Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/qryfZKSO6lUh4en6qBB5jwiVRrY.mft
File: qryfZKSO6lUh4en6qBB5jwiVRrY.mft (raw, json)
Hash identifier: 8D2zEWSRE7A095fVmgDSNZN/dlm53Iuz0o68pU+TtBI=
Subject key identifier: C3:F4:E2:B6:6E:E3:5C:93:A8:B6:2C:F3:1B:D4:C6:07:88:B6:1D:93
Authority key identifier: AA:BC:9F:64:A4:8E:EA:55:21:E1:E9:FA:A8:10:79:8F:08:95:46:B6
Certificate issuer: /CN=aabc9f64a48eea5521e1e9faa810798f089546b6
Certificate serial: 019FA7869AE04136C99C94F156C8BBABEDD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qryfZKSO6lUh4en6qBB5jwiVRrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/qryfZKSO6lUh4en6qBB5jwiVRrY.mft
Manifest number: 012C
Signing time: Tue 28 Jul 2026 07:00:44 +0000
Manifest this update: Tue 28 Jul 2026 07:00:44 +0000
Manifest next update: Wed 29 Jul 2026 07:00:44 +0000
Files and hashes: 1: Y-AWJphLNKFh4pnsBo9MlHRQ-q0.asa (hash: zVPxZSJIJVwUzL4Svj1Rr8AateMMQ5BGi2y27f83hI4=)
2: k4UjBMhNQbPGGmHnVoiBgJBmSf0.roa (hash: VIQo5uhjjTbtUBi5ti8/TlUnmadL+OWUvZa3u0tyfm0=)
3: qryfZKSO6lUh4en6qBB5jwiVRrY.crl (hash: YYHhmcLDjhLydW5pnL0tAfpjGuqixgAcsnW0VacKS4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/qryfZKSO6lUh4en6qBB5jwiVRrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/qryfZKSO6lUh4en6qBB5jwiVRrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qryfZKSO6lUh4en6qBB5jwiVRrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:86:9a:e0:41:36:c9:9c:94:f1:56:c8:bb:ab:ed:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aabc9f64a48eea5521e1e9faa810798f089546b6
Validity
Not Before: Jul 28 07:00:44 2026 GMT
Not After : Jul 29 07:00:44 2026 GMT
Subject: CN=c3f4e2b66ee35c93a8b62cf31bd4c60788b61d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:65:c4:c3:2c:1f:93:9a:20:86:16:2f:d6:4b:
6f:77:d1:01:40:c4:17:d0:87:0f:ff:79:f3:9f:d7:
82:c2:4f:52:d4:49:98:18:52:07:ec:26:1b:c6:0e:
4e:6b:66:22:b5:5c:21:c9:72:61:75:f5:74:2a:1c:
dc:80:38:dc:ca:4d:c0:e1:eb:a4:80:14:ea:ae:31:
57:05:0a:18:02:de:57:ac:99:d8:f2:70:fa:28:be:
16:9c:15:48:a3:80:aa:cf:1b:fd:30:51:87:e4:b1:
ea:89:a1:6f:7c:e3:00:fe:12:ea:7a:94:94:eb:e9:
ce:a9:3b:b2:a4:71:24:f5:38:c6:8d:8f:06:55:f1:
0d:28:93:5f:a0:6d:47:31:3b:2f:aa:9c:81:50:19:
de:16:4d:d9:fe:d5:0f:f9:74:07:bc:3b:bb:ca:d9:
2b:61:c5:95:07:46:9d:f8:e2:a5:ee:37:b4:af:35:
82:ff:ee:02:91:95:73:45:04:f9:a4:53:20:4d:f3:
4d:58:01:8b:23:93:72:fc:21:fb:37:82:68:17:d2:
03:fe:c6:8c:1d:02:00:d8:01:e9:54:d4:c6:b9:6f:
3b:f3:fa:1d:33:09:2a:af:01:d4:90:ce:89:8c:d1:
6b:7a:66:af:09:d6:09:80:e2:71:16:d8:64:d3:52:
f1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F4:E2:B6:6E:E3:5C:93:A8:B6:2C:F3:1B:D4:C6:07:88:B6:1D:93
X509v3 Authority Key Identifier:
keyid:AA:BC:9F:64:A4:8E:EA:55:21:E1:E9:FA:A8:10:79:8F:08:95:46:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qryfZKSO6lUh4en6qBB5jwiVRrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/qryfZKSO6lUh4en6qBB5jwiVRrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/qryfZKSO6lUh4en6qBB5jwiVRrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:06:21:02:36:50:e7:3c:17:ec:79:45:55:fa:c9:fc:af:00:
33:2a:7e:ca:b8:5e:cc:42:7f:76:cc:6b:4b:aa:cb:27:eb:2b:
26:9c:7a:a4:da:34:06:5b:2f:f5:0f:e0:4c:59:c4:8b:91:79:
6b:f2:a8:38:b9:07:a2:6f:92:bb:20:99:ee:b7:4d:5a:46:37:
2a:49:d4:78:9a:0e:fc:a3:6f:d4:ac:a3:13:b7:61:c6:7c:49:
ca:12:9c:9f:d1:d6:b1:b9:da:1a:be:7a:60:4a:b8:8f:9c:d3:
df:0d:a3:c1:3c:d7:2e:a8:40:1c:69:f2:2b:99:83:52:6e:42:
ac:68:87:9c:1f:e4:86:c1:62:a0:85:ef:35:d4:85:71:a4:89:
08:48:94:b8:b1:66:19:f1:6c:ff:17:9b:6a:7c:ee:6e:e7:2f:
87:41:10:25:2c:be:ff:b1:e3:82:99:d5:28:39:43:31:c8:0f:
9a:10:1f:dd:ed:85:7a:ac:6b:e9:18:1a:fb:de:61:76:54:f5:
26:8c:db:2d:cc:8d:37:e2:42:bc:e1:a2:0b:e9:da:6a:06:21:
e8:1c:51:6b:a3:48:a3:bc:b1:83:52:f7:18:34:ba:aa:47:dd:
89:b7:52:03:31:73:0c:0a:ad:b2:e6:bb:37:39:ed:8a:da:bf:
cf:61:4c:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+nhprgQTbJnJTxVsi7q+3SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhYmM5ZjY0YTQ4ZWVhNTUyMWUxZTlmYWE4MTA3OThmMDg5
NTQ2YjYwHhcNMjYwNzI4MDcwMDQ0WhcNMjYwNzI5MDcwMDQ0WjAzMTEwLwYDVQQD
EyhjM2Y0ZTJiNjZlZTM1YzkzYThiNjJjZjMxYmQ0YzYwNzg4YjYxZDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2XEwywfk5oghhYv1ktvd9EBQMQX
0IcP/3nzn9eCwk9S1EmYGFIH7CYbxg5Oa2YitVwhyXJhdfV0KhzcgDjcyk3A4euk
gBTqrjFXBQoYAt5XrJnY8nD6KL4WnBVIo4Cqzxv9MFGH5LHqiaFvfOMA/hLqepSU
6+nOqTuypHEk9TjGjY8GVfENKJNfoG1HMTsvqpyBUBneFk3Z/tUP+XQHvDu7ytkr
YcWVB0ad+OKl7je0rzWC/+4CkZVzRQT5pFMgTfNNWAGLI5Ny/CH7N4JoF9ID/saM
HQIA2AHpVNTGuW878/odMwkqrwHUkM6JjNFremavCdYJgOJxFthk01LxJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMP04rZu41yTqLYs8xvUxgeIth2TMB8GA1UdIwQY
MBaAFKq8n2SkjupVIeHp+qgQeY8IlUa2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXJ5ZlpLU082bFVoNGVuNnFCQjVqd2lWUnJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9hODNmNjUtMTFkMi00Y2Y1LTgwODct
NDc0ZTRmNDhkNmI4LzEvcXJ5ZlpLU082bFVoNGVuNnFCQjVqd2lWUnJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9hODNmNjUtMTFkMi00Y2Y1LTgwODctNDc0ZTRmNDhkNmI4
LzEvcXJ5ZlpLU082bFVoNGVuNnFCQjVqd2lWUnJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhgYhAjZQ
5zwX7HlFVfrJ/K8AMyp+yrhezEJ/dsxrS6rLJ+srJpx6pNo0Blsv9Q/gTFnEi5F5
a/KoOLkHom+SuyCZ7rdNWkY3KknUeJoO/KNv1KyjE7dhxnxJyhKcn9HWsbnaGr56
YEq4j5zT3w2jwTzXLqhAHGnyK5mDUm5CrGiHnB/khsFioIXvNdSFcaSJCEiUuLFm
GfFs/xebanzubucvh0EQJSy+/7HjgpnVKDlDMcgPmhAf3e2Feqxr6Rga+95hdlT1
JozbLcyNN+JCvOGiC+naagYh6BxRa6NIo7yxg1L3GDS6qkfdibdSAzFzDAqtsua7
Nzntitq/z2FM8g==
-----END CERTIFICATE-----
Generated at Tue Jul 28 16:48:07 2026 by rpki-client