Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
File: qajkTlc8U8cZIxL8xyFQ0t43fW0.mft (raw, json)
Hash identifier: 0raI1AO5lu0/jqyMSJVNaROajxNlblLL0RiOzWd+TDM=
Subject key identifier: C1:9D:E0:3A:1B:85:6B:B4:05:A4:EB:BF:33:7A:65:36:DC:8D:2C:D1
Authority key identifier: A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D
Certificate issuer: /CN=a9a8e44e573c53c7192312fcc72150d2de377d6d
Certificate serial: 019FACAD29CDAD92A6D7A276AE26AB3D164E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
Manifest number: 19DB
Signing time: Wed 29 Jul 2026 07:00:57 +0000
Manifest this update: Wed 29 Jul 2026 07:00:57 +0000
Manifest next update: Thu 30 Jul 2026 07:00:57 +0000
Files and hashes: 1: hLY2--5SKTnZ1QC36Cf-E8Iq5ho.roa (hash: lfg0kzyvgHw2ZfZ5eS4nTJ7bYAVmeebrxL6dhvaG0Ms=)
2: qajkTlc8U8cZIxL8xyFQ0t43fW0.crl (hash: 22Dbm6ojtfc6HqgXtCTr0tCXNlgT320WhvKTybn5fNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ad:29:cd:ad:92:a6:d7:a2:76:ae:26:ab:3d:16:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a8e44e573c53c7192312fcc72150d2de377d6d
Validity
Not Before: Jul 29 07:00:57 2026 GMT
Not After : Jul 30 07:00:57 2026 GMT
Subject: CN=c19de03a1b856bb405a4ebbf337a6536dc8d2cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e8:95:85:ed:f2:7f:a9:16:13:ef:89:d2:b1:
0d:69:7c:f1:7f:cc:16:4b:27:e4:10:3e:cf:3d:4b:
e2:7c:44:55:24:7f:22:a6:76:7a:71:a7:ba:9f:e0:
10:92:28:4a:d3:28:92:fa:9d:cd:0a:71:a6:d0:eb:
f1:95:a9:5f:75:91:13:1b:b3:b9:b1:69:3c:e5:9c:
71:2c:fa:83:bd:07:e0:83:af:f5:df:d3:6a:6f:61:
39:6f:5b:db:d8:ac:f9:0b:25:86:8c:08:13:b1:05:
8c:76:7c:21:bd:b7:ff:d1:3d:06:8c:9e:b0:14:74:
22:63:99:9a:57:ec:10:d9:b8:61:12:5a:93:00:39:
06:b9:d8:fb:ee:e5:ae:c1:f8:17:07:78:77:67:60:
92:1e:45:57:76:97:ec:40:6d:38:80:e8:5b:5e:39:
ec:06:bd:4d:8d:4f:97:5c:92:fe:27:bd:1f:eb:af:
9c:7a:71:57:a1:fb:bf:12:c4:b8:3f:46:94:80:b0:
5d:0f:a2:c6:e5:79:22:70:f6:e0:50:d9:f2:b8:2a:
7f:37:27:c5:45:81:24:9d:10:ec:a7:40:75:2d:ff:
f8:70:4d:69:53:75:b6:fe:6d:4b:33:99:e1:98:a6:
e5:2b:a9:0f:ab:3e:48:f4:69:72:cd:73:d9:7d:5a:
22:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9D:E0:3A:1B:85:6B:B4:05:A4:EB:BF:33:7A:65:36:DC:8D:2C:D1
X509v3 Authority Key Identifier:
keyid:A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:51:5f:98:5b:0a:c9:14:6e:3c:c3:25:89:db:6b:66:fe:8a:
7b:85:64:53:d5:0d:86:b2:44:24:65:29:11:08:38:f8:a5:c0:
db:0a:fb:2a:93:a2:a1:04:43:53:66:8e:ff:07:7d:22:fc:3f:
a5:09:ec:68:3c:d5:9e:83:c1:57:91:f8:99:d1:2c:de:9c:32:
3b:ae:19:16:d9:78:63:68:09:17:79:51:77:ac:13:6e:2c:a7:
3c:04:c2:0f:01:8b:ae:8b:72:c2:47:66:7c:2e:22:b0:89:88:
cb:be:f2:11:87:10:de:93:9b:c5:22:29:28:c6:25:1b:2a:8d:
57:9a:f1:21:dd:39:40:2e:fa:21:7f:df:88:0c:09:fa:6e:d9:
d8:71:72:89:af:ad:e4:4a:46:39:69:43:4f:00:13:b1:85:cb:
0d:12:00:f6:7f:82:a9:4d:1f:60:97:de:59:83:01:e2:3f:11:
5d:d9:fa:be:51:2d:a2:1f:2b:b7:b1:f7:60:ae:99:69:73:73:
89:07:f4:75:b2:77:54:c6:21:dc:1f:ec:0b:a0:79:79:0d:c2:
13:f7:44:7b:6f:18:8b:01:6e:4d:d0:3e:40:05:84:f0:0b:da:
3e:18:10:44:de:22:b5:7e:f3:4f:a3:34:dc:00:97:2d:6f:64:
c7:88:de:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:10:04 2026 by rpki-client