Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/qkX4D4X2h6ReMMhzqqW0VbSxF7A.mft
File: qkX4D4X2h6ReMMhzqqW0VbSxF7A.mft (raw, json)
Hash identifier: otVjQ3pCI9GyIg5XDiiV7NJXzzcU5Ofkg9GQqiy/d/c=
Subject key identifier: 9C:64:A7:F9:5C:D3:37:DD:6C:42:A1:3C:F1:37:27:5E:D2:BB:27:93
Authority key identifier: AA:45:F8:0F:85:F6:87:A4:5E:30:C8:73:AA:A5:B4:55:B4:B1:17:B0
Certificate issuer: /CN=aa45f80f85f687a45e30c873aaa5b455b4b117b0
Certificate serial: 019FA899C86E1CA3251B12FDBFE88F3A0D87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkX4D4X2h6ReMMhzqqW0VbSxF7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/qkX4D4X2h6ReMMhzqqW0VbSxF7A.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:18 +0000
Manifest this update: Tue 28 Jul 2026 12:01:18 +0000
Manifest next update: Wed 29 Jul 2026 12:01:18 +0000
Files and hashes: 1: U24ztcfwe3Tx-MO4rdSFI0KvV9A.roa (hash: gljBzuHljgAofqghGfm0+QrU01lsOtyBOdrBsukDw8w=)
2: qkX4D4X2h6ReMMhzqqW0VbSxF7A.crl (hash: 8MxiOaG0NfKYhwnsOnFbzYjdMNeniUYlg3FPYF4wOZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/qkX4D4X2h6ReMMhzqqW0VbSxF7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/qkX4D4X2h6ReMMhzqqW0VbSxF7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkX4D4X2h6ReMMhzqqW0VbSxF7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:c8:6e:1c:a3:25:1b:12:fd:bf:e8:8f:3a:0d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa45f80f85f687a45e30c873aaa5b455b4b117b0
Validity
Not Before: Jul 28 12:01:18 2026 GMT
Not After : Jul 29 12:01:18 2026 GMT
Subject: CN=9c64a7f95cd337dd6c42a13cf137275ed2bb2793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:86:2f:7a:60:c2:69:43:e9:66:93:c5:7f:e1:
13:3d:cd:58:8f:8b:59:f7:9b:8a:09:9f:e1:a5:31:
b1:3c:92:4f:7a:5d:52:be:cc:f0:ab:e3:fb:40:79:
0a:82:ca:d5:58:e4:93:bb:8a:4e:d7:42:00:9c:9e:
8b:df:3f:97:0d:a8:36:2d:73:cc:5b:24:84:3e:de:
ea:d8:21:70:85:8e:32:a2:fb:c2:1a:f8:90:0d:9e:
ae:d4:6e:54:95:4b:a2:25:68:4a:8e:7f:c4:ca:27:
0f:67:e8:73:32:67:a9:58:e5:2e:ac:7f:c9:18:76:
b1:ff:ca:6d:e1:5d:da:80:e7:47:20:11:37:36:f8:
46:78:df:40:f4:13:29:f4:af:65:7f:86:f1:40:5c:
8f:cd:9e:af:e3:60:17:e0:6c:3d:9c:a4:fe:a5:9a:
c1:6f:51:28:df:64:e3:61:7a:ef:55:b4:f0:83:4d:
78:e6:af:d9:2c:a5:6d:25:6a:bd:70:f6:c2:42:fd:
1e:1c:0b:8e:90:ca:43:8a:df:38:8b:4a:e5:1f:92:
71:79:a4:fa:23:20:65:15:c5:47:e8:73:aa:cf:88:
17:62:a2:e4:63:9b:26:fa:a5:af:8a:b8:e0:1f:d8:
b6:e7:14:77:d7:5b:8e:38:f7:88:23:3f:d5:b5:6e:
ab:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:64:A7:F9:5C:D3:37:DD:6C:42:A1:3C:F1:37:27:5E:D2:BB:27:93
X509v3 Authority Key Identifier:
keyid:AA:45:F8:0F:85:F6:87:A4:5E:30:C8:73:AA:A5:B4:55:B4:B1:17:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkX4D4X2h6ReMMhzqqW0VbSxF7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/qkX4D4X2h6ReMMhzqqW0VbSxF7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/qkX4D4X2h6ReMMhzqqW0VbSxF7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a9:bd:1a:ee:e2:e4:8d:de:51:92:bb:d4:aa:62:48:35:18:
b7:cd:f6:8a:e2:5c:85:95:15:da:9a:09:7e:f6:84:ea:4a:d8:
28:de:60:61:9e:de:ef:11:20:d1:d7:b3:78:f8:82:dc:37:ff:
c5:ab:f1:db:66:c7:6e:f1:c3:72:89:8c:b2:8d:97:f8:c9:2b:
70:33:2b:22:ca:67:f5:0b:d3:4c:75:c3:78:7b:85:3b:a5:ad:
1e:cb:ea:c0:a6:6b:5c:13:d0:27:80:3e:34:8f:48:0f:fc:d1:
24:ce:e1:0d:0d:82:f2:97:25:ac:c2:e3:e6:d2:68:52:c5:d0:
b3:bd:f9:5c:5b:3b:1b:eb:15:ac:23:3d:ad:99:52:27:7e:e6:
7d:50:07:22:0d:e6:60:a5:2a:c2:7d:14:e1:5c:39:44:bf:1f:
6b:10:96:93:74:05:3f:01:ab:57:a0:68:98:30:58:cb:f2:cb:
fe:81:11:25:e5:4c:5b:07:76:a3:30:d0:ad:3f:73:bf:a1:c9:
f3:c3:93:d9:88:14:b9:20:6c:67:f3:d5:d1:8f:36:d3:a1:60:
08:76:46:6f:4e:66:a2:c6:e0:89:23:0a:04:89:8e:17:ec:f2:
fa:3d:0a:b6:ea:ea:1e:f4:7c:08:fd:bc:e9:1c:2d:15:7f:91:
67:58:74:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:40:42 2026 by rpki-client