Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
File: q9h7vvWUNUayqD0x7CuZrYg9Udc.mft (raw, json)
Hash identifier: h6GMFu0T2LdxPLFJBbm6n9VYo4UJuNLMLkjXjggDh8g=
Subject key identifier: 45:67:53:AA:7D:23:23:50:B8:16:25:60:53:D6:0C:0C:C3:4A:4A:65
Authority key identifier: AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
Certificate issuer: /CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Certificate serial: 019FA9E309F4F40CE583CAF10D9AB1E7601E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
Manifest number: 0F3D
Signing time: Tue 28 Jul 2026 18:00:56 +0000
Manifest this update: Tue 28 Jul 2026 18:00:56 +0000
Manifest next update: Wed 29 Jul 2026 18:00:56 +0000
Files and hashes: 1: AvxqIWZ-E7bh6G4yF6njgmxxMMI.roa (hash: Z+imZ5655NZiZ8Bxl+9m7o5Ixqod9YPgL5ar48lEv6c=)
2: K-ahINdD41JgL-Byf45-aq4Yt-Y.roa (hash: nC9sN51cfa4HOZXcNsr856hkOqt8qHqp9jXmGyml7So=)
3: Vm1c1WtjyqpCDDaFqRgWBPRuzTE.roa (hash: PhCalGp+MfsuVT1o+EaqpG+ubg4eyRCw+3C+dRQltm0=)
4: _pfciZ_m38T513lNmtA0Pwa9o5Q.roa (hash: APKIz+nFGp95g+RT9F18/CYBhne7Ta4WQQGn4JOIiSA=)
5: f2zTZpEDsIvIxhsE_dnFRl5OG_8.roa (hash: yHUBFABw75uTYWV0KIBM0hBMuveMLRvOaFfpx4Yhnrs=)
6: q9h7vvWUNUayqD0x7CuZrYg9Udc.crl (hash: XVf3RivvmIq3A5rv4DMxmwchcPUS8ytp+s7wb9jk8fI=)
7: xPg3ixts576_t0Y2Dcdl16y63bo.roa (hash: H6jrNL+Kk9BCnloBNI5o9De2Xbd5ueQf5l8EejUb5Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:09:f4:f4:0c:e5:83:ca:f1:0d:9a:b1:e7:60:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Validity
Not Before: Jul 28 18:00:56 2026 GMT
Not After : Jul 29 18:00:56 2026 GMT
Subject: CN=456753aa7d232350b816256053d60c0cc34a4a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c2:47:12:c9:ad:69:40:04:1a:b1:a2:f7:c0:
9c:83:89:01:9f:cb:fb:8f:10:8b:ff:39:4e:c6:f4:
ac:80:36:f4:aa:e1:b3:00:72:ef:80:fb:23:13:8a:
95:fe:23:ea:bd:76:bf:64:ca:ad:d2:ce:71:18:fb:
34:f5:59:8c:52:ad:bb:e7:41:25:60:af:80:ed:30:
7d:6b:e0:a1:34:ce:9e:3d:ee:f7:00:ad:a0:7e:00:
36:8b:c3:e9:4c:aa:ae:c1:ae:6f:28:ef:8c:89:17:
c0:87:cc:ce:44:af:23:de:60:5c:8b:da:df:25:c4:
3e:8e:e1:a8:99:48:f0:46:ff:39:aa:09:43:65:45:
1c:c5:b3:c7:e4:0b:8d:a1:bb:fb:b9:1a:f9:5f:4f:
1a:23:86:c8:02:8e:f0:e1:f6:92:ff:51:5a:81:8d:
da:8c:68:78:34:ff:e4:9e:3c:ab:bc:8f:dd:52:87:
49:7f:b7:e5:52:98:c9:ba:c4:96:0c:b4:15:27:e7:
9f:e9:9e:2e:12:7a:d2:65:31:16:41:8b:7b:7a:47:
6a:a3:46:5c:ac:0e:fd:df:4c:f2:37:8f:e4:b1:3c:
7f:31:0a:26:d1:32:2d:e7:f3:dc:d8:e1:d3:c5:91:
72:ad:cb:92:65:23:8a:62:ee:29:12:dc:4b:19:f9:
c5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:67:53:AA:7D:23:23:50:B8:16:25:60:53:D6:0C:0C:C3:4A:4A:65
X509v3 Authority Key Identifier:
keyid:AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a6:aa:fc:9f:8a:22:45:d3:29:03:78:d4:e7:99:8b:ae:9b:
62:b3:2e:0d:87:0c:a0:29:9d:26:f4:8d:01:c5:67:2a:32:1f:
a2:9e:58:b2:a9:ce:91:cc:58:e3:14:4f:23:f9:8d:41:01:62:
76:e1:05:d9:a8:80:04:61:ac:10:55:f5:94:06:4b:dc:70:ac:
33:c6:96:29:c6:a2:11:98:7f:e1:3d:bf:7c:af:fe:b6:94:e4:
64:34:95:df:a3:55:41:23:73:9d:ba:1e:b9:20:03:b6:a3:00:
9e:77:36:3f:84:31:d6:7e:49:3c:bc:a8:26:ac:d7:73:90:3d:
70:f5:af:a3:fa:6c:60:0a:52:72:e7:9f:13:b7:76:92:a6:d1:
a1:7b:96:77:53:94:6d:2d:2d:e3:6a:9a:98:14:b5:bc:cc:e7:
16:8a:e4:85:23:e6:4f:3e:79:ff:eb:16:40:05:50:43:22:85:
08:fc:de:ff:2a:ac:88:ea:a2:7d:b6:94:ac:47:8f:bc:50:a9:
67:5e:d2:e0:79:4d:ce:46:c7:c6:76:21:c4:52:e6:80:e2:58:
42:02:31:c6:72:c1:44:ca:fb:0a:35:23:8d:b6:46:aa:d3:ee:
ee:f7:2f:b2:e6:2d:21:36:78:23:88:c5:6f:7e:f3:88:84:11:
4e:e8:64:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:09:11 2026 by rpki-client