Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
File: qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft (raw, json)
Hash identifier: u0h04k0febrA6orXQQPUsLUTZFo9LoGPrOuLbcZb3F8=
Subject key identifier: A1:5A:A1:93:27:77:8B:68:D7:9B:3D:D2:19:59:F7:FE:68:1A:60:57
Authority key identifier: A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3
Certificate issuer: /CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3
Certificate serial: 019F939221414D0E0759A1F9997DF34740DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
Manifest number: 0AD2
Signing time: Fri 24 Jul 2026 10:00:55 +0000
Manifest this update: Fri 24 Jul 2026 10:00:55 +0000
Manifest next update: Sat 25 Jul 2026 10:00:55 +0000
Files and hashes: 1: J_Or8KZX1wZ3vXfvww5iG8YKGng.roa (hash: d0jCHNsxIqtKvODKfik7z9iL8EdgI8lCwjcpoaXOc1E=)
2: qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl (hash: M4LBIJ6YZMPN56dvqfx6H5Ad1VXyKBIiO1h8WXGWoi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:21:41:4d:0e:07:59:a1:f9:99:7d:f3:47:40:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3
Validity
Not Before: Jul 24 10:00:55 2026 GMT
Not After : Jul 25 10:00:55 2026 GMT
Subject: CN=a15aa19327778b68d79b3dd21959f7fe681a6057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2d:d9:46:e1:90:68:71:eb:be:5c:13:16:b3:
e6:c0:92:69:c7:53:65:df:c6:a6:da:fa:ec:a5:a5:
0e:39:35:6c:d2:7b:c6:d0:17:f0:79:d3:ed:86:26:
92:41:30:76:0c:78:ba:ac:5b:5f:85:8e:fa:e2:e5:
c3:de:7a:43:6f:41:0a:91:d0:cf:35:93:2c:0a:f5:
7e:12:56:5d:76:a8:de:90:27:36:d9:b5:38:2e:0e:
63:67:d0:6a:5a:34:3b:35:f8:b2:b7:94:ae:8f:c0:
64:5d:5b:ca:f3:ab:c4:e9:65:43:82:45:84:65:a3:
31:e8:e6:45:75:f4:a5:da:ba:66:d2:6e:ff:91:e8:
62:3e:6b:4c:27:34:c7:88:ce:93:c8:d3:3f:70:5b:
68:cf:6e:ff:cd:72:d5:59:ee:1f:2b:fb:e3:98:bb:
65:a7:44:98:bc:99:1b:46:4b:b2:51:6c:56:eb:16:
80:9a:cd:d1:c0:fb:6d:73:31:11:43:49:87:16:c9:
4e:a6:fe:c9:bf:f9:65:e6:c7:6e:b9:97:48:31:0e:
f7:26:f7:18:00:e0:6c:79:cc:02:17:be:b3:90:aa:
e2:88:f4:6b:78:4d:e1:9e:fd:32:74:72:39:63:89:
3a:a1:94:e3:27:41:4f:70:07:49:4a:52:ca:01:6e:
1a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5A:A1:93:27:77:8B:68:D7:9B:3D:D2:19:59:F7:FE:68:1A:60:57
X509v3 Authority Key Identifier:
keyid:A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:9a:63:bc:39:23:74:61:aa:c3:8b:14:4c:dc:f1:dc:16:72:
be:74:c6:ec:fe:5a:9b:a3:13:df:65:24:e7:52:3d:d7:c7:1f:
f7:56:eb:56:8c:57:24:83:3c:ba:2d:0b:6e:e2:0a:49:1d:6f:
46:8b:97:6b:b6:06:73:36:4d:70:18:50:df:1c:19:92:9e:19:
58:14:e1:19:57:62:0c:18:43:22:83:26:6c:29:96:9c:6c:24:
46:78:22:19:a6:67:ff:d3:1b:d7:dd:fe:11:bf:d8:25:58:66:
b3:f4:e6:1c:46:aa:17:1c:e3:1f:ba:b2:56:5a:7c:38:cd:e8:
65:c8:ea:99:27:e8:a4:bf:68:93:7b:ef:14:cc:b3:49:69:92:
7d:10:1f:f0:00:b0:0d:6d:fe:17:0a:13:d2:77:1e:fb:d0:38:
24:05:0b:82:11:24:1c:06:f0:35:db:7b:22:d7:27:77:76:5a:
f5:d4:b8:c1:43:26:01:a5:5f:f0:5f:65:d8:e0:28:3b:15:d2:
fe:21:f8:7f:7a:96:29:18:62:9c:be:2e:82:a0:5b:db:55:b8:
c3:43:00:6a:17:85:7d:a5:59:5d:2f:dd:54:94:15:3d:fe:15:
13:fa:79:17:73:24:c5:43:06:13:43:ae:3d:ab:01:ff:7e:8c:
fe:a6:db:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:21:14 2026 by rpki-client