Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
File: qGBDVsdQGuIQSyzO087cXb3BFjs.mft (raw, json)
Hash identifier: CXREOme8lKceocYB8VVkQhFIRNCYSISXuUyiqdl/PVw=
Subject key identifier: AD:FD:5B:40:19:EA:27:18:B1:3E:09:29:EE:1E:6A:89:83:11:96:9B
Authority key identifier: A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
Certificate issuer: /CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Certificate serial: 019FAA885BD9842D45267436EF627B518C3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
Manifest number: 0A95
Signing time: Tue 28 Jul 2026 21:01:30 +0000
Manifest this update: Tue 28 Jul 2026 21:01:30 +0000
Manifest next update: Wed 29 Jul 2026 21:01:30 +0000
Files and hashes: 1: 7bHKsta4Dp1Yop5z_TE4GuyF-pw.roa (hash: D3+G4Ub921rB7gMLWBKfq6fOLKtP+5fJMq67UB4TEGk=)
2: E6joSh_KCsRZIeJuWns6mUSAvaQ.roa (hash: /pkjUktJxl5tikLBDBKNXbabaHGDBXecObDRlAAJ4OY=)
3: qGBDVsdQGuIQSyzO087cXb3BFjs.crl (hash: Fb422DJWIMRL5JG9S3fVOen0dqKmGK1JwF9CZPftGsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:5b:d9:84:2d:45:26:74:36:ef:62:7b:51:8c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Validity
Not Before: Jul 28 21:01:30 2026 GMT
Not After : Jul 29 21:01:30 2026 GMT
Subject: CN=adfd5b4019ea2718b13e0929ee1e6a898311969b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:90:4d:0f:12:77:bf:c2:1f:23:74:26:49:28:
5f:0c:c9:95:23:81:0e:65:4d:30:12:c6:5a:96:e0:
1d:b4:96:6d:3b:d6:b5:bc:69:25:f1:46:13:99:f3:
5e:bb:9b:c0:a8:97:12:00:a1:35:a1:7c:61:76:b7:
30:ed:aa:b1:66:86:4a:bc:53:f0:48:35:b0:d4:04:
34:62:ae:b4:4c:50:98:61:66:7b:19:42:52:92:08:
0b:1f:76:b0:da:20:2d:69:99:94:ff:0b:74:3a:e0:
8e:f1:bc:62:84:1b:60:f3:18:cf:de:b6:0a:a1:05:
71:4f:21:62:72:9e:50:08:6e:fe:10:91:53:55:58:
07:99:83:40:04:a7:e3:07:a5:21:8f:e0:a3:78:d4:
c5:c8:bf:77:97:01:e2:b7:e9:aa:05:a0:47:8f:cb:
b1:66:1f:67:cb:8b:b1:df:b3:aa:e2:fa:86:e7:0f:
cd:2e:35:b8:36:f4:ae:c1:bf:2f:d9:90:cd:e3:9e:
89:23:7c:1c:c8:df:7c:1a:72:38:3a:d6:5b:5b:95:
63:13:65:73:00:c2:de:e6:39:a6:60:d9:3c:d3:d9:
fe:59:32:3b:e3:95:b5:8c:ae:27:c0:e7:b6:e8:ef:
c5:38:20:16:50:3e:f9:2b:e3:fd:14:8d:97:9e:d3:
a2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:FD:5B:40:19:EA:27:18:B1:3E:09:29:EE:1E:6A:89:83:11:96:9B
X509v3 Authority Key Identifier:
keyid:A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:26:92:5b:5f:d2:ed:5f:01:9f:ea:55:9f:8b:c9:8c:d9:71:
22:ad:ee:84:bc:36:3c:05:c2:39:a1:80:5a:c8:4f:d5:89:da:
a7:0c:ec:5e:25:2d:8b:aa:7a:5d:bb:d2:82:59:bc:18:c0:22:
53:8a:16:5e:69:7e:59:91:32:2b:a8:aa:96:72:a8:bc:e4:f1:
55:72:73:82:1e:d5:3f:0c:ba:9c:21:c7:e7:45:58:ce:bf:ae:
12:69:0c:9e:30:75:f5:5c:d1:cf:47:43:8f:14:7b:00:2d:cd:
b4:96:cd:58:0f:41:23:a3:67:2f:cd:d0:b0:71:19:a4:67:d9:
84:54:af:54:64:a7:97:f6:18:32:8e:39:66:f3:8c:50:94:7f:
c4:a0:f8:4d:d5:4e:8c:de:8a:12:5f:5a:89:7b:25:54:d9:ad:
b2:ac:c4:61:74:a5:5f:0c:53:cf:57:34:b0:d6:4b:5e:4b:dc:
60:b7:7a:4c:3e:80:b8:c7:e8:03:b0:39:fe:97:b2:ff:a4:48:
19:6d:e3:6b:e0:04:bd:d5:d6:b8:d9:84:22:ea:d0:8d:df:69:
e7:ea:c0:7a:f2:6c:13:8b:e0:35:3a:55:6b:44:28:8a:ef:d2:
e5:67:85:0d:4a:7d:a0:a2:1b:fd:ba:29:d4:57:7a:94:5d:4d:
31:00:0d:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qiFvZhC1FJnQ272J7UYw6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NjA0MzU2Yzc1MDFhZTIxMDRiMmNjZWQzY2VkYzVkYmRj
MTE2M2IwHhcNMjYwNzI4MjEwMTMwWhcNMjYwNzI5MjEwMTMwWjAzMTEwLwYDVQQD
EyhhZGZkNWI0MDE5ZWEyNzE4YjEzZTA5MjllZTFlNmE4OTgzMTE5NjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpBNDxJ3v8IfI3QmSShfDMmVI4EO
ZU0wEsZaluAdtJZtO9a1vGkl8UYTmfNeu5vAqJcSAKE1oXxhdrcw7aqxZoZKvFPw
SDWw1AQ0Yq60TFCYYWZ7GUJSkggLH3aw2iAtaZmU/wt0OuCO8bxihBtg8xjP3rYK
oQVxTyFicp5QCG7+EJFTVVgHmYNABKfjB6Uhj+CjeNTFyL93lwHit+mqBaBHj8ux
Zh9ny4ux37Oq4vqG5w/NLjW4NvSuwb8v2ZDN456JI3wcyN98GnI4OtZbW5VjE2Vz
AMLe5jmmYNk809n+WTI745W1jK4nwOe26O/FOCAWUD75K+P9FI2XntOitwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK39W0AZ6icYsT4JKe4eaomDEZabMB8GA1UdIwQY
MBaAFKhgQ1bHUBriEEssztPO3F29wRY7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUdCRFZzZFFHdUlRU3l6TzA4N2NYYjNCRmpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC80NTg1MDEtYWNhYi00MmVkLThhNmEt
N2JlYmJiNzBjMDUwLzEvcUdCRFZzZFFHdUlRU3l6TzA4N2NYYjNCRmpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC80NTg1MDEtYWNhYi00MmVkLThhNmEtN2JlYmJiNzBjMDUw
LzEvcUdCRFZzZFFHdUlRU3l6TzA4N2NYYjNCRmpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYCaSW1/S
7V8Bn+pVn4vJjNlxIq3uhLw2PAXCOaGAWshP1YnapwzsXiUti6p6XbvSglm8GMAi
U4oWXml+WZEyK6iqlnKovOTxVXJzgh7VPwy6nCHH50VYzr+uEmkMnjB19VzRz0dD
jxR7AC3NtJbNWA9BI6NnL83QsHEZpGfZhFSvVGSnl/YYMo45ZvOMUJR/xKD4TdVO
jN6KEl9aiXslVNmtsqzEYXSlXwxTz1c0sNZLXkvcYLd6TD6AuMfoA7A5/pey/6RI
GW3ja+AEvdXWuNmEIurQjd9p5+rAevJsE4vgNTpVa0Qoiu/S5WeFDUp9oKIb/bop
1Fd6lF1NMQANIw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:25:51 2026 by rpki-client