Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
File: qnv9Qg21yuutoaIFXYe8faKwnAc.mft (raw, json)
Hash identifier: 6ZXYLw7bWlbuczq9I5u6baM3wk7jmOmAjqfp4JmqbCg=
Subject key identifier: EA:4F:CE:A9:60:D9:43:2A:CD:E5:67:9B:AA:DB:5B:FA:07:26:25:EE
Authority key identifier: AA:7B:FD:42:0D:B5:CA:EB:AD:A1:A2:05:5D:87:BC:7D:A2:B0:9C:07
Certificate issuer: /CN=aa7bfd420db5caebada1a2055d87bc7da2b09c07
Certificate serial: 019F93FFB74E27FB03728E4B315E96591906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
Manifest number: 0468
Signing time: Fri 24 Jul 2026 12:00:37 +0000
Manifest this update: Fri 24 Jul 2026 12:00:37 +0000
Manifest next update: Sat 25 Jul 2026 12:00:37 +0000
Files and hashes: 1: qnv9Qg21yuutoaIFXYe8faKwnAc.crl (hash: LYa3bcoBR7vKbxwFvgakpETLyGGFodEjSwtk9zneo0c=)
2: tHTr07ZBhUD8R_5r3PxqgiRA1CA.roa (hash: /8DCcSpchfgecurYBVc/dGLfkDOCG1kP3rKMMF22VmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:b7:4e:27:fb:03:72:8e:4b:31:5e:96:59:19:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7bfd420db5caebada1a2055d87bc7da2b09c07
Validity
Not Before: Jul 24 12:00:37 2026 GMT
Not After : Jul 25 12:00:37 2026 GMT
Subject: CN=ea4fcea960d9432acde5679baadb5bfa072625ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0d:87:c4:d9:a1:b0:65:a9:15:71:d5:f1:2b:
0c:06:c0:14:d5:cb:46:14:58:79:9b:eb:72:cb:3b:
5b:db:32:d1:57:7c:ea:bc:38:f6:38:15:15:2f:b0:
4d:97:f3:70:cf:20:50:7e:fb:19:7e:49:2d:4f:c8:
e8:31:a8:ea:ee:4b:a3:7f:ff:68:37:b9:49:fe:39:
72:a6:5b:db:26:6a:90:5b:1e:da:a6:86:3b:94:b1:
4e:c6:b8:f0:36:52:54:49:31:9b:08:ee:3e:47:11:
0e:3c:a6:40:9e:67:47:4c:99:d4:25:a2:2b:ed:ab:
ca:a2:52:16:27:35:8d:6b:1e:93:d5:c8:c4:da:d7:
ff:a9:fe:73:67:bc:ea:be:e6:1d:ea:80:4a:6c:2d:
fe:f1:bb:d1:6c:82:c9:e1:8d:89:98:cd:65:8d:5e:
97:6d:c1:eb:e4:8e:12:d3:1b:d4:f8:03:c7:92:85:
ca:6f:93:b1:65:a3:dc:07:a0:ef:a3:fc:1c:1d:7a:
10:9d:13:a0:2f:52:39:77:e3:61:62:a1:e5:85:4f:
34:e3:e4:a8:67:51:2b:e8:49:34:5c:51:40:dc:50:
60:c4:ac:b4:15:08:4e:9a:18:01:b6:5b:eb:33:1c:
46:8b:a3:c9:c3:10:3f:ea:8d:1b:9b:62:74:61:c8:
69:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:4F:CE:A9:60:D9:43:2A:CD:E5:67:9B:AA:DB:5B:FA:07:26:25:EE
X509v3 Authority Key Identifier:
keyid:AA:7B:FD:42:0D:B5:CA:EB:AD:A1:A2:05:5D:87:BC:7D:A2:B0:9C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:07:9f:9f:6d:9f:55:4e:21:09:c8:97:b8:b8:b4:e5:4f:3a:
a2:02:91:72:c8:6c:54:3f:98:98:d0:2b:a7:c2:18:93:b6:de:
a1:d5:8f:f3:d2:b4:90:3e:e4:93:bc:03:2b:15:7d:ad:27:6a:
90:94:d8:21:20:ff:f0:ec:49:d5:18:f9:8d:10:23:6e:69:63:
c1:f3:8f:65:f5:be:af:98:e8:55:51:a7:7e:92:c7:89:fb:78:
1d:fa:da:97:70:35:5d:d0:9c:88:23:46:91:33:6a:66:8c:01:
78:e7:51:5c:e7:f5:ae:56:17:6f:97:03:a0:28:61:1e:5b:2f:
5c:92:9e:65:ef:42:5d:0b:58:b2:76:fc:ff:10:d1:e4:35:ee:
92:92:1e:ba:ac:ca:05:e9:5a:dd:38:7c:79:93:56:8c:1d:28:
84:5d:0d:f6:e9:48:05:4e:50:30:bf:80:f2:8d:21:ba:3f:0c:
fa:92:ec:fc:f7:74:4d:60:ac:98:b4:a8:d4:aa:0c:bf:0f:46:
f1:53:48:76:e4:56:48:e8:c3:4b:63:56:4e:3f:08:5f:59:ec:
94:50:26:bc:fa:5d:7b:0b:ed:b8:4b:2d:45:0b:f6:20:51:86:
64:6e:7b:84:2b:d0:6f:b0:e0:33:0e:dd:f6:79:69:35:43:97:
cc:c4:05:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+T/7dOJ/sDco5LMV6WWRkGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhN2JmZDQyMGRiNWNhZWJhZGExYTIwNTVkODdiYzdkYTJi
MDljMDcwHhcNMjYwNzI0MTIwMDM3WhcNMjYwNzI1MTIwMDM3WjAzMTEwLwYDVQQD
EyhlYTRmY2VhOTYwZDk0MzJhY2RlNTY3OWJhYWRiNWJmYTA3MjYyNWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiA2HxNmhsGWpFXHV8SsMBsAU1ctG
FFh5m+tyyztb2zLRV3zqvDj2OBUVL7BNl/NwzyBQfvsZfkktT8joMajq7kujf/9o
N7lJ/jlyplvbJmqQWx7apoY7lLFOxrjwNlJUSTGbCO4+RxEOPKZAnmdHTJnUJaIr
7avKolIWJzWNax6T1cjE2tf/qf5zZ7zqvuYd6oBKbC3+8bvRbILJ4Y2JmM1ljV6X
bcHr5I4S0xvU+APHkoXKb5OxZaPcB6Dvo/wcHXoQnROgL1I5d+NhYqHlhU804+So
Z1Er6Ek0XFFA3FBgxKy0FQhOmhgBtlvrMxxGi6PJwxA/6o0bm2J0YchplQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOpPzqlg2UMqzeVnm6rbW/oHJiXuMB8GA1UdIwQY
MBaAFKp7/UINtcrrraGiBV2HvH2isJwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW52OVFnMjF5dXV0b2FJRlhZZThmYUt3bkFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS81NWJkOTUtYzYzNy00NTFiLWIwN2Mt
NzliNDA5YzFiZDM4LzEvcW52OVFnMjF5dXV0b2FJRlhZZThmYUt3bkFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS81NWJkOTUtYzYzNy00NTFiLWIwN2MtNzliNDA5YzFiZDM4
LzEvcW52OVFnMjF5dXV0b2FJRlhZZThmYUt3bkFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATQefn22f
VU4hCciXuLi05U86ogKRcshsVD+YmNArp8IYk7beodWP89K0kD7kk7wDKxV9rSdq
kJTYISD/8OxJ1Rj5jRAjbmljwfOPZfW+r5joVVGnfpLHift4Hfral3A1XdCciCNG
kTNqZowBeOdRXOf1rlYXb5cDoChhHlsvXJKeZe9CXQtYsnb8/xDR5DXukpIeuqzK
Bela3Th8eZNWjB0ohF0N9ulIBU5QML+A8o0huj8M+pLs/Pd0TWCsmLSo1KoMvw9G
8VNIduRWSOjDS2NWTj8IX1nslFAmvPpdewvtuEstRQv2IFGGZG57hCvQb7DgMw7d
9nlpNUOXzMQFEw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:55:30 2026 by rpki-client