Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
File: qltHHQugidnp9GwpExlnT6yBKNA.mft (raw, json)
Hash identifier: JHJAj9sDrfqVYfx6bbkw4PK5Ngas5woR71u4GmI/o0w=
Subject key identifier: 2F:DD:AC:09:9C:BE:E6:D4:BA:BD:D7:BB:68:8B:32:B9:50:5F:DA:EF
Authority key identifier: AA:5B:47:1D:0B:A0:89:D9:E9:F4:6C:29:13:19:67:4F:AC:81:28:D0
Certificate issuer: /CN=aa5b471d0ba089d9e9f46c291319674fac8128d0
Certificate serial: 019F905A70704F71164BCC54B84751D08073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
Manifest number: 1018
Signing time: Thu 23 Jul 2026 19:01:13 +0000
Manifest this update: Thu 23 Jul 2026 19:01:13 +0000
Manifest next update: Fri 24 Jul 2026 19:01:13 +0000
Files and hashes: 1: RGHMhabHZkPW5wXprVh6WUeUNEU.roa (hash: aWxpktwD4HwK4DqUq/i3jSDZlGsjYGbb6rrk+6zxpz0=)
2: hW9pmZmoOAPv4EQxUHQXTXDJr6s.roa (hash: mjwhxdNEgH8aH/IfZWkqyz4fW356i+YVNu/YE2e6m8A=)
3: qltHHQugidnp9GwpExlnT6yBKNA.crl (hash: Lj1mSRuRoa3ASEVr+Ne17qQ9UHYjfzkP7NqebAMPAKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:70:70:4f:71:16:4b:cc:54:b8:47:51:d0:80:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa5b471d0ba089d9e9f46c291319674fac8128d0
Validity
Not Before: Jul 23 19:01:13 2026 GMT
Not After : Jul 24 19:01:13 2026 GMT
Subject: CN=2fddac099cbee6d4babdd7bb688b32b9505fdaef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bf:c7:92:56:60:60:d4:9d:27:e9:55:e0:fc:
c6:06:32:ad:24:47:f3:50:0b:9b:69:27:bf:7a:1a:
78:94:d5:0f:2e:10:cd:38:7a:c7:7e:cb:6f:56:3a:
1f:de:eb:cf:3f:c0:84:58:92:84:d7:47:ea:ff:6a:
c6:71:99:62:14:09:5a:a5:b7:de:45:6a:cc:e7:5f:
62:02:23:4a:85:53:3e:e4:5c:87:d2:38:52:c7:79:
6f:90:70:8b:2b:7c:2d:c9:57:46:f3:ee:83:85:d3:
1f:ce:34:42:aa:56:85:b6:8a:29:07:2d:ae:da:a6:
e1:45:bf:9c:0a:e2:23:76:86:c8:ef:54:70:6e:a9:
ef:06:d9:9f:a7:a5:3e:f1:54:1f:8e:59:5f:e4:b9:
48:b4:3a:13:41:ee:e8:bb:80:80:ea:e9:17:8d:70:
30:22:52:74:a9:3b:07:4c:06:27:7f:fc:a0:87:f9:
39:04:15:5c:f5:8c:49:e8:7f:fe:29:7e:74:5d:5e:
ff:86:97:ba:88:69:2c:62:e3:e6:90:cb:1b:27:37:
46:5c:bf:67:f6:f2:42:a4:d9:b3:85:b3:09:7b:c4:
5e:ad:99:9d:ff:15:10:65:6f:74:06:1c:f0:bf:99:
78:c1:c5:97:2b:13:37:c7:a6:c3:a1:1a:d3:dd:87:
de:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DD:AC:09:9C:BE:E6:D4:BA:BD:D7:BB:68:8B:32:B9:50:5F:DA:EF
X509v3 Authority Key Identifier:
keyid:AA:5B:47:1D:0B:A0:89:D9:E9:F4:6C:29:13:19:67:4F:AC:81:28:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:0a:8c:dc:3c:f1:39:bf:45:9d:f2:4a:65:db:f1:3a:e8:47:
9e:16:8f:31:b0:a6:4f:c7:58:98:30:ed:42:74:6b:6a:ab:bd:
c2:08:4d:3d:e3:9a:33:97:d9:36:09:67:d8:0d:dd:ad:28:f4:
54:72:c1:b6:fa:39:c4:bd:0e:a0:90:12:12:ba:9d:20:0c:8d:
3a:03:c1:e0:4c:8c:ee:de:e4:49:5a:73:d2:4e:c5:e6:76:74:
bb:21:b8:67:aa:64:70:29:9f:93:23:33:5b:ec:f9:71:e9:31:
16:71:9d:c4:80:97:74:01:13:62:1f:ab:34:f4:0f:7e:bd:3f:
57:c6:5e:8a:c1:96:af:8e:41:d1:ff:db:cb:36:bd:01:5c:bd:
9e:11:da:75:64:d0:40:29:dd:b7:93:90:47:95:a3:50:2f:43:
8a:5a:9a:b2:cc:15:4a:9d:d8:dd:27:ce:24:43:4b:af:04:ad:
5b:6b:1c:38:7c:c1:ff:89:d0:43:7f:46:77:b3:80:f1:0a:dc:
44:68:d4:48:40:fe:80:43:9c:a7:bf:8d:f5:ae:cf:0f:fe:88:
d3:84:bf:35:c3:e4:23:d6:a7:01:c0:f0:c4:1c:d0:ff:6d:31:
e2:61:d7:97:cb:54:53:86:36:ce:b1:cf:a1:a8:54:a7:b9:77:
2d:35:8a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:40:10 2026 by rpki-client