Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
File: qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft (raw, json)
Hash identifier: Gw5Hk5iLvBhXnkyWxC+vsXDi2QOqB2/EYML2KG2u3Ro=
Subject key identifier: 52:C4:80:69:EC:14:14:D8:E1:4A:DF:3F:1E:C6:7D:58:51:7C:24:8B
Authority key identifier: AA:FC:3D:2C:92:97:10:30:6E:84:7C:60:7D:38:11:4A:EB:B3:CC:08
Certificate issuer: /CN=aafc3d2c929710306e847c607d38114aebb3cc08
Certificate serial: 019FA906D7266731FD10E54646190D3D94B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 14:00:25 +0000
Manifest this update: Tue 28 Jul 2026 14:00:25 +0000
Manifest next update: Wed 29 Jul 2026 14:00:25 +0000
Files and hashes: 1: 3qtjPVhy36B112_T9YD_k1D7PrQ.roa (hash: TnLbrW8cdvU0sgFs8JL8GKZ+s8BUvq1O8YCehip/3/4=)
2: b-_QLOAaiTLnrdshp-MjmUbpJAQ.asa (hash: zE9zRSorao8ZT6ov8SMASzQ+KxaurOF00HS44oG3cE8=)
3: qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl (hash: k8wfYfanFTyls+beQC6p0TwWrSU/fWK7BntGGWETrlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:d7:26:67:31:fd:10:e5:46:46:19:0d:3d:94:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aafc3d2c929710306e847c607d38114aebb3cc08
Validity
Not Before: Jul 28 14:00:25 2026 GMT
Not After : Jul 29 14:00:25 2026 GMT
Subject: CN=52c48069ec1414d8e14adf3f1ec67d58517c248b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:93:a8:49:0f:d3:e5:48:09:87:25:4f:b7:86:
b7:c1:58:c4:62:94:c9:16:f8:73:e3:46:5f:77:2b:
4b:88:75:43:1d:ca:00:a4:cd:57:39:20:78:ad:3a:
7d:e7:53:a7:4c:9b:5f:4f:8a:82:98:0f:fe:34:01:
45:97:a6:b8:b8:8e:19:61:56:70:2a:a6:d1:17:d7:
84:f8:4d:e0:42:83:8a:3a:7e:54:db:86:6d:ad:c1:
5b:ae:3b:3f:9f:0f:e3:1d:ab:03:98:be:f2:e9:c9:
5a:96:52:36:be:b8:ec:2e:88:b0:9e:09:75:2f:9c:
5c:87:c0:e9:06:01:98:82:25:89:8c:37:7d:b2:3c:
7d:fb:10:c2:31:cb:b1:5a:37:01:24:22:a6:4e:8b:
67:cd:d1:30:73:dd:3c:33:4b:8b:11:b4:d5:fb:14:
f4:9c:70:25:65:9e:b0:bf:f6:14:00:50:9c:03:11:
22:f2:de:e1:1e:eb:5e:61:2e:72:f1:73:05:e3:e3:
e2:b2:ce:d2:d4:53:6c:a6:b0:07:21:8f:df:c5:1b:
21:60:e7:58:bf:4d:99:05:32:13:8b:40:3c:05:d5:
19:eb:e2:29:fd:0a:41:0f:45:98:ba:bf:8d:bb:f9:
45:45:2a:2a:7d:72:15:9f:3e:4b:f4:96:66:de:cf:
07:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C4:80:69:EC:14:14:D8:E1:4A:DF:3F:1E:C6:7D:58:51:7C:24:8B
X509v3 Authority Key Identifier:
keyid:AA:FC:3D:2C:92:97:10:30:6E:84:7C:60:7D:38:11:4A:EB:B3:CC:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ce:81:f3:04:1f:70:9e:38:13:dc:9c:0b:c6:bf:4c:09:3e:
53:f3:83:f9:cd:4a:f7:af:46:7f:e9:2b:65:a4:fd:4d:30:f5:
a3:51:1a:34:b3:13:bd:5d:4b:b1:6a:98:de:e3:7c:76:0c:45:
68:3f:b2:ba:97:4c:70:ce:78:8b:45:3e:d9:05:5a:c1:47:ba:
a8:b6:30:57:21:4d:d3:a8:29:29:9d:07:a8:17:10:20:fb:49:
92:a2:b8:c8:18:64:26:d7:69:1c:52:fc:75:2a:c0:da:66:a8:
57:1f:ba:4a:04:42:da:ba:55:4a:f2:9c:6c:08:f0:80:0b:d9:
4d:c0:8e:46:ef:1b:1f:b0:e6:03:0a:b4:4c:20:7c:f5:22:99:
49:fc:d6:15:c5:fe:d0:70:13:3f:d1:a5:0a:bf:49:3d:73:37:
a3:a5:15:66:b5:f5:52:db:47:7c:ef:ad:11:07:75:d0:7a:b7:
b1:a5:a0:fc:63:27:d9:5d:29:85:08:f4:3a:fd:b8:c9:7e:98:
22:65:73:cc:69:b2:99:5f:c2:84:31:54:a0:65:fc:fb:16:8b:
37:d0:e6:ff:cc:88:c4:a6:27:dc:14:34:62:ce:b2:d6:9e:f5:
bd:c9:cf:4b:1c:50:33:35:11:7a:85:da:6b:07:e1:c8:c5:f2:
a8:a0:b0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:33:22 2026 by rpki-client