Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/qkHqzdOJUCmcnoEKOen_VCnL4lo.mft
File: qkHqzdOJUCmcnoEKOen_VCnL4lo.mft (raw, json)
Hash identifier: eLbSGAKQVmB1ClCPt07oYz4OEBW3UakfwD1hL4TkmXI=
Subject key identifier: 44:41:C1:51:12:95:B6:31:56:56:26:9F:C8:69:B2:23:CC:48:80:A4
Authority key identifier: AA:41:EA:CD:D3:89:50:29:9C:9E:81:0A:39:E9:FF:54:29:CB:E2:5A
Certificate issuer: /CN=aa41eacdd38950299c9e810a39e9ff5429cbe25a
Certificate serial: 019FAC763ED8AAA9B0DDCA0D0D0F5FB2E845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkHqzdOJUCmcnoEKOen_VCnL4lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/qkHqzdOJUCmcnoEKOen_VCnL4lo.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:58 +0000
Manifest this update: Wed 29 Jul 2026 06:00:58 +0000
Manifest next update: Thu 30 Jul 2026 06:00:58 +0000
Files and hashes: 1: aMJy9IeANZbYVL8CAtiHgm0xoqQ.roa (hash: E4M6mEfejQMjX8Zwy4Poh/25Qtop8e+0EXBl1KbNADM=)
2: qkHqzdOJUCmcnoEKOen_VCnL4lo.crl (hash: 1ZS3azJ3/yMcF7UIUsN9F4uT4m47Ny2RcEMMy36UIZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/qkHqzdOJUCmcnoEKOen_VCnL4lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/qkHqzdOJUCmcnoEKOen_VCnL4lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkHqzdOJUCmcnoEKOen_VCnL4lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:3e:d8:aa:a9:b0:dd:ca:0d:0d:0f:5f:b2:e8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa41eacdd38950299c9e810a39e9ff5429cbe25a
Validity
Not Before: Jul 29 06:00:58 2026 GMT
Not After : Jul 30 06:00:58 2026 GMT
Subject: CN=4441c1511295b6315656269fc869b223cc4880a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:22:6a:ac:b3:11:32:2f:e4:73:71:30:46:14:
3a:cb:ea:64:f5:44:b8:18:0b:34:33:41:ce:dc:e2:
df:f5:fa:ea:28:2b:d3:c2:89:c8:d6:4f:fb:52:e1:
e8:6a:b6:2d:99:7e:1f:e0:34:d3:4e:8a:56:8d:de:
f5:52:94:93:62:d1:a4:4c:d1:3a:fc:43:3e:77:28:
54:4a:2d:77:7e:c6:75:48:a4:9a:f5:59:64:01:c9:
f0:9d:b8:c3:8d:f4:54:25:17:4a:62:33:bf:60:30:
02:9f:4a:1e:ac:b1:be:f0:d0:8d:89:da:ea:92:98:
8d:fb:3a:29:77:d4:9b:46:07:36:1b:ea:62:e8:75:
f0:9b:a0:01:a3:bd:d0:45:3d:93:02:7e:80:c9:e3:
06:32:68:54:19:b6:d9:8f:fb:b8:69:15:e0:c9:25:
de:e1:3b:28:2e:37:5c:d6:98:c1:47:aa:0a:03:5d:
c9:2c:3b:3b:2a:4e:5b:43:b2:da:f5:b3:54:34:23:
2f:48:9e:f1:e7:e4:9a:4c:dc:2c:73:63:dd:f8:d9:
b0:46:59:93:d1:72:3b:7e:f0:fc:4c:ba:81:10:2c:
26:3c:a6:ee:0f:ec:c7:38:09:9e:17:5c:7b:65:9a:
57:fb:35:66:1a:fa:14:00:9f:f9:de:91:c5:e6:e4:
1b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:41:C1:51:12:95:B6:31:56:56:26:9F:C8:69:B2:23:CC:48:80:A4
X509v3 Authority Key Identifier:
keyid:AA:41:EA:CD:D3:89:50:29:9C:9E:81:0A:39:E9:FF:54:29:CB:E2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkHqzdOJUCmcnoEKOen_VCnL4lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/qkHqzdOJUCmcnoEKOen_VCnL4lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/qkHqzdOJUCmcnoEKOen_VCnL4lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:34:1c:c0:7d:a6:d5:1d:6c:d3:d2:68:6a:df:db:92:57:ce:
92:86:c5:9d:d4:2f:6c:bd:5d:9f:5b:e2:d5:78:c8:c9:d5:b7:
b3:b2:7f:5e:5e:05:2b:f6:34:88:d1:60:6c:7d:83:27:ed:d8:
e3:11:54:14:61:cb:d3:29:58:29:8c:01:4b:8e:1a:f4:1d:00:
e4:e0:96:08:5c:34:c9:71:da:66:8b:35:27:69:7a:78:be:2e:
a8:47:1f:80:09:2b:60:f1:4b:28:25:b7:ff:6b:b3:29:36:35:
8d:a3:22:e4:20:60:12:7d:29:4e:58:27:73:57:1f:c0:4b:ba:
bc:b8:57:82:b4:8f:68:59:e7:77:3c:9e:a2:38:1b:7a:4f:7b:
94:6d:9f:d2:7b:d2:42:aa:52:11:b8:c3:78:b8:3f:9b:5f:6a:
dd:13:dc:0d:ea:2d:58:2b:40:9d:63:6a:3f:73:88:1c:50:73:
11:cc:f9:de:fd:8d:4f:5a:e1:95:af:0c:c0:b3:c9:cd:0e:f6:
db:ad:a0:52:6b:0d:ab:d3:d8:97:17:ba:3f:50:81:59:f5:94:
ec:99:65:a7:91:26:2a:83:af:13:ad:55:6f:8b:a6:cc:df:f8:
d0:d0:e1:d7:e6:8b:cc:18:62:65:6b:97:b4:81:95:f7:fb:df:
b4:26:c7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:23:49 2026 by rpki-client