Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
File: Qd0c5O65L_U7YziS_UV7AR4RcfE.mft (raw, json)
Hash identifier: zYUwFpOXnYQQYZ5u/cGk6o9fq1m1pDHMRDYmyhMLpXA=
Subject key identifier: 9C:A0:0E:C1:FD:01:EA:43:D3:AB:55:2A:7E:64:2C:6B:55:B8:03:62
Authority key identifier: 41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1
Certificate issuer: /CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
Certificate serial: 019FA9AC476D610DBBD3CC9C6683D003B7C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
Manifest number: 08D9
Signing time: Tue 28 Jul 2026 17:01:07 +0000
Manifest this update: Tue 28 Jul 2026 17:01:07 +0000
Manifest next update: Wed 29 Jul 2026 17:01:07 +0000
Files and hashes: 1: 3OkMfbNK7oywxyEduLLpDjtw4pE.roa (hash: L7QwofR/zK4j6up4RavhL5dZloz6sdS+umIJ+YznSC4=)
2: BfXkb3Ul_TeZj4Afd4e_3oJ5s1c.roa (hash: 7KGanpBCj79/3lwELkYNBDfBwHWTdM1LjWtMw6Jbt2E=)
3: Qd0c5O65L_U7YziS_UV7AR4RcfE.crl (hash: VUwZFi126qCLl8Z8r0vdeJpOGjO1lsmnB85H9APhLfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:47:6d:61:0d:bb:d3:cc:9c:66:83:d0:03:b7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
Validity
Not Before: Jul 28 17:01:07 2026 GMT
Not After : Jul 29 17:01:07 2026 GMT
Subject: CN=9ca00ec1fd01ea43d3ab552a7e642c6b55b80362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:66:aa:e0:50:cf:78:10:de:5e:ca:99:93:6c:
7b:ba:31:32:1d:f4:22:a6:00:e7:0a:70:06:3e:35:
10:6b:4c:8c:1e:21:1b:9e:60:9f:ff:ec:9f:4f:82:
f0:14:c7:e0:90:5d:e9:ce:5b:3d:19:79:62:8c:fe:
98:3f:76:d9:a0:61:3f:4e:1f:7c:7d:c2:55:97:02:
b6:94:43:30:2c:56:e0:5c:a4:65:08:e7:1d:8f:07:
24:2d:d1:5b:0e:31:0b:39:db:1f:de:ff:9c:8f:d3:
12:88:df:0a:ef:f6:80:90:78:ce:17:8f:76:ae:26:
2e:63:ee:18:d3:48:40:24:70:aa:bc:75:5d:a7:de:
61:65:e6:ca:19:ac:1b:45:10:e1:6c:b0:6f:45:f8:
8e:7a:59:4c:9f:85:2b:5c:d1:c1:dc:d0:2c:41:35:
1c:d7:83:d8:20:7f:f1:48:74:49:98:bb:79:4d:ce:
a2:65:c8:d9:7a:c1:32:62:23:4b:9a:3b:d2:c7:fa:
ff:01:0c:20:78:da:db:54:05:39:95:f5:46:f2:a7:
a0:7c:fe:aa:14:c9:58:63:3a:5e:2b:8f:a0:04:70:
c8:bc:0e:26:7f:a0:60:0e:9b:68:35:38:9f:a4:2a:
88:d1:3d:5e:b0:0b:c3:d4:76:39:e4:2f:b8:7f:9f:
aa:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A0:0E:C1:FD:01:EA:43:D3:AB:55:2A:7E:64:2C:6B:55:B8:03:62
X509v3 Authority Key Identifier:
keyid:41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:4f:9a:42:b5:e8:4a:f2:b1:9f:f0:02:5f:cd:f5:fc:86:83:
be:e5:15:83:9c:4f:f0:3b:97:35:7b:1b:8e:d7:e0:2d:c8:5c:
ff:52:2a:26:dd:11:5f:51:ad:1b:72:22:e3:64:e0:ff:da:ca:
64:b9:15:ec:34:69:4b:11:82:5b:c7:04:d6:b0:31:c5:b6:4c:
5c:36:29:1c:17:65:98:79:3d:6d:eb:a4:24:cd:b8:26:3e:e7:
c0:fb:76:18:d3:b8:67:f5:80:17:6b:f4:85:9a:2c:55:25:eb:
79:d0:20:82:e0:49:78:35:0d:4c:f7:b8:4e:a0:ef:8f:20:05:
ed:a9:13:bb:54:c5:44:18:23:15:5b:a2:42:89:16:03:e9:cf:
7f:91:a4:e2:ee:db:1c:3b:35:72:bb:3f:d8:70:55:49:a2:f1:
f7:a4:03:39:53:49:cb:7b:4b:f7:57:8a:24:b0:a5:ec:57:c6:
cc:92:bf:4b:90:22:6f:6c:8f:b2:eb:7b:fd:3b:70:c5:65:02:
f4:35:4b:24:28:9a:f8:fb:7c:73:b2:1c:cc:7c:43:26:ea:cb:
4d:33:a1:e5:bf:5a:57:6c:60:30:47:57:ed:92:8a:4c:7f:cd:
76:ad:61:55:6a:d7:6b:a5:05:6c:04:e8:4b:bd:27:3e:68:89:
44:2b:fc:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+prEdtYQ2708ycZoPQA7fAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZGQxY2U0ZWViOTJmZjUzYjYzMzg5MmZkNDU3YjAxMWUx
MTcxZjEwHhcNMjYwNzI4MTcwMTA3WhcNMjYwNzI5MTcwMTA3WjAzMTEwLwYDVQQD
Eyg5Y2EwMGVjMWZkMDFlYTQzZDNhYjU1MmE3ZTY0MmM2YjU1YjgwMzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2maq4FDPeBDeXsqZk2x7ujEyHfQi
pgDnCnAGPjUQa0yMHiEbnmCf/+yfT4LwFMfgkF3pzls9GXlijP6YP3bZoGE/Th98
fcJVlwK2lEMwLFbgXKRlCOcdjwckLdFbDjELOdsf3v+cj9MSiN8K7/aAkHjOF492
riYuY+4Y00hAJHCqvHVdp95hZebKGawbRRDhbLBvRfiOellMn4UrXNHB3NAsQTUc
14PYIH/xSHRJmLt5Tc6iZcjZesEyYiNLmjvSx/r/AQwgeNrbVAU5lfVG8qegfP6q
FMlYYzpeK4+gBHDIvA4mf6BgDptoNTifpCqI0T1esAvD1HY55C+4f5+qAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJygDsH9AepD06tVKn5kLGtVuANiMB8GA1UdIwQY
MBaAFEHdHOTuuS/1O2M4kv1FewEeEXHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWQwYzVPNjVMX1U3WXppU19VVjdBUjRSY2ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8xYWNjNjEtYjk1YS00MDZlLTgwZmMt
ODg1MjFhZDk5YzdlLzEvUWQwYzVPNjVMX1U3WXppU19VVjdBUjRSY2ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8xYWNjNjEtYjk1YS00MDZlLTgwZmMtODg1MjFhZDk5Yzdl
LzEvUWQwYzVPNjVMX1U3WXppU19VVjdBUjRSY2ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXU+aQrXo
SvKxn/ACX831/IaDvuUVg5xP8DuXNXsbjtfgLchc/1IqJt0RX1GtG3Ii42Tg/9rK
ZLkV7DRpSxGCW8cE1rAxxbZMXDYpHBdlmHk9beukJM24Jj7nwPt2GNO4Z/WAF2v0
hZosVSXredAgguBJeDUNTPe4TqDvjyAF7akTu1TFRBgjFVuiQokWA+nPf5Gk4u7b
HDs1crs/2HBVSaLx96QDOVNJy3tL91eKJLCl7FfGzJK/S5Aib2yPsut7/TtwxWUC
9DVLJCia+Pt8c7IczHxDJurLTTOh5b9aV2xgMEdX7ZKKTH/Ndq1hVWrXa6UFbATo
S70nPmiJRCv8aw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:43:38 2026 by rpki-client