Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
File: qsV1yvoAvEHVfElKwfXbz-54My4.mft (raw, json)
Hash identifier: CU4JN5qRh2KxsIPBDp+xbhaPtRGsnCBD67OLy7VWYUU=
Subject key identifier: 7A:A6:FA:29:8B:96:9B:CB:45:80:15:E0:D8:E6:C7:CC:2D:D0:96:9C
Authority key identifier: AA:C5:75:CA:FA:00:BC:41:D5:7C:49:4A:C1:F5:DB:CF:EE:78:33:2E
Certificate issuer: /CN=aac575cafa00bc41d57c494ac1f5dbcfee78332e
Certificate serial: 019FA9AC0D704DC9C98843C16A87A40AD5F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 17:00:52 +0000
Manifest this update: Tue 28 Jul 2026 17:00:52 +0000
Manifest next update: Wed 29 Jul 2026 17:00:52 +0000
Files and hashes: 1: IPShWGUXlOQysmlHN59ggxp79no.roa (hash: h66cPY9mKXXd6y+2DIeK9BUX2MMAhCZtqkFLMLMhdLk=)
2: UUFYP2GnG27gknclmWjbFXee-5c.asa (hash: vtuGXz4SCbN+csRPRpu2i0eRfkh5mJ/Z4XlVSXzxMy4=)
3: qsV1yvoAvEHVfElKwfXbz-54My4.crl (hash: GOZj9WHyqF7QbyDE3hE1M1nhrG+LOknQCQB7rHD0fTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:0d:70:4d:c9:c9:88:43:c1:6a:87:a4:0a:d5:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac575cafa00bc41d57c494ac1f5dbcfee78332e
Validity
Not Before: Jul 28 17:00:52 2026 GMT
Not After : Jul 29 17:00:52 2026 GMT
Subject: CN=7aa6fa298b969bcb458015e0d8e6c7cc2dd0969c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6d:aa:c4:4d:89:38:f2:fb:5c:db:40:99:37:
9b:f0:47:f0:cd:c4:03:45:97:ed:0c:c4:a1:8f:4a:
8d:92:50:9b:62:a3:15:3f:fc:96:3a:73:40:dd:d4:
98:58:be:0d:d2:39:49:c2:9c:30:a7:e2:ac:ba:c7:
8d:fb:db:d2:6a:30:89:8f:3f:e5:4f:f0:ec:76:f0:
fc:27:e0:66:84:7a:b2:36:bf:62:2a:89:d0:25:d8:
26:9e:1a:5d:0a:2f:8b:d6:77:85:08:df:c8:5a:80:
8a:c9:33:e6:54:1e:af:b3:ae:fe:38:b3:20:c3:65:
16:25:1f:99:c0:94:17:c1:a9:48:26:09:e8:66:54:
26:a0:93:58:cb:f9:45:ac:ab:84:61:ab:3f:29:ab:
a9:69:4e:4b:ee:7c:57:47:75:88:7f:47:af:9c:25:
a3:8a:6a:ef:db:0f:ce:65:d0:81:9d:8c:b7:73:c4:
f5:98:ee:d5:af:b4:f4:bd:7c:54:8e:fb:7c:bf:ee:
6b:0d:11:37:64:ad:29:dd:08:69:48:c2:78:b9:cf:
bd:55:79:af:42:66:60:02:17:3b:a4:15:11:1a:13:
73:ec:6f:89:79:c2:df:f6:c3:c8:05:9f:a1:49:f7:
44:ab:b7:9f:22:bd:22:f9:73:f1:8d:eb:cf:e7:56:
80:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A6:FA:29:8B:96:9B:CB:45:80:15:E0:D8:E6:C7:CC:2D:D0:96:9C
X509v3 Authority Key Identifier:
keyid:AA:C5:75:CA:FA:00:BC:41:D5:7C:49:4A:C1:F5:DB:CF:EE:78:33:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a3:42:7b:de:4c:2b:57:e6:ac:5b:38:06:bc:15:9a:3a:0e:
a6:e7:12:db:0e:80:de:db:72:f7:3d:2e:79:0d:7a:6c:6e:e8:
27:92:68:75:8d:2e:47:b5:d2:24:07:9b:55:a9:93:76:00:0d:
61:e6:ca:19:a5:f3:b8:7f:fb:32:ff:41:e1:36:58:82:75:07:
42:2a:e6:76:5a:77:20:65:4b:b6:68:b1:44:d6:fe:fc:06:13:
15:bb:75:4f:36:f6:47:8d:b1:ab:4e:e7:d1:3e:08:6e:ae:e3:
8e:3e:42:b3:c1:ac:9d:90:b4:2d:b6:2e:89:47:b5:7f:14:ee:
2d:d0:6e:9b:18:34:d3:0b:60:4a:a2:fd:b8:ec:66:c7:67:37:
f4:7b:a6:f9:d1:6b:03:13:66:1f:58:38:d5:e3:91:aa:f2:63:
53:c9:ef:2c:2d:0a:35:e2:2e:5c:ce:bb:4e:a6:90:0c:f6:b0:
48:a1:d8:95:f1:32:e8:ad:7a:18:34:0d:e6:24:07:8a:30:f1:
f7:c6:1a:1e:81:ce:92:e4:20:f1:1a:9d:a3:51:58:66:ff:28:
e0:d6:89:a6:71:b1:21:59:c1:7d:cb:d7:0a:43:fe:ac:f7:ac:
af:85:2f:f9:43:ac:7d:2d:35:af:6d:d1:9c:8a:be:9f:27:7b:
2a:40:c8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:32:52 2026 by rpki-client