Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
File: QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft (raw, json)
Hash identifier: Oo5/4SPN6zjrMPAL5AD09/YslHYdih/jtNjx+VK909c=
Subject key identifier: 9A:B2:A4:96:F3:2A:A5:E3:BD:F2:FB:ED:D0:5E:17:59:3C:89:B0:69
Authority key identifier: 40:08:C4:86:EF:56:17:0C:41:2F:26:61:5D:0A:40:94:BC:A1:FB:2C
Certificate issuer: /CN=4008c486ef56170c412f26615d0a4094bca1fb2c
Certificate serial: 019FAC3F5650F5556F2D1B3FA3AE38AF2865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
Manifest number: 0283
Signing time: Wed 29 Jul 2026 05:00:59 +0000
Manifest this update: Wed 29 Jul 2026 05:00:59 +0000
Manifest next update: Thu 30 Jul 2026 05:00:59 +0000
Files and hashes: 1: LJsNdySzgVhzx0jmB1MhskD9sjw.roa (hash: vvBtgWk4yOZ39bGRHX8IHXL1uvrBI1sSum79JzJWzi4=)
2: QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl (hash: LXx4UGgZgwQXqWzDBWmjTgIHwQ/LKxX0+W5ory0hCfA=)
3: gwoZZje1uQSgGQlJSX6ThKbi_v4.roa (hash: yNNrupm/CBG1AsTLbQhGB7upwtdrSdYjgUOcddBU48E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:56:50:f5:55:6f:2d:1b:3f:a3:ae:38:af:28:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4008c486ef56170c412f26615d0a4094bca1fb2c
Validity
Not Before: Jul 29 05:00:59 2026 GMT
Not After : Jul 30 05:00:59 2026 GMT
Subject: CN=9ab2a496f32aa5e3bdf2fbedd05e17593c89b069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:de:c9:b5:9e:f6:65:32:e0:1a:d9:e5:45:86:
81:1f:47:b2:08:84:b0:18:57:83:1e:f4:90:99:d3:
32:cc:83:2e:f2:2a:50:14:96:65:2a:1d:84:ea:3e:
10:e7:65:06:7c:a6:4f:7c:5a:6a:38:0f:1c:6d:3b:
00:b3:22:78:29:1d:21:aa:0d:b2:76:7b:fa:f4:8a:
53:e6:19:82:e0:70:67:b4:0a:ab:40:0c:18:65:3b:
64:96:d9:13:be:43:f5:f1:fa:81:45:03:e7:09:d1:
17:c0:67:2b:aa:59:08:26:7f:3a:aa:89:28:f4:dc:
d3:50:57:61:90:91:16:cf:e8:8e:10:5f:b7:be:71:
f3:3f:8e:98:be:4a:6c:68:3d:9b:c6:ce:66:84:ab:
23:d9:c5:7f:13:f1:80:6a:a4:16:83:dc:d4:6d:38:
85:c3:dc:ab:41:2e:94:5d:6b:ac:b3:27:37:fe:19:
84:1a:55:f3:51:b2:bc:43:05:8b:83:a3:fe:90:71:
8f:7f:13:28:49:5b:cc:10:25:77:cc:0a:8f:07:66:
7c:f9:41:72:de:dc:86:62:30:07:fc:08:47:e6:05:
18:55:47:07:bf:c6:6e:fe:bd:9d:c1:37:28:5e:72:
64:22:48:a3:e2:a8:75:1a:4e:76:f1:28:1f:6f:cd:
c9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B2:A4:96:F3:2A:A5:E3:BD:F2:FB:ED:D0:5E:17:59:3C:89:B0:69
X509v3 Authority Key Identifier:
keyid:40:08:C4:86:EF:56:17:0C:41:2F:26:61:5D:0A:40:94:BC:A1:FB:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:47:49:8e:2e:4c:54:ab:1f:68:0b:51:ca:65:7f:74:a2:2e:
87:de:43:51:ef:7b:79:e9:65:ac:94:7c:fc:69:f5:29:c8:6c:
55:cf:f7:23:17:b8:43:6b:b8:30:74:54:c4:69:21:e9:5d:52:
37:48:b8:4c:1d:b8:35:73:0e:ae:40:c1:8a:52:7a:f7:13:0b:
4d:29:6a:ff:bb:ad:5b:81:5e:fd:61:81:c7:65:88:b0:df:be:
da:51:25:57:ce:cc:00:9c:e7:60:0a:79:d6:b4:ef:1d:1f:1d:
85:cf:2e:52:27:83:db:f0:7b:16:17:e6:b1:9b:de:3a:dd:28:
65:ed:93:9b:0a:81:aa:84:b9:38:d9:9b:af:b9:a4:d8:49:90:
2d:4f:70:4d:fa:68:ca:f2:73:c4:66:64:16:16:70:b6:6b:f1:
04:c7:84:06:b6:24:7d:91:6c:12:e4:6f:7e:37:d7:71:a0:28:
94:5c:fb:1b:ca:4d:47:01:3c:e8:17:01:a2:e8:d2:8d:33:72:
bb:9d:20:9c:aa:b4:b4:81:33:88:04:41:2d:87:c3:df:f5:50:
bb:92:41:d4:f8:19:aa:26:79:7c:10:52:0f:ee:42:5f:b2:06:
ba:1c:2a:1b:52:be:a8:81:37:68:ae:b8:d7:53:6c:af:c3:c8:
5c:45:09:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:47:45 2026 by rpki-client