:
2e:d0:e5:d7:3d:0f:da:19:14:ac:75:09:2b:04:94:e0:79:d0:
6e:e9:c9:af:eb:bd:d7:16:a8:13:ac:85:85:a6:e4:21:87:01:
60:87:15:d0:b4:b7:78:9a:67:cc:9a:3b:31:a0:84:a5:dc:0b:
b0:c2:fa:6c:1e:bb:e8:16:1d:98:f8:74:73:44:a6:1a:6c:61:
55:bf:fc:16:4f:04:c8:e2:27:cb:b2:66:9b:d4:a9:cc:a1:0d:
86:d8:35:5f:03:01:52:4a:84:88:fb:91:42:48:4c:9e:7b:67:
a1:c7:82:5d:0c:a5:5a:57:e6:01:bc:6a:52:f3:03:f2:17:c2:
c4:2a:ea:90:88:8f:29:aa:fb:a6:94:4e:22:6e:57:27:84:16:
ab:c9:bc:cb:64:18:d5:b7:9a:23:b6:99:23:89:82:02:3a:6b:
32:76:cf:ff:b4:cd:17:47:19:6b:61:b6:42:83:36:77:74:f7:
03:32:4c:8a:52:4f:b6:47:70:b4:68:26:0c:59:20:fb:d3:bf:
cb:c4:2b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 19:34:12 2026 by rpki-client