Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
File: qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft (raw, json)
Hash identifier: PsPyyR0NUy9hjoKv8yEmuffs+ESLYInB+8Srxn3BGas=
Subject key identifier: 59:6C:A4:B6:F3:15:E2:E2:60:C5:9C:30:DF:9D:B2:9E:BE:EE:DE:25
Authority key identifier: A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
Certificate issuer: /CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Certificate serial: 019FAB2C6D7EFE3D1B3488852A488B5AE4BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
Manifest number: 1069
Signing time: Wed 29 Jul 2026 00:00:43 +0000
Manifest this update: Wed 29 Jul 2026 00:00:43 +0000
Manifest next update: Thu 30 Jul 2026 00:00:43 +0000
Files and hashes: 1: bhlKdXGmWCr9DFWjhc8P0wglZIc.roa (hash: jECjuduWw41GZ7hEmsgN93fP6SWVQcwry3yoxhpzbrA=)
2: qKMToe_MWgm-y06gJ6u3-V2krkc.roa (hash: IhBtU1yl4hzFItLKbqNgqy5ZA2HU2qEodxBl6f6yCww=)
3: qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl (hash: AxLBuzjh4yRAesdP0vFQo4DypnxpWavWGU2I+/3kkc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:6d:7e:fe:3d:1b:34:88:85:2a:48:8b:5a:e4:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Validity
Not Before: Jul 29 00:00:43 2026 GMT
Not After : Jul 30 00:00:43 2026 GMT
Subject: CN=596ca4b6f315e2e260c59c30df9db29ebeeede25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:24:10:95:67:4f:05:ee:0b:58:30:10:ab:6b:
f1:0d:58:3a:ed:6f:63:b9:66:b4:41:6f:36:a1:64:
6e:b8:df:60:8e:cc:08:70:21:8d:01:9f:3f:57:76:
f9:18:f0:5a:f7:93:b3:dc:9a:f8:83:19:28:0b:4c:
4b:75:77:36:28:54:e9:6a:35:25:d6:ab:a2:f2:70:
1f:4b:26:7a:0c:3c:a2:2f:a9:85:18:8f:9b:2e:15:
cc:fb:05:22:70:92:a9:43:0a:da:b5:5b:c9:7f:ca:
ac:19:64:1d:d0:1a:73:91:70:c6:ce:2c:fe:a5:01:
21:c5:66:8e:94:f3:77:0c:8f:62:89:f3:bb:31:37:
d7:58:77:ea:67:00:16:d1:63:b1:13:35:18:aa:5b:
8c:8a:cf:c5:17:df:a4:a3:6b:72:dd:22:89:8c:bb:
6d:4b:34:0d:68:41:ed:83:b7:61:d8:35:bc:52:9b:
ca:91:3e:02:3f:e4:7d:08:67:38:e3:85:1b:5d:50:
d8:0b:22:4f:f7:c0:de:74:3d:f7:77:3e:7f:62:cf:
86:8f:28:9b:a0:8e:ea:a2:33:2f:39:14:79:79:79:
67:94:48:32:58:72:f2:2e:67:89:e9:bd:79:6e:8f:
4c:25:28:ae:d0:39:fe:a8:3a:7d:19:e3:cf:e2:6f:
90:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6C:A4:B6:F3:15:E2:E2:60:C5:9C:30:DF:9D:B2:9E:BE:EE:DE:25
X509v3 Authority Key Identifier:
keyid:A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:28:1d:e9:a9:81:06:6c:ed:df:95:50:97:7f:74:9d:8a:d8:
94:8d:59:23:7a:4d:8d:50:06:c3:3e:e0:36:98:1c:63:58:ac:
f5:87:e4:74:22:e9:09:b2:f1:e1:f9:c2:7b:73:b7:9a:83:61:
b5:01:8a:ed:22:53:02:a9:aa:2b:c1:08:6e:d6:89:03:a1:ae:
32:c5:e6:9c:c2:09:8c:b3:6e:2c:ab:18:47:45:28:b0:44:a1:
94:cd:10:fe:eb:08:3c:ad:bb:c0:be:96:85:12:2f:94:6f:36:
11:09:65:a6:74:4f:ef:ff:bd:62:0a:0f:4d:d6:19:17:f9:a7:
fa:8a:85:d4:28:bc:15:30:46:cb:29:6b:dc:ea:f7:a1:c6:8d:
1a:e9:ad:42:d2:55:c1:6d:28:74:43:52:a3:1a:e5:15:ee:d6:
74:55:70:6c:f8:32:38:3f:18:54:df:9f:f2:88:6f:96:fe:ba:
0d:12:b3:77:4f:6d:83:1f:79:c2:cf:fc:97:b0:5f:2d:e5:cc:
a8:05:62:15:24:cd:ab:be:8b:ad:ec:54:b9:37:bf:aa:6c:3e:
46:f6:98:a9:47:24:6a:72:8b:49:6f:64:9a:6c:79:95:2f:f1:
c2:3e:38:94:55:64:60:e8:a1:f3:75:dd:e3:d8:1d:19:d0:49:
fd:8a:3f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:47:56 2026 by rpki-client