Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/qMb9tmtdmLoA1OKngcNRTGUuc1s.mft
File: qMb9tmtdmLoA1OKngcNRTGUuc1s.mft (raw, json)
Hash identifier: toVB0OKLFnCSukirtPDkL8VTwiXzmemsYuCQs7wJn5M=
Subject key identifier: 09:B0:73:97:2E:39:BE:7C:EE:6B:2A:A8:A9:E5:9D:19:10:9E:34:01
Authority key identifier: A8:C6:FD:B6:6B:5D:98:BA:00:D4:E2:A7:81:C3:51:4C:65:2E:73:5B
Certificate issuer: /CN=a8c6fdb66b5d98ba00d4e2a781c3514c652e735b
Certificate serial: 019F91A37638D2E6204B5AF24DAB8B906895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qMb9tmtdmLoA1OKngcNRTGUuc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/qMb9tmtdmLoA1OKngcNRTGUuc1s.mft
Manifest number: 11
Signing time: Fri 24 Jul 2026 01:00:36 +0000
Manifest this update: Fri 24 Jul 2026 01:00:36 +0000
Manifest next update: Sat 25 Jul 2026 01:00:36 +0000
Files and hashes: 1: SD6sHxAt1pjK9oQLSlV57TTHq-c.roa (hash: euvAKqoAmy9xNvQKqBSo3raivfnNgWWSIa+OmOt9HVY=)
2: qMb9tmtdmLoA1OKngcNRTGUuc1s.crl (hash: bqNejOQudt4ZYvvTrNgsyyHAxfd1zmU8cx1FWkbCODQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/qMb9tmtdmLoA1OKngcNRTGUuc1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/qMb9tmtdmLoA1OKngcNRTGUuc1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qMb9tmtdmLoA1OKngcNRTGUuc1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:76:38:d2:e6:20:4b:5a:f2:4d:ab:8b:90:68:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8c6fdb66b5d98ba00d4e2a781c3514c652e735b
Validity
Not Before: Jul 24 01:00:36 2026 GMT
Not After : Jul 25 01:00:36 2026 GMT
Subject: CN=09b073972e39be7cee6b2aa8a9e59d19109e3401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:49:c4:ef:0f:0b:01:f9:e7:ac:25:a4:2d:ff:
3b:81:a2:80:23:6a:14:09:63:b9:09:a5:25:99:73:
f7:fe:a6:1d:05:3a:73:94:0a:59:fb:b6:20:4c:f1:
83:db:ad:7d:37:df:d9:1f:53:fd:4b:73:8e:9b:2a:
ca:e5:1c:49:bc:a4:b6:ab:25:dc:80:a4:83:c7:7a:
7d:37:b0:e0:70:ae:9a:7b:93:df:0d:a0:e4:b1:07:
fd:af:e2:6b:4f:cf:96:b1:6e:c8:e0:13:09:7b:20:
c1:b6:4b:b9:87:7f:5d:89:3b:26:33:0e:cf:f8:6b:
d9:00:5b:7c:15:5b:93:f0:f8:14:01:c8:95:ae:29:
60:64:b4:01:34:38:70:32:4a:17:05:62:60:f3:80:
af:8b:ec:fe:77:0f:55:6c:4e:ef:24:52:69:4e:9c:
c4:5f:14:f1:44:86:85:ff:d6:06:81:1f:db:aa:b2:
30:66:c4:7c:9e:e8:c5:7d:d5:b4:f8:b7:15:31:db:
10:83:7b:4b:ab:15:87:31:c3:4f:0d:a2:42:cf:f1:
4e:d2:9c:f3:23:79:92:0f:0d:6e:02:c3:e4:aa:fe:
54:f5:f2:03:29:b2:8c:36:66:e3:d0:50:65:4a:2f:
79:eb:b2:80:e6:1e:af:fe:d3:b4:bf:93:a9:73:47:
54:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B0:73:97:2E:39:BE:7C:EE:6B:2A:A8:A9:E5:9D:19:10:9E:34:01
X509v3 Authority Key Identifier:
keyid:A8:C6:FD:B6:6B:5D:98:BA:00:D4:E2:A7:81:C3:51:4C:65:2E:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qMb9tmtdmLoA1OKngcNRTGUuc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/qMb9tmtdmLoA1OKngcNRTGUuc1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/qMb9tmtdmLoA1OKngcNRTGUuc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e1:0e:f6:46:2a:0c:bc:56:da:93:f2:52:ff:07:99:ae:ff:
20:52:ac:a0:31:58:23:50:a3:86:ab:4f:21:28:01:57:15:d9:
4a:27:9a:68:43:c6:88:0f:eb:7c:34:3b:5b:21:6d:d8:c9:e0:
5c:62:1c:8a:19:37:56:0e:00:8d:5e:c5:9b:0a:a2:63:38:1b:
5f:e2:76:cc:53:8f:c1:52:92:c9:7e:06:de:12:cf:b0:5b:cf:
14:e1:cb:ad:f5:6c:29:43:c7:cb:2f:9c:cd:df:6b:43:a0:49:
ab:11:eb:69:c4:05:03:48:d4:32:13:a0:d0:4e:a4:ce:1c:38:
ce:66:f6:c5:cb:ba:4d:09:f2:af:19:3a:be:e1:b9:5b:c8:e0:
84:f5:56:01:33:a5:2e:e0:47:94:03:3a:e0:5a:12:9a:7b:99:
9c:2b:9d:fa:43:81:17:07:53:6d:fc:09:9c:66:3c:46:89:9d:
5d:fd:7d:3d:4f:d5:2c:56:12:c4:c8:04:06:d9:2a:69:0b:3f:
63:91:43:7d:6e:c9:29:b8:f3:b2:b8:97:4b:d7:41:7f:f5:e9:
d6:e5:8a:6d:1f:d0:36:24:c9:38:23:6f:79:5c:75:b3:70:02:
f9:da:14:c4:98:db:ea:eb:38:9d:82:dc:b0:83:65:97:2e:1f:
b3:8a:7a:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ro3Y40uYgS1ryTauLkGiVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YzZmZGI2NmI1ZDk4YmEwMGQ0ZTJhNzgxYzM1MTRjNjUy
ZTczNWIwHhcNMjYwNzI0MDEwMDM2WhcNMjYwNzI1MDEwMDM2WjAzMTEwLwYDVQQD
EygwOWIwNzM5NzJlMzliZTdjZWU2YjJhYThhOWU1OWQxOTEwOWUzNDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3knE7w8LAfnnrCWkLf87gaKAI2oU
CWO5CaUlmXP3/qYdBTpzlApZ+7YgTPGD2619N9/ZH1P9S3OOmyrK5RxJvKS2qyXc
gKSDx3p9N7DgcK6ae5PfDaDksQf9r+JrT8+WsW7I4BMJeyDBtku5h39diTsmMw7P
+GvZAFt8FVuT8PgUAciVrilgZLQBNDhwMkoXBWJg84Cvi+z+dw9VbE7vJFJpTpzE
XxTxRIaF/9YGgR/bqrIwZsR8nujFfdW0+LcVMdsQg3tLqxWHMcNPDaJCz/FO0pzz
I3mSDw1uAsPkqv5U9fIDKbKMNmbj0FBlSi9567KA5h6v/tO0v5Opc0dUtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmwc5cuOb587msqqKnlnRkQnjQBMB8GA1UdIwQY
MBaAFKjG/bZrXZi6ANTip4HDUUxlLnNbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU1iOXRtdGRtTG9BMU9LbmdjTlJUR1V1YzFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kODY1Y2ItYzY3NS00Nzg2LTkyNGQt
NDM4Mjg0NWQ1ZDBlLzEvcU1iOXRtdGRtTG9BMU9LbmdjTlJUR1V1YzFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9kODY1Y2ItYzY3NS00Nzg2LTkyNGQtNDM4Mjg0NWQ1ZDBl
LzEvcU1iOXRtdGRtTG9BMU9LbmdjTlJUR1V1YzFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWuEO9kYq
DLxW2pPyUv8Hma7/IFKsoDFYI1CjhqtPISgBVxXZSieaaEPGiA/rfDQ7WyFt2Mng
XGIcihk3Vg4AjV7FmwqiYzgbX+J2zFOPwVKSyX4G3hLPsFvPFOHLrfVsKUPHyy+c
zd9rQ6BJqxHracQFA0jUMhOg0E6kzhw4zmb2xcu6TQnyrxk6vuG5W8jghPVWATOl
LuBHlAM64FoSmnuZnCud+kOBFwdTbfwJnGY8RomdXf19PU/VLFYSxMgEBtkqaQs/
Y5FDfW7JKbjzsriXS9dBf/Xp1uWKbR/QNiTJOCNveVx1s3AC+doUxJjb6us4nYLc
sINlly4fs4p6XQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:30:03 2026 by rpki-client