Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
File: qgvXjKLKpeuP87noI3dNwbdN6-s.mft (raw, json)
Hash identifier: IZ1YcB/iXfvGEyhqRnC/jDu3go0uo0sWspvZAvVFOsc=
Subject key identifier: 74:AA:9E:91:99:0D:D3:0F:73:02:C7:02:52:32:93:10:CD:23:F4:09
Authority key identifier: AA:0B:D7:8C:A2:CA:A5:EB:8F:F3:B9:E8:23:77:4D:C1:B7:4D:EB:EB
Certificate issuer: /CN=aa0bd78ca2caa5eb8ff3b9e823774dc1b74debeb
Certificate serial: 019FAB9AB0C7545445B0D6234AA77E09277E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
Manifest number: 089D
Signing time: Wed 29 Jul 2026 02:01:09 +0000
Manifest this update: Wed 29 Jul 2026 02:01:09 +0000
Manifest next update: Thu 30 Jul 2026 02:01:09 +0000
Files and hashes: 1: UbyUEzCsDyKqUbO4mcMwyNy8cOY.roa (hash: oiMnmWGgvSnOjT8fp4+LrkyK7pAMt/y+JFMAU+BQTbc=)
2: qgvXjKLKpeuP87noI3dNwbdN6-s.crl (hash: ZHvMTlsFvT4Qt72mKIoSqjjswFQzP78zc+BgCl1ZZxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:b0:c7:54:54:45:b0:d6:23:4a:a7:7e:09:27:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa0bd78ca2caa5eb8ff3b9e823774dc1b74debeb
Validity
Not Before: Jul 29 02:01:09 2026 GMT
Not After : Jul 30 02:01:09 2026 GMT
Subject: CN=74aa9e91990dd30f7302c70252329310cd23f409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b7:3e:fb:4b:20:28:0a:17:26:71:49:b1:33:
7d:97:5b:f7:09:19:a5:95:7c:f5:3a:dc:40:a5:ef:
5a:f4:94:5d:c5:5f:7e:f7:1f:26:77:a4:8b:e6:18:
09:13:43:1f:ef:07:a4:bd:6f:04:cc:26:e4:ea:82:
4b:87:1e:8e:1e:38:fc:90:30:4d:67:b0:bd:2f:e4:
e8:bf:c9:52:a3:a5:f9:21:40:18:39:4e:78:50:d6:
48:63:81:7c:da:e9:3c:cc:75:be:ed:1b:7d:49:4b:
2b:93:b6:23:1c:c3:6c:d0:fb:13:4a:27:ba:db:f1:
26:76:16:11:19:f9:ae:29:8f:16:c8:29:dc:86:80:
24:fb:d4:95:5e:63:64:cb:be:3d:58:87:16:fe:84:
f4:d6:99:c8:88:b2:4a:b0:99:81:a8:13:ef:1f:44:
da:6a:85:4a:24:52:7c:12:ad:4e:45:da:75:7c:d2:
1d:28:95:18:f9:e1:76:24:49:b5:32:af:b5:5c:46:
6f:8f:93:88:2d:13:34:72:f1:12:a1:91:a7:a2:08:
c0:29:20:38:bf:c2:f6:e3:4e:ab:f3:0b:44:26:73:
ce:8e:3d:88:ad:3a:aa:4c:c3:6c:37:70:bd:12:a8:
5d:f3:9c:56:7d:fc:c9:53:6f:4f:4c:23:f2:01:67:
58:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:AA:9E:91:99:0D:D3:0F:73:02:C7:02:52:32:93:10:CD:23:F4:09
X509v3 Authority Key Identifier:
keyid:AA:0B:D7:8C:A2:CA:A5:EB:8F:F3:B9:E8:23:77:4D:C1:B7:4D:EB:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:0f:3f:c7:b4:93:ce:06:4d:32:77:c0:d4:2f:71:4f:c2:2d:
7e:24:4e:36:c7:b2:c3:f2:92:bc:ed:87:41:5e:ee:20:9a:d4:
e0:a1:9d:1f:0b:10:56:98:f8:af:66:08:c8:74:10:7d:44:96:
b7:12:00:de:3d:6e:56:de:f6:54:ca:c3:bd:ca:46:3d:87:ee:
a8:1a:e8:69:16:d9:78:1c:e6:ee:53:01:29:8f:4e:0c:1e:4f:
d5:fc:ba:c4:03:83:15:64:f8:c1:52:3a:64:02:63:c5:54:34:
6f:c4:6e:cf:f8:ba:e0:71:6a:b9:83:13:f0:d0:00:6f:e1:14:
e8:63:57:01:c5:73:e7:c9:54:12:09:2b:f1:bd:49:dc:b9:a3:
2d:df:43:4b:96:ac:35:f6:cd:dc:b8:90:26:4d:db:4b:11:88:
49:79:c0:7e:ca:ed:3d:fb:24:21:0d:23:01:a7:22:b9:83:e6:
b0:bf:87:c4:d7:05:cd:7b:bb:d3:fe:ed:3a:b3:8c:62:5a:1b:
32:a1:45:22:53:9b:07:18:27:15:03:40:49:36:fb:5a:2d:d1:
80:ab:c3:9a:90:71:aa:b3:1d:22:38:11:2e:2f:35:b9:06:1d:
de:95:b2:fa:15:82:18:84:1c:d6:d6:af:35:98:14:ce:df:22:
70:3b:bb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:55:22 2026 by rpki-client