Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
File: qQYfL0mm16-epna60D3xzi9QJg0.mft (raw, json)
Hash identifier: aH/lXBp1A4CrZWQpm4/sRWIKElmT7DlIH2Atk4xzbW8=
Subject key identifier: 51:EA:DC:1B:38:C8:2B:9E:25:46:A6:FE:69:5A:1F:14:F5:CB:01:5D
Authority key identifier: A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
Certificate issuer: /CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Certificate serial: 019F94001CFEF4037FA27435146E951FC84D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
Manifest number: 0DB9
Signing time: Fri 24 Jul 2026 12:01:03 +0000
Manifest this update: Fri 24 Jul 2026 12:01:03 +0000
Manifest next update: Sat 25 Jul 2026 12:01:03 +0000
Files and hashes: 1: JZJx4L1hE5SD9mcU3dDsqxkA624.roa (hash: aZtriA7sGW64atFxZesGv0mQUg9eckBShedQMDCxoFw=)
2: qQYfL0mm16-epna60D3xzi9QJg0.crl (hash: bw55w2pu0sKmVlvIy4lmAqPGV/NAXINlAngR/zt8t28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:00:1c:fe:f4:03:7f:a2:74:35:14:6e:95:1f:c8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Validity
Not Before: Jul 24 12:01:03 2026 GMT
Not After : Jul 25 12:01:03 2026 GMT
Subject: CN=51eadc1b38c82b9e2546a6fe695a1f14f5cb015d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7d:21:26:41:41:cf:e0:69:93:c8:ee:d0:4f:
7d:85:30:e4:6b:b5:6a:1e:10:a5:3a:aa:39:d8:8a:
33:e5:1d:da:59:bc:de:e1:1c:5b:84:36:67:10:86:
f9:06:e9:56:d7:77:01:3d:38:20:73:2c:10:a3:95:
22:4a:b9:9c:56:fb:19:1c:f5:65:6b:b2:e7:ee:7b:
64:82:59:63:09:ee:8e:e3:e4:d7:67:10:d1:8a:c5:
e5:26:37:13:72:28:af:a3:49:0d:bc:e9:4f:4f:f3:
33:31:d3:0a:7e:c9:d1:49:a8:14:0a:b2:54:92:b8:
b3:24:29:c6:d9:e0:cf:39:12:d9:8c:26:54:fe:76:
bc:da:88:08:5a:54:2c:08:c4:53:c2:9e:a8:40:66:
57:de:99:9d:e2:a8:4a:10:ae:53:32:7f:af:13:a4:
9e:a3:21:62:f8:b4:11:a8:ca:01:37:b9:82:03:4a:
be:47:b3:67:bc:b9:22:9d:75:dc:05:b9:d2:47:bb:
77:c6:a5:23:05:c7:c8:5f:54:cd:44:cd:85:e4:13:
be:f5:a8:6f:7a:dd:bc:88:4d:2e:fd:5e:59:88:9c:
04:78:e4:f8:7e:f4:66:f9:17:5d:43:6a:90:ce:50:
c9:6f:07:3c:15:41:8d:ed:16:20:11:1b:ad:f9:fa:
38:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:EA:DC:1B:38:C8:2B:9E:25:46:A6:FE:69:5A:1F:14:F5:CB:01:5D
X509v3 Authority Key Identifier:
keyid:A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:9d:38:a3:03:65:e3:7d:dd:48:17:7f:48:47:b1:1b:bc:17:
89:8c:17:38:e6:5f:24:6e:b6:c9:9b:54:3c:07:28:13:38:82:
72:98:3c:0c:21:f0:20:9e:d0:0e:28:0d:b2:5f:0b:b5:c5:51:
8d:5b:d1:1e:c2:a4:31:88:6e:db:1e:61:32:fc:dd:1d:fa:73:
a2:bc:f2:82:74:0a:dc:cf:9d:55:25:9f:7a:eb:6b:50:de:68:
c9:a8:3b:43:61:dc:ca:05:80:21:1e:73:10:73:4b:54:ec:78:
17:ee:f3:86:67:c7:10:cd:fa:90:a9:14:ed:a1:27:10:4c:a8:
c3:94:1d:e2:02:2b:7d:b6:16:f7:85:16:55:35:22:cd:83:25:
73:4e:2a:ad:24:eb:22:0c:a3:b5:96:70:18:90:d9:78:10:63:
85:be:45:f6:ce:16:56:6e:70:8c:18:6d:95:ac:d6:ab:43:a7:
f5:29:ae:3e:82:04:12:c1:99:34:aa:1b:55:10:a8:44:3a:35:
75:89:dd:31:eb:4f:82:c2:f8:53:bc:2a:41:6e:fc:cf:75:d5:
fa:59:18:48:d5:cb:38:03:91:b9:f3:25:bb:6a:e2:29:55:43:
63:8a:91:07:cf:d1:63:41:f7:95:6e:11:22:35:be:3d:3a:ae:
0f:c6:83:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:35:19 2026 by rpki-client