Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.mft
File: qfNHED7zSa2C8basQ-dsD_o4wvg.mft (raw, json)
Hash identifier: qwgtuEOJlUbBvpkU3lJruJ5rJJbhOkxEjRbdDe4+hRg=
Subject key identifier: 86:A3:F2:DE:B5:22:1C:0C:85:51:C5:2E:B0:F4:E4:65:1B:55:1D:44
Authority key identifier: A9:F3:47:10:3E:F3:49:AD:82:F1:B6:AC:43:E7:6C:0F:FA:38:C2:F8
Certificate issuer: /CN=a9f347103ef349ad82f1b6ac43e76c0ffa38c2f8
Certificate serial: 019FAA8773D938F84FBB4D0883BD974D4871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfNHED7zSa2C8basQ-dsD_o4wvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:00:31 +0000
Manifest this update: Tue 28 Jul 2026 21:00:31 +0000
Manifest next update: Wed 29 Jul 2026 21:00:31 +0000
Files and hashes: 1: Cegt9gCk36CfyQoZLzS4cnrOmWA.roa (hash: yHvXAS+TMxPI4zuMGTC5jZ53ix1/BV7IdsaANR877aM=)
2: qfNHED7zSa2C8basQ-dsD_o4wvg.crl (hash: mL32QVbyR91izC0gsVH4Sjs/xsNXAnBWx3rdYFlITn4=)
3: voGOvW0BRa27Yr9p1xeqy3udyvc.roa (hash: JKI8fmA0jDEWhuhuTal1D06exvXzvzQH3NDd7ekumtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfNHED7zSa2C8basQ-dsD_o4wvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:73:d9:38:f8:4f:bb:4d:08:83:bd:97:4d:48:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9f347103ef349ad82f1b6ac43e76c0ffa38c2f8
Validity
Not Before: Jul 28 21:00:31 2026 GMT
Not After : Jul 29 21:00:31 2026 GMT
Subject: CN=86a3f2deb5221c0c8551c52eb0f4e4651b551d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f6:7b:1a:7a:ea:b5:f5:f4:03:a4:09:47:bf:
fb:de:0a:01:c7:6c:af:7d:de:e9:59:59:48:26:55:
80:cc:f9:85:32:aa:2a:a2:c3:a9:05:55:e5:aa:d7:
0c:cd:6b:f6:27:26:d6:98:fc:dc:de:83:05:25:4b:
36:fa:1e:83:98:3c:f6:5f:50:5c:17:8b:ff:d1:d1:
79:fe:ad:79:ff:ad:ae:dc:92:f5:00:68:2c:95:00:
d2:85:85:6c:a7:13:ab:40:f6:4a:d9:17:ba:57:6a:
75:4f:24:c6:d1:5e:9d:9f:3c:e7:10:d6:d6:b4:80:
ea:c7:61:a1:7e:d0:98:3d:25:5d:86:c9:1b:3e:c6:
97:09:8f:db:aa:02:33:58:02:fd:7a:14:70:f0:c2:
53:cc:58:a3:8d:93:6b:bb:11:38:4d:cc:b4:62:6e:
4a:41:3d:54:a3:82:93:ac:79:af:2c:60:6d:b8:c1:
89:92:61:14:63:39:fd:67:68:54:81:06:d0:de:0f:
5b:33:47:e9:80:a9:2f:5d:b4:ce:17:fa:69:59:26:
41:a5:0b:ee:4d:f7:fe:3a:61:ae:d4:a8:e5:0f:f0:
5c:55:f5:39:a7:df:34:e5:87:60:61:7b:1f:24:ab:
72:9c:fe:ae:dc:c2:fa:f8:77:2e:1b:37:77:6e:a9:
b1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A3:F2:DE:B5:22:1C:0C:85:51:C5:2E:B0:F4:E4:65:1B:55:1D:44
X509v3 Authority Key Identifier:
keyid:A9:F3:47:10:3E:F3:49:AD:82:F1:B6:AC:43:E7:6C:0F:FA:38:C2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfNHED7zSa2C8basQ-dsD_o4wvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:5b:bb:b1:3a:39:b0:23:bd:32:4d:93:9e:02:e6:75:67:86:
ba:51:ad:cc:d5:a2:a7:8a:89:e5:39:aa:79:44:72:5c:a7:13:
16:8f:48:d7:aa:9e:20:db:8b:1a:75:1d:99:e5:bd:bc:8c:60:
45:6b:19:9c:17:d8:0b:4a:fb:f8:1c:fa:f4:a8:66:fc:3a:7b:
5c:02:1e:34:e3:62:c0:1a:e7:8d:87:2b:ec:3d:54:b3:51:de:
d8:12:c0:36:dc:dc:5f:60:53:6b:ce:d2:18:77:7c:8c:7a:10:
f3:43:64:ff:41:0e:08:9e:c1:f0:b2:22:ca:26:38:b1:4a:4d:
7d:ab:c7:c8:48:d1:64:42:b5:ab:bd:89:16:62:1f:94:0b:bc:
88:77:45:a4:a4:0c:8d:ba:23:7c:03:28:9c:02:c5:5c:96:19:
a2:47:ff:72:76:c7:93:16:27:4c:68:ed:8f:8b:3c:af:59:a8:
63:67:0c:d3:1b:50:f3:96:7b:4d:17:ce:84:a9:fd:f2:1f:e1:
fa:71:b0:02:01:ea:e5:33:07:bc:fe:11:fa:63:46:a2:e4:a2:
76:fc:ea:d3:8f:d0:68:ed:67:5f:ad:76:cf:b7:41:32:cd:0b:
e0:4f:73:d1:06:86:05:7d:de:d5:6e:27:67:d3:31:8f:15:90:
df:bd:0a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:05:33 2026 by rpki-client