Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
File: qyt5QmiS7R2nsuYYZ3DPsErmA80.mft (raw, json)
Hash identifier: IkK9Xg0qRdUUWBhm7RzmSiIFpiXT7wR6k9haNXXglkU=
Subject key identifier: CD:E6:15:52:E7:4C:41:3C:94:AD:8F:67:6C:28:F8:4B:9E:CA:30:47
Authority key identifier: AB:2B:79:42:68:92:ED:1D:A7:B2:E6:18:67:70:CF:B0:4A:E6:03:CD
Certificate issuer: /CN=ab2b79426892ed1da7b2e6186770cfb04ae603cd
Certificate serial: 019FA82B01646F7FE25157500F2AFBBA7CCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
Manifest number: 0C79
Signing time: Tue 28 Jul 2026 10:00:18 +0000
Manifest this update: Tue 28 Jul 2026 10:00:18 +0000
Manifest next update: Wed 29 Jul 2026 10:00:18 +0000
Files and hashes: 1: Ep1UdBXzCWlqSTpFzem1RUVZTHA.asa (hash: f0L/PAFatn0IgaIhqoEyZoZ0cRFuKV57J/o6cZd4vJM=)
2: UVwGUstyqvelkq37jwrCyB34k94.asa (hash: E7qX0L3M0NDAHs6Gtk5Rp5Gs8S25rdSfJnVG4BtVL6w=)
3: qyt5QmiS7R2nsuYYZ3DPsErmA80.crl (hash: +lSFaEeGMTOapuXdjmWxY/Id+Y+MqlZrlcm4kbzbHEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:01:64:6f:7f:e2:51:57:50:0f:2a:fb:ba:7c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2b79426892ed1da7b2e6186770cfb04ae603cd
Validity
Not Before: Jul 28 10:00:18 2026 GMT
Not After : Jul 29 10:00:18 2026 GMT
Subject: CN=cde61552e74c413c94ad8f676c28f84b9eca3047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:02:62:46:a8:be:c4:b5:57:86:9b:5c:52:83:
81:0c:55:59:42:3e:f5:76:cc:2a:e1:5e:66:3b:68:
8e:2a:67:c7:f1:9e:18:a4:01:13:a4:aa:f1:34:03:
3a:08:07:84:ed:99:45:f3:25:da:bc:0b:5b:49:82:
10:f4:ba:e9:1b:b1:8b:a1:bd:50:76:01:c8:59:bc:
5e:52:bf:a0:8a:3b:7e:b2:9d:a0:7d:ae:83:bd:a3:
65:2d:a1:be:a6:91:d3:c7:7b:5b:cc:3b:08:cb:0d:
cd:cd:0b:3a:81:87:ef:18:99:91:af:1c:c0:f0:d3:
fa:8d:95:58:2f:30:9e:d8:97:f3:5f:4b:9a:91:29:
6a:56:8a:2b:ed:d6:d2:6b:06:39:17:71:d6:4f:f2:
ac:0c:47:aa:4c:da:19:37:e2:cf:06:27:0f:a6:c8:
e8:44:c4:70:c1:69:e8:07:e4:be:85:19:7c:35:4e:
d0:c0:34:09:3d:a6:ee:d1:e7:fb:7d:17:d5:31:a3:
54:3f:6a:b8:fd:0c:82:09:be:f3:21:bf:09:ee:03:
52:23:df:7e:13:e3:31:cb:c0:6a:ef:57:d8:5f:08:
2a:f5:5f:a9:da:60:9d:a5:ed:f7:9e:30:42:26:fa:
8d:e8:fc:35:c5:a2:ae:6d:a7:31:75:82:90:44:a3:
33:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E6:15:52:E7:4C:41:3C:94:AD:8F:67:6C:28:F8:4B:9E:CA:30:47
X509v3 Authority Key Identifier:
keyid:AB:2B:79:42:68:92:ED:1D:A7:B2:E6:18:67:70:CF:B0:4A:E6:03:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:62:16:ce:d5:0c:2b:61:5e:a5:90:f2:d4:3c:4e:89:dd:39:
3a:40:9f:54:c0:85:cc:cb:20:9e:33:31:18:50:c5:00:1c:b3:
82:8f:2b:22:8f:e5:41:fe:b6:f7:6d:d3:6b:75:cc:47:b7:4a:
52:ff:49:5e:0f:af:c3:d8:bd:aa:2f:f8:4c:bb:81:f7:e7:d8:
e0:d4:9f:9c:42:27:89:5f:8b:8e:7c:24:f6:30:43:59:ae:ff:
ba:1a:39:0d:ae:93:46:a6:1b:6c:6f:37:7d:68:d7:03:d9:93:
d9:79:57:8b:36:ab:96:4c:10:e4:c2:ad:cb:c7:ad:23:52:d4:
b5:44:25:3e:9f:91:cc:db:d8:2e:35:17:80:19:f8:4a:7e:71:
e7:5d:ba:c9:5c:6a:f9:58:ab:2b:a6:5e:64:55:65:b0:f4:1b:
6c:f5:21:55:7a:fc:91:83:3e:d6:21:9e:d5:85:50:18:79:84:
83:a0:4a:81:54:ab:03:0b:87:42:fa:b0:0e:04:8e:79:dd:e0:
b4:16:c6:f2:19:b0:3b:8e:28:aa:ea:46:2b:79:5a:90:1a:0e:
1b:92:5b:f3:9d:d0:bb:4b:cb:31:6a:06:a8:21:18:d9:c3:5a:
43:48:b4:81:53:55:49:59:18:73:d6:0b:82:64:e8:57:28:c5:
4c:cf:9a:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oKwFkb3/iUVdQDyr7unzKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMmI3OTQyNjg5MmVkMWRhN2IyZTYxODY3NzBjZmIwNGFl
NjAzY2QwHhcNMjYwNzI4MTAwMDE4WhcNMjYwNzI5MTAwMDE4WjAzMTEwLwYDVQQD
EyhjZGU2MTU1MmU3NGM0MTNjOTRhZDhmNjc2YzI4Zjg0YjllY2EzMDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAJiRqi+xLVXhptcUoOBDFVZQj71
dswq4V5mO2iOKmfH8Z4YpAETpKrxNAM6CAeE7ZlF8yXavAtbSYIQ9LrpG7GLob1Q
dgHIWbxeUr+gijt+sp2gfa6DvaNlLaG+ppHTx3tbzDsIyw3NzQs6gYfvGJmRrxzA
8NP6jZVYLzCe2JfzX0uakSlqVoor7dbSawY5F3HWT/KsDEeqTNoZN+LPBicPpsjo
RMRwwWnoB+S+hRl8NU7QwDQJPabu0ef7fRfVMaNUP2q4/QyCCb7zIb8J7gNSI99+
E+Mxy8Bq71fYXwgq9V+p2mCdpe33njBCJvqN6Pw1xaKubacxdYKQRKMzyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM3mFVLnTEE8lK2PZ2wo+EueyjBHMB8GA1UdIwQY
MBaAFKsreUJoku0dp7LmGGdwz7BK5gPNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXl0NVFtaVM3UjJuc3VZWVozRFBzRXJtQTgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9hMjYwNTAtNDllYy00OTU1LTk4MTAt
ZTU0NTM3MDdhNThlLzEvcXl0NVFtaVM3UjJuc3VZWVozRFBzRXJtQTgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9hMjYwNTAtNDllYy00OTU1LTk4MTAtZTU0NTM3MDdhNThl
LzEvcXl0NVFtaVM3UjJuc3VZWVozRFBzRXJtQTgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOWIWztUM
K2FepZDy1DxOid05OkCfVMCFzMsgnjMxGFDFAByzgo8rIo/lQf62923Ta3XMR7dK
Uv9JXg+vw9i9qi/4TLuB9+fY4NSfnEIniV+Ljnwk9jBDWa7/uho5Da6TRqYbbG83
fWjXA9mT2XlXizarlkwQ5MKty8etI1LUtUQlPp+RzNvYLjUXgBn4Sn5x5126yVxq
+VirK6ZeZFVlsPQbbPUhVXr8kYM+1iGe1YVQGHmEg6BKgVSrAwuHQvqwDgSOed3g
tBbG8hmwO44oqupGK3lakBoOG5Jb853Qu0vLMWoGqCEY2cNaQ0i0gVNVSVkYc9YL
gmToVyjFTM+aIw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 17:10:35 2026 by rpki-client