Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
File: q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft (raw, json)
Hash identifier: UUat5MXLqLe8C3xBcvdxrS6sSxbWGQ1nFqby/HW1fik=
Subject key identifier: 30:B4:3A:A8:FD:EC:C1:59:5D:56:92:B0:ED:5B:D0:A4:9D:67:97:48
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 019FAC76C9CAB3AD5725BE0B4EA29F724FF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
Manifest number: 1A38
Signing time: Wed 29 Jul 2026 06:01:33 +0000
Manifest this update: Wed 29 Jul 2026 06:01:33 +0000
Manifest next update: Thu 30 Jul 2026 06:01:33 +0000
Files and hashes: 1: q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl (hash: vy95KtevBfQteICUrXc33LyENHp4/9cikFbWwo7y7Ms=)
2: seBFYYQv0cvrV-jBttwLxGx-GgQ.roa (hash: ckniHG5YK95jMkTsaGk+p/q7us5X85VQ/bIV+gQNUtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:c9:ca:b3:ad:57:25:be:0b:4e:a2:9f:72:4f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Jul 29 06:01:33 2026 GMT
Not After : Jul 30 06:01:33 2026 GMT
Subject: CN=30b43aa8fdecc1595d5692b0ed5bd0a49d679748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9f:42:a3:53:cf:fb:3e:88:12:7e:09:b6:0e:
a4:2d:2a:02:a2:15:dd:ae:2a:2b:5b:c7:76:a6:29:
15:d8:10:4e:53:f7:40:77:0e:d4:8f:f6:7e:fd:17:
5f:37:0a:d3:d3:af:63:fc:26:6d:56:b2:0f:4f:96:
9f:2a:4c:9b:51:00:bb:0c:b6:57:0d:d8:5b:dd:14:
6c:ca:f7:4c:a0:fe:82:08:ed:72:7e:95:fe:46:a8:
4e:0c:c3:9f:72:a4:1a:ca:18:cc:e2:d1:92:b7:3b:
84:ec:5c:5a:ed:53:da:de:da:5a:12:89:d1:1c:58:
f9:42:53:4d:1f:62:7b:ba:b7:d2:1c:22:1b:8c:d9:
45:20:1a:cb:90:8a:66:1f:c9:ae:90:81:c9:77:fd:
04:81:72:0a:75:09:25:b4:7d:1b:55:42:fe:69:ad:
05:b5:c7:2d:9a:b5:d1:58:93:4b:07:bd:cd:3a:d7:
fe:9a:59:11:ca:80:41:53:6c:40:73:66:3f:1a:5a:
50:60:e0:1b:73:52:bc:4a:f6:75:f3:6f:85:c0:ba:
70:1e:c5:2f:cf:8f:98:8b:6e:70:b5:c8:81:b0:e7:
e5:b5:0a:ef:25:78:e6:ed:6a:9d:9a:e2:41:4a:d9:
36:88:3a:2e:64:35:25:2d:7a:23:54:6a:61:98:8b:
f5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B4:3A:A8:FD:EC:C1:59:5D:56:92:B0:ED:5B:D0:A4:9D:67:97:48
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:d2:05:28:57:b7:95:df:63:90:ff:65:eb:da:d2:17:b4:a6:
69:35:26:23:47:46:04:39:ed:5c:5b:32:9e:de:17:35:9b:29:
c9:c6:08:68:17:ff:d5:89:4f:1f:af:9b:37:c5:0c:9e:1c:9f:
3f:24:57:b6:7a:db:60:a9:2e:f6:f5:14:36:35:0c:fe:99:56:
4b:fe:ec:e8:04:da:82:20:e2:ef:29:90:bb:76:11:3e:01:5b:
63:8f:45:fa:8d:0e:e8:52:67:29:eb:eb:8f:bb:ac:43:9e:d8:
a4:59:8a:9f:b6:b7:86:1a:2d:2e:1d:cb:9d:03:6c:26:41:c9:
53:14:03:de:56:d2:63:2f:04:01:92:51:23:56:e2:86:be:f2:
a4:be:23:bd:96:67:e2:c4:56:b2:7c:dc:8b:a3:78:67:04:5b:
03:ff:91:f8:61:a7:60:6b:97:5e:7b:f5:db:07:3d:fe:f2:69:
83:bf:af:5f:71:8b:4b:8b:7f:65:13:e7:a0:21:f7:41:c6:d5:
4d:ab:80:c7:a1:84:0d:75:3e:25:4d:9d:dc:73:58:53:22:16:
ec:98:8d:6f:d9:7e:47:7d:17:62:4c:0c:68:37:d7:7b:92:77:
e2:e7:dc:15:78:2c:eb:53:32:5f:d5:23:97:8a:91:93:b2:19:
39:5c:ba:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:48:31 2026 by rpki-client