Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
File: qjX0oGEfcqiSww2CEtIfhswTqWc.mft (raw, json)
Hash identifier: bmXmo4BTeDJTQEh69Tkm7PEReLI7LGY3xzfnZtXJyq4=
Subject key identifier: 20:3F:83:61:CD:2B:6F:00:1C:BD:9A:DD:D1:05:9F:FE:49:20:36:76
Authority key identifier: AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
Certificate issuer: /CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Certificate serial: 019FA82C0193D9F57198FA53ECAADE1D57CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
Manifest number: 0A6B
Signing time: Tue 28 Jul 2026 10:01:23 +0000
Manifest this update: Tue 28 Jul 2026 10:01:23 +0000
Manifest next update: Wed 29 Jul 2026 10:01:23 +0000
Files and hashes: 1: XdHfu4aNbbqY05djIHZSat5N9NA.asa (hash: AUEcvgTMi0kC5OD2yO9q7Au5IXQUp3/LdfUmGStQlvw=)
2: qjX0oGEfcqiSww2CEtIfhswTqWc.crl (hash: RmvduYogYaYOnjupHdo6GUjCwXyv5fGp63ybhykxEnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2c:01:93:d9:f5:71:98:fa:53:ec:aa:de:1d:57:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Validity
Not Before: Jul 28 10:01:23 2026 GMT
Not After : Jul 29 10:01:23 2026 GMT
Subject: CN=203f8361cd2b6f001cbd9addd1059ffe49203676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b7:b7:70:88:be:a8:e8:06:48:a8:3a:c5:3f:
54:de:47:37:65:d0:4e:da:de:9a:a6:03:4b:b3:74:
db:9c:f4:c2:ec:bb:85:21:69:4d:86:d1:3a:70:73:
6a:7e:d0:38:0d:44:4b:59:46:f4:ab:e6:52:2c:03:
59:99:49:8a:fc:1c:89:40:ad:d9:1d:85:36:8b:b5:
c6:71:c9:80:e4:62:51:c4:40:57:34:f8:76:04:64:
55:2b:56:e9:bf:12:e3:88:39:a5:73:95:25:14:28:
aa:33:ac:6a:22:01:cb:fc:4a:75:89:7c:82:3b:40:
25:c7:74:57:fe:c8:69:f4:58:15:96:be:55:87:eb:
e6:dd:3d:b6:9d:5f:24:3b:ab:3d:e9:53:0b:5b:1e:
fe:bf:e8:a2:8e:5c:82:57:4d:ba:71:33:c6:26:a4:
e1:6d:21:06:90:6c:5b:9f:94:1e:00:6f:82:25:f9:
74:35:05:c1:38:29:28:db:1b:6b:85:50:d5:bb:91:
8f:60:e7:46:72:2c:10:4f:d0:65:c5:77:26:c3:b6:
a4:64:35:ae:c4:3c:5b:5e:ac:5e:95:78:2b:86:49:
21:fd:d7:ce:d7:92:01:ce:3a:dd:b2:d2:4a:b1:98:
80:32:78:6b:7a:82:8d:ca:d0:46:55:17:58:06:40:
4f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3F:83:61:CD:2B:6F:00:1C:BD:9A:DD:D1:05:9F:FE:49:20:36:76
X509v3 Authority Key Identifier:
keyid:AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:31:70:f4:b7:75:30:73:ea:5c:a1:43:9a:d3:11:15:73:9d:
9e:0a:f1:e8:78:d0:bd:25:e0:98:8a:0d:61:6e:de:03:fb:1d:
9d:1f:24:76:b9:78:3d:1e:88:9d:f4:50:37:d3:b5:86:21:df:
50:39:7b:1e:8f:5e:3d:63:c6:bd:ad:b7:eb:b1:5d:5c:bf:60:
04:e1:19:b3:6d:f9:f5:1e:11:d5:e8:22:e7:01:58:2e:c3:f2:
3e:ad:16:62:cb:a1:81:00:83:aa:44:c8:35:21:49:74:93:7d:
db:f5:dd:a6:16:58:03:68:fc:5c:8f:c6:48:40:20:63:d3:df:
ca:85:58:db:cd:67:1b:2e:d2:de:b8:3f:4e:d7:fc:fa:0c:bd:
0d:2d:fd:ad:dc:1c:8b:17:53:5a:8a:e3:b5:4f:16:77:02:58:
0c:67:80:ad:84:b0:59:f7:2c:e5:31:7f:6c:82:a7:d7:7b:24:
13:5e:a9:96:92:a8:9f:ca:c5:3f:b5:91:0c:ad:32:46:ca:4d:
d1:81:df:ae:98:98:f8:fa:81:ca:31:bf:f0:0c:5b:4b:29:c7:
4f:74:88:fa:10:86:ac:9e:ec:eb:5e:06:5e:30:bc:4a:93:e3:
a0:f7:ca:9a:56:d5:09:8c:a1:78:62:a8:c5:af:45:22:00:f3:
2a:7d:63:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:47:43 2026 by rpki-client