Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
File: QSasSvr9JpiBwQrS7KL03vjtvSE.mft (raw, json)
Hash identifier: 7JDPf5B8AE2/NHz8wLM4YAviAKJxrCFzQE5nnWy+1Rs=
Subject key identifier: 3D:AE:0D:86:86:E4:9A:B2:2F:6F:2D:F2:2F:AA:19:A1:9A:E9:7B:2C
Authority key identifier: 41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
Certificate issuer: /CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Certificate serial: 019FAA87526381B6DF54705BB9A8AF853B59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
Manifest number: 19D6
Signing time: Tue 28 Jul 2026 21:00:22 +0000
Manifest this update: Tue 28 Jul 2026 21:00:22 +0000
Manifest next update: Wed 29 Jul 2026 21:00:22 +0000
Files and hashes: 1: QSasSvr9JpiBwQrS7KL03vjtvSE.crl (hash: ReyyRD2wAX7KyQO+9nUgqqdU+FxjHczPm3OxXF6Knkw=)
2: WWEiiRclZJiJc4Yp9PYYvoQpmSA.roa (hash: hrQ5qgVNUSC0WxamoxJ9EGRyxZYAj1wkc81Qc600uiM=)
3: zXqwVcwlXpQqAoueTVMdXtH7SG0.roa (hash: jcregEqkWYaC2zgOmhpk2TEJDFYrMRRaV054ziFvW/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:52:63:81:b6:df:54:70:5b:b9:a8:af:85:3b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Validity
Not Before: Jul 28 21:00:22 2026 GMT
Not After : Jul 29 21:00:22 2026 GMT
Subject: CN=3dae0d8686e49ab22f6f2df22faa19a19ae97b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:db:21:18:2b:a1:53:a5:66:10:22:d4:49:67:
be:37:fa:b0:08:23:41:d2:2b:3a:4c:32:0a:27:52:
2e:fb:41:ec:23:cf:48:a0:93:1a:fa:c1:e4:2d:8c:
f6:8c:c7:b5:4a:9d:c7:cf:42:87:18:3d:78:09:85:
3f:7d:25:b2:95:dc:a6:7a:e0:6f:ae:78:fe:21:ce:
bc:e1:74:06:c2:a1:e8:f6:1c:10:f8:3f:b7:76:4e:
bf:9d:dc:8a:47:c6:e8:e0:04:44:41:6f:fb:a2:b2:
ae:9d:27:ac:8d:53:de:0f:1d:a8:0b:3d:6c:06:21:
d0:7f:cb:b9:99:92:77:31:3e:4b:af:19:89:84:39:
3a:89:1c:48:b7:bc:5a:53:07:39:22:f1:c2:99:61:
eb:3c:bb:6c:ad:4e:b0:af:62:85:04:b3:81:d6:f0:
f6:20:3b:e1:9e:6b:5a:8b:ea:40:d3:78:df:fe:74:
02:9c:99:52:65:06:d1:52:f7:b5:9c:38:97:b1:fa:
c4:d4:2f:f7:9b:2b:84:f9:e3:c5:85:2d:e3:a8:f2:
92:9d:46:b8:72:2e:f5:3d:81:88:aa:6d:e4:d4:9b:
5b:fd:8f:a1:ba:7d:9d:af:70:1c:4a:41:28:2a:94:
4c:15:96:dd:06:ee:a9:14:0e:a2:51:e5:38:e2:9b:
73:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:AE:0D:86:86:E4:9A:B2:2F:6F:2D:F2:2F:AA:19:A1:9A:E9:7B:2C
X509v3 Authority Key Identifier:
keyid:41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:bd:b6:b0:e1:dc:df:a2:bb:37:30:1f:b6:30:1b:cd:09:a0:
69:34:71:0c:d3:35:4f:9a:9a:02:75:ec:fd:72:ed:fa:55:67:
f5:0d:ce:71:13:7c:d1:9a:f3:52:72:46:98:49:c7:3d:ab:18:
09:bb:f4:4e:e1:3e:6f:82:78:06:92:96:7d:8b:f0:94:24:a1:
60:64:cd:1d:6e:61:35:5d:14:cb:ea:e3:a2:41:e9:86:4e:95:
78:e1:dc:55:71:0c:9c:83:f0:91:9c:9a:9e:12:88:9b:41:d3:
8c:23:1b:b3:22:7b:d6:a2:83:86:5e:55:58:c0:3c:5f:2d:b9:
ac:bb:f2:33:ee:37:05:19:f3:ee:4d:a5:d6:74:2e:f8:3c:94:
19:2b:0e:6f:99:6e:6c:c9:b8:08:df:56:7d:76:3a:96:72:39:
31:df:f2:f3:d5:72:6a:4d:e1:5c:e0:b0:6d:24:41:72:b6:72:
9f:a3:82:f8:a8:89:ed:60:0c:20:17:f3:ed:4c:e2:76:25:b8:
f0:74:08:aa:1e:c6:33:d3:06:85:a2:e6:8f:65:d1:eb:60:9c:
cb:e5:e4:b6:83:46:bd:c5:60:79:65:0e:2b:86:e1:24:17:93:
d1:41:e2:c7:c9:b2:3f:3a:d7:7f:13:e5:53:d1:1f:18:b7:36:
d2:b7:ce:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qh1JjgbbfVHBbuaivhTtZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMjZhYzRhZmFmZDI2OTg4MWMxMGFkMmVjYTJmNGRlZjhl
ZGJkMjEwHhcNMjYwNzI4MjEwMDIyWhcNMjYwNzI5MjEwMDIyWjAzMTEwLwYDVQQD
EygzZGFlMGQ4Njg2ZTQ5YWIyMmY2ZjJkZjIyZmFhMTlhMTlhZTk3YjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotshGCuhU6VmECLUSWe+N/qwCCNB
0is6TDIKJ1Iu+0HsI89IoJMa+sHkLYz2jMe1Sp3Hz0KHGD14CYU/fSWyldymeuBv
rnj+Ic684XQGwqHo9hwQ+D+3dk6/ndyKR8bo4AREQW/7orKunSesjVPeDx2oCz1s
BiHQf8u5mZJ3MT5LrxmJhDk6iRxIt7xaUwc5IvHCmWHrPLtsrU6wr2KFBLOB1vD2
IDvhnmtai+pA03jf/nQCnJlSZQbRUve1nDiXsfrE1C/3myuE+ePFhS3jqPKSnUa4
ci71PYGIqm3k1Jtb/Y+hun2dr3AcSkEoKpRMFZbdBu6pFA6iUeU44ptzmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2uDYaG5JqyL28t8i+qGaGa6XssMB8GA1UdIwQY
MBaAFEEmrEr6/SaYgcEK0uyi9N747b0hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVNhc1N2cjlKcGlCd1FyUzdLTDAzdmp0dlNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi85NGRkMmEtNTA0Ni00ODgzLTkxZGEt
YzM5OWJlMDMxYjRhLzEvUVNhc1N2cjlKcGlCd1FyUzdLTDAzdmp0dlNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi85NGRkMmEtNTA0Ni00ODgzLTkxZGEtYzM5OWJlMDMxYjRh
LzEvUVNhc1N2cjlKcGlCd1FyUzdLTDAzdmp0dlNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUb22sOHc
36K7NzAftjAbzQmgaTRxDNM1T5qaAnXs/XLt+lVn9Q3OcRN80ZrzUnJGmEnHPasY
Cbv0TuE+b4J4BpKWfYvwlCShYGTNHW5hNV0Uy+rjokHphk6VeOHcVXEMnIPwkZya
nhKIm0HTjCMbsyJ71qKDhl5VWMA8Xy25rLvyM+43BRnz7k2l1nQu+DyUGSsOb5lu
bMm4CN9WfXY6lnI5Md/y89Vyak3hXOCwbSRBcrZyn6OC+KiJ7WAMIBfz7UzidiW4
8HQIqh7GM9MGhaLmj2XR62Ccy+XktoNGvcVgeWUOK4bhJBeT0UHix8myPzrXfxPl
U9EfGLc20rfOwQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:45:09 2026 by rpki-client