Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
File: qGBDVsdQGuIQSyzO087cXb3BFjs.mft (raw, json)
Hash identifier: fCWDqpa5bFXYGBO6IENJdUiin+YKpl74sIJHci9XvfA=
Subject key identifier: 37:B0:40:74:05:16:73:F2:A8:FD:63:5C:F4:2F:86:2E:57:B3:C2:94
Authority key identifier: A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
Certificate issuer: /CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Certificate serial: 019FA89A57CAB62F768405EAD92E03CA3BB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
Manifest number: 0A94
Signing time: Tue 28 Jul 2026 12:01:55 +0000
Manifest this update: Tue 28 Jul 2026 12:01:55 +0000
Manifest next update: Wed 29 Jul 2026 12:01:55 +0000
Files and hashes: 1: 7bHKsta4Dp1Yop5z_TE4GuyF-pw.roa (hash: D3+G4Ub921rB7gMLWBKfq6fOLKtP+5fJMq67UB4TEGk=)
2: E6joSh_KCsRZIeJuWns6mUSAvaQ.roa (hash: /pkjUktJxl5tikLBDBKNXbabaHGDBXecObDRlAAJ4OY=)
3: qGBDVsdQGuIQSyzO087cXb3BFjs.crl (hash: OcLhswJBigrQO/GznoTN3HsrGzS3VLPG9T3kQrsoAeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:57:ca:b6:2f:76:84:05:ea:d9:2e:03:ca:3b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Validity
Not Before: Jul 28 12:01:55 2026 GMT
Not After : Jul 29 12:01:55 2026 GMT
Subject: CN=37b04074051673f2a8fd635cf42f862e57b3c294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7a:cc:11:57:71:00:62:2f:2e:61:f8:a8:8f:
3d:7e:25:f7:78:b6:51:13:a2:2a:1f:8a:d8:6c:38:
ac:94:05:e3:91:93:f8:95:24:e2:ca:62:e0:de:e0:
e1:ab:7b:54:95:05:cd:97:da:f0:1e:0d:7e:6c:e8:
a1:cf:a1:96:72:e1:52:9b:aa:4d:2d:32:10:22:eb:
00:93:ad:43:47:28:b4:fe:9f:af:2c:5a:cf:93:b5:
9f:75:d3:fb:6b:75:a6:22:5b:2e:35:3b:38:bf:b5:
84:b0:6f:22:0a:5a:ac:9b:d0:41:e8:f8:cc:93:a5:
e6:e6:67:df:e8:5e:28:7c:75:20:61:eb:1c:a3:fc:
05:56:62:d9:1c:e4:33:5d:58:e3:ab:d3:af:d2:c6:
9e:d6:0c:b4:9d:66:11:a1:fd:de:d2:27:d3:fa:e8:
19:7a:52:bb:f4:41:60:75:aa:14:53:01:5d:ae:a0:
31:d1:57:e9:0f:e2:2e:9e:2f:15:40:06:cd:63:a9:
f6:b9:7c:5d:1c:15:71:69:be:64:fc:8b:37:e5:72:
16:ae:b3:de:e9:49:e6:3a:0f:7a:1e:ad:ac:c4:2a:
1e:98:f4:fd:0a:3b:93:49:0d:47:58:cb:28:3e:cd:
22:9b:8e:ae:cd:1e:01:b2:da:cb:d8:da:ee:42:e5:
ac:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B0:40:74:05:16:73:F2:A8:FD:63:5C:F4:2F:86:2E:57:B3:C2:94
X509v3 Authority Key Identifier:
keyid:A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:03:99:67:28:24:30:e9:a8:c0:25:60:4b:9c:4e:c1:04:93:
82:d1:60:f0:3b:8a:fe:6a:d1:57:65:28:6b:68:93:31:38:71:
f8:3b:46:f6:4a:eb:8a:7f:9e:88:ae:e4:7c:be:95:48:ff:b5:
ab:e6:42:2a:68:62:5c:04:f2:cd:6e:e9:41:05:e2:a9:6d:e2:
b6:d5:57:a5:1a:9b:af:77:ee:29:25:e6:43:e3:48:c1:b9:83:
99:51:eb:51:fd:4d:e3:7a:44:a2:a7:7d:27:fc:45:ff:fe:d7:
0b:be:45:7c:c0:7a:f3:db:a8:9f:17:c6:b0:d9:94:13:c8:f6:
57:b1:50:65:3b:83:93:bb:e7:8d:6e:c2:cf:e4:16:94:13:c8:
a0:d8:70:ac:f2:55:fa:eb:9f:44:87:f6:06:a6:77:89:3d:2c:
45:a4:bd:a9:c9:c1:b6:0d:12:8d:31:68:0f:b4:cb:20:0f:ed:
f2:a3:86:ef:db:26:36:bd:1f:89:49:33:8d:cc:9e:1e:d9:36:
9b:8c:da:d8:45:24:ce:c7:51:4f:eb:0b:42:5e:49:f2:ac:33:
25:89:5d:5b:41:80:1a:b9:fb:79:74:3f:c6:1a:b9:1d:55:a4:
c0:db:9e:30:13:b8:36:04:e5:ad:06:98:f6:6a:7b:9d:34:4f:
7f:f9:64:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:58:53 2026 by rpki-client