Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/qaHWsnXkY50IGRt8RqsjlCgod0Y.mft
File: qaHWsnXkY50IGRt8RqsjlCgod0Y.mft (raw, json)
Hash identifier: pXmOlJrnfAW/Fl++9RaBQLVsxF8RVIo5wsvrzIvR6vA=
Subject key identifier: 7A:E2:F3:B6:05:6C:EE:55:87:58:9B:9D:C6:48:E1:FD:D5:57:00:B8
Authority key identifier: A9:A1:D6:B2:75:E4:63:9D:08:19:1B:7C:46:AB:23:94:28:28:77:46
Certificate issuer: /CN=a9a1d6b275e4639d08191b7c46ab239428287746
Certificate serial: 019FAA8747F341BB31DA5AF9FE319AE7ACD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaHWsnXkY50IGRt8RqsjlCgod0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/qaHWsnXkY50IGRt8RqsjlCgod0Y.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:00:20 +0000
Manifest this update: Tue 28 Jul 2026 21:00:20 +0000
Manifest next update: Wed 29 Jul 2026 21:00:20 +0000
Files and hashes: 1: ab6rMUVn3A5Dtq5dYI7GOWhDpls.roa (hash: hYA//IrWljegAbclM/Dg53bUXQQ8j8qJOOVapxZlnWw=)
2: e95uvzijUfA8PskqB29MCQITY0c.roa (hash: 5t2e4qTsbvRPuZzQuH0LgBYqoRjK8h1rvy0dZQHvLOQ=)
3: h4HTnmNQ40S0AlgZb0tILyqRtAs.roa (hash: x8PyCmmrpbL3asDF+bPUyXhIWSTsgb0lr6OUsDywpqw=)
4: qaHWsnXkY50IGRt8RqsjlCgod0Y.crl (hash: VCP5Ay9Bqy7q2KxjWikiCVgzx+WNq5jSH3TypSk4Lhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/qaHWsnXkY50IGRt8RqsjlCgod0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/qaHWsnXkY50IGRt8RqsjlCgod0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qaHWsnXkY50IGRt8RqsjlCgod0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:47:f3:41:bb:31:da:5a:f9:fe:31:9a:e7:ac:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a1d6b275e4639d08191b7c46ab239428287746
Validity
Not Before: Jul 28 21:00:20 2026 GMT
Not After : Jul 29 21:00:20 2026 GMT
Subject: CN=7ae2f3b6056cee5587589b9dc648e1fdd55700b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c3:5d:76:d2:b1:b6:41:82:08:93:55:5f:bd:
22:eb:83:1e:94:78:b5:74:a4:c9:0f:f3:a2:2c:c9:
7c:67:68:20:f8:fa:7a:57:72:fb:b3:ed:eb:0b:d5:
9a:76:04:56:8e:64:d6:f7:9f:9f:84:e2:a3:1a:79:
a8:ba:43:35:6f:31:b6:61:16:91:f4:62:b7:6a:4e:
6d:7d:24:5a:00:78:79:30:75:1d:59:6b:85:58:5d:
60:c3:e2:45:e4:a2:ff:42:34:97:25:ab:c1:a6:b8:
49:1a:4f:4d:fc:50:6d:2a:04:65:6c:d6:a4:f0:1a:
ed:80:81:6a:58:64:e9:65:da:cf:8f:3f:08:2f:62:
a1:fd:e2:c6:7d:c0:a5:0c:52:91:66:53:a0:28:b5:
64:75:10:35:05:97:cd:89:bf:00:bd:81:ea:ea:88:
79:b8:cd:7c:f1:b9:3c:d1:56:2e:91:e0:48:5f:16:
82:7a:20:dd:da:af:fe:a2:16:89:61:84:65:56:61:
7b:b4:db:3e:f0:2b:9e:a1:26:e1:dc:cd:9b:0e:ed:
11:f9:cb:ca:24:6f:e9:6c:ed:b0:5f:d4:a4:4c:5c:
38:95:13:a4:07:03:b5:0d:5e:00:0f:48:95:3b:26:
fc:a4:9c:bf:cf:7e:23:32:b5:58:a3:99:f4:d1:18:
a4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E2:F3:B6:05:6C:EE:55:87:58:9B:9D:C6:48:E1:FD:D5:57:00:B8
X509v3 Authority Key Identifier:
keyid:A9:A1:D6:B2:75:E4:63:9D:08:19:1B:7C:46:AB:23:94:28:28:77:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaHWsnXkY50IGRt8RqsjlCgod0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/qaHWsnXkY50IGRt8RqsjlCgod0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/qaHWsnXkY50IGRt8RqsjlCgod0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:45:02:50:3e:18:8a:65:92:a8:20:2c:37:97:aa:41:58:5e:
1f:75:69:c4:49:a7:a2:2f:8d:5c:81:06:4e:bf:13:ee:26:79:
6d:28:68:7b:22:80:0c:32:ac:a8:b5:18:09:d3:84:32:1f:ce:
74:43:cd:5b:e4:6d:41:1f:c3:6e:3e:21:26:22:26:14:b9:c1:
bf:67:8a:c1:ed:a8:05:b3:6b:b2:16:e6:1d:0a:61:3e:f7:3c:
45:a1:fa:5e:0a:5b:89:ff:e0:1d:eb:09:28:6a:f2:01:fa:b7:
dd:2e:70:82:42:db:ec:64:6b:99:d9:df:93:f0:10:56:18:10:
72:93:11:30:bd:ca:b0:f4:db:fb:f5:32:72:3d:db:9a:82:a8:
57:40:95:8d:8e:de:56:48:8d:c5:f3:bd:35:53:38:1c:0c:fc:
f2:43:63:26:8b:89:c1:e7:f0:34:86:70:24:db:17:8e:fd:bf:
6c:bc:66:02:57:8e:ff:80:54:67:15:74:af:7a:ca:9a:6f:f3:
61:86:3c:cf:37:5c:1e:f7:6d:81:45:d9:e5:bc:97:32:73:84:
f1:95:84:ef:af:51:fc:0c:71:34:e4:4f:c6:95:55:45:5c:01:
50:8a:9f:c0:3d:a1:18:23:d3:57:65:90:cb:dc:ff:a2:06:f1:
da:ac:92:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:23:53 2026 by rpki-client