Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
File: qlemjwii4wun1z1EyabiQA_Qo7E.mft (raw, json)
Hash identifier: 2KdkPHKM+/sb3IKjA4FHeKEOoK1/t4u6tKoMFOSF8+A=
Subject key identifier: 57:79:61:C1:70:6A:07:52:EA:D0:32:70:A9:29:8F:04:1C:1E:70:A6
Authority key identifier: AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
Certificate issuer: /CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Certificate serial: 019F9391947209C9C6D4F9E2D80AC1CA00D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
Manifest number: 0B9F
Signing time: Fri 24 Jul 2026 10:00:19 +0000
Manifest this update: Fri 24 Jul 2026 10:00:19 +0000
Manifest next update: Sat 25 Jul 2026 10:00:19 +0000
Files and hashes: 1: 6ixSBAJQlI9QTdVaxkNUntZMsmE.roa (hash: md0a0a+udrQg7g7OFxeWWB53q44wWyhdageagzGFqqY=)
2: qlemjwii4wun1z1EyabiQA_Qo7E.crl (hash: lyETGSOY+fsWWEHWgEVdGizd7LJ9ZwVNQ3ADRTu/SwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:94:72:09:c9:c6:d4:f9:e2:d8:0a:c1:ca:00:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Validity
Not Before: Jul 24 10:00:19 2026 GMT
Not After : Jul 25 10:00:19 2026 GMT
Subject: CN=577961c1706a0752ead03270a9298f041c1e70a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7b:2a:09:bb:73:13:ea:5f:55:0e:7e:f8:8a:
d0:95:e6:ef:66:9e:a1:96:31:40:ab:62:bb:90:25:
c7:eb:15:ee:a5:3b:8c:7e:25:15:94:40:c9:b5:dd:
79:63:53:9f:61:0b:5b:2c:dd:41:3e:60:bd:84:70:
94:3e:5d:4c:87:2f:82:aa:2d:77:25:5c:a8:12:a5:
81:b6:68:b3:c8:d7:9f:b0:d3:ef:90:8b:19:4e:49:
a3:c3:39:a0:a2:ce:8b:95:2d:1a:98:f3:5d:c2:38:
f3:09:ad:20:86:4f:63:6f:bd:3c:0a:c8:14:ad:6f:
6e:34:0d:00:23:4d:96:b8:ac:e9:87:2f:a9:2b:58:
63:1d:22:85:a0:1d:f1:a6:82:79:5e:17:50:e6:37:
82:2b:2e:cc:69:40:ad:2d:60:28:b1:b0:23:18:c3:
09:69:48:7b:27:fa:e5:45:e9:8e:51:8e:bd:d6:63:
21:f3:6a:f4:6a:86:ad:7e:77:9f:37:df:ec:f4:76:
ad:c6:e5:16:2e:54:27:0c:01:41:72:16:58:cc:2a:
9c:74:e9:61:58:4a:c9:fd:6a:ee:fa:9c:a5:c4:c4:
b0:b6:15:08:49:73:78:42:f5:d2:71:44:2f:91:a4:
71:5b:90:56:34:e9:02:3f:5f:4a:0f:f7:4a:5f:8c:
05:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:79:61:C1:70:6A:07:52:EA:D0:32:70:A9:29:8F:04:1C:1E:70:A6
X509v3 Authority Key Identifier:
keyid:AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:70:d0:13:b5:22:e0:70:ba:9f:60:dc:fd:9c:19:82:00:d5:
38:92:95:0a:d0:96:c7:45:07:dd:93:42:cd:e3:15:88:74:b5:
ef:b1:18:b7:06:3f:3a:f5:85:ed:90:c5:36:1b:05:d2:f9:ec:
c2:b0:39:f8:27:81:5e:c7:ca:c9:91:a9:51:08:7b:19:65:f6:
5c:cd:40:8e:da:51:8c:33:af:f3:37:0b:42:aa:62:0e:a8:e0:
85:ea:99:f3:28:ce:f0:f2:e4:30:59:5e:94:6d:b2:14:5d:f8:
6c:a9:dc:ab:9a:44:76:2f:45:a4:7a:c6:66:73:42:03:04:b1:
bf:22:75:0b:d7:a2:8b:2b:5b:a6:ea:20:70:83:2b:d0:a5:e8:
75:73:68:d2:e4:ef:54:c3:62:12:ce:53:05:a1:6b:8d:c1:48:
86:37:d8:64:7b:51:4b:c1:64:f3:4b:80:81:42:f3:f6:54:84:
cf:e0:41:b6:56:97:63:ce:d2:db:e2:89:d0:c7:9a:a8:6b:5a:
db:19:6f:b5:a2:e0:f6:1f:0d:44:cf:fb:c2:bd:1c:a3:97:ef:
08:50:95:1d:94:47:96:4e:79:cc:fe:78:68:77:37:89:be:e0:
68:db:a0:ae:86:e5:2e:d4:b1:b5:8c:c7:20:16:91:26:69:fb:
0a:d4:a5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:55:22 2026 by rpki-client