Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
File: qS25uA37nJVniwfvLJU9YxB_X2I.mft (raw, json)
Hash identifier: hZCb1pBR+z1erQhmvRCX0pS0fcgoCADE43Ybp2HaKVE=
Subject key identifier: FE:0E:38:AF:4F:73:53:F4:07:58:94:29:94:0F:8C:1C:7C:C7:7D:AB
Authority key identifier: A9:2D:B9:B8:0D:FB:9C:95:67:8B:07:EF:2C:95:3D:63:10:7F:5F:62
Certificate issuer: /CN=a92db9b80dfb9c95678b07ef2c953d63107f5f62
Certificate serial: 019F93FFBB6A7AC8213B5FB62549A011BA39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
Manifest number: 0C29
Signing time: Fri 24 Jul 2026 12:00:38 +0000
Manifest this update: Fri 24 Jul 2026 12:00:38 +0000
Manifest next update: Sat 25 Jul 2026 12:00:38 +0000
Files and hashes: 1: AHY4ZcpWBg0aIiFkhUXaY2emMvk.roa (hash: XYjuOSawg9GbeUiAsIFDnNUeoKdfUJFTjZesq9ksMa4=)
2: qS25uA37nJVniwfvLJU9YxB_X2I.crl (hash: iwrgAVRiTVvVFn5Dejs2Fn6u6Mmq1OblRMU3h8EIDf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:bb:6a:7a:c8:21:3b:5f:b6:25:49:a0:11:ba:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92db9b80dfb9c95678b07ef2c953d63107f5f62
Validity
Not Before: Jul 24 12:00:38 2026 GMT
Not After : Jul 25 12:00:38 2026 GMT
Subject: CN=fe0e38af4f7353f407589429940f8c1c7cc77dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0c:46:13:77:fe:08:c4:50:c3:0f:1f:4d:6c:
78:57:0d:f1:d8:41:34:98:4c:b6:00:ba:ce:50:22:
74:0a:e2:be:9a:12:cf:92:87:5d:83:c9:91:66:31:
ef:57:1c:a6:03:86:8d:d6:ac:d1:07:ad:37:3c:bb:
66:5d:ac:1d:7c:e9:da:68:14:54:74:cb:ff:84:da:
36:d0:8f:19:f3:11:a0:b6:fc:86:2c:4c:5a:41:bc:
28:6b:70:68:af:ba:58:77:0b:91:cb:9b:e2:da:1d:
34:22:70:be:72:a9:af:bd:40:f7:4e:24:f1:1f:1c:
e9:36:38:be:b4:a2:24:9f:b6:37:c3:54:4b:9e:20:
22:b8:1a:2a:b2:5f:31:af:6e:1d:a7:dc:8e:8a:f8:
bd:63:4c:b8:9a:a4:a7:47:5b:e8:e9:97:e4:6e:49:
e3:8b:a2:e3:32:99:34:a2:a5:12:f9:39:d5:cc:1b:
5a:0e:28:50:7c:4f:e6:7e:d7:2f:ff:72:8a:02:c1:
38:74:a9:f1:c1:07:08:70:f9:d7:e9:e8:b4:82:d4:
d3:7c:c9:fc:0d:15:02:ad:1b:2a:78:26:c9:e1:be:
a5:43:71:12:76:76:12:44:f0:2a:36:f0:f2:ad:4f:
51:5c:c0:35:9b:95:a3:db:6b:5b:19:fc:a4:d9:a2:
d6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0E:38:AF:4F:73:53:F4:07:58:94:29:94:0F:8C:1C:7C:C7:7D:AB
X509v3 Authority Key Identifier:
keyid:A9:2D:B9:B8:0D:FB:9C:95:67:8B:07:EF:2C:95:3D:63:10:7F:5F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:26:79:c6:64:fc:5d:d6:92:a0:ea:ae:89:20:1c:dd:1e:fa:
76:33:64:31:ab:c4:5e:d9:46:da:e5:62:79:8a:c3:52:ef:39:
f6:bf:35:44:87:29:2e:ec:d1:7a:f0:7f:ea:c4:32:30:16:f1:
b5:3d:19:5a:83:b6:dc:c4:ab:79:c5:a9:85:1e:f1:ec:59:6c:
4c:9d:84:fe:15:b8:83:f5:04:9d:ec:c1:ed:fe:98:7c:90:ea:
2e:31:3e:4c:16:93:4e:ab:46:ab:a8:af:9f:94:0d:37:6d:6b:
fe:53:fa:40:c9:a0:f0:1f:d2:be:25:01:30:e5:b4:5c:74:af:
2f:8d:2c:0d:97:7c:5c:10:ed:0c:71:c1:22:ed:73:74:cf:e1:
50:77:ac:fd:28:55:6c:70:5a:8c:8b:f9:63:29:b0:8f:c6:a2:
b7:b4:6e:f5:9c:ca:be:18:48:b9:51:e5:b4:08:51:2c:1f:20:
19:e2:5c:98:91:9b:7f:1d:66:2d:27:17:4d:af:01:b2:c1:b8:
4b:e3:c3:4e:1b:2a:8e:aa:a5:0a:81:22:2c:ba:53:c6:d7:7c:
3b:0a:2b:27:4f:68:9e:e7:a8:80:87:e6:ae:a0:f6:db:80:ee:
db:bf:cc:44:cb:6b:b0:c9:33:c3:e1:a6:48:b3:53:c4:b4:c6:
82:63:48:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+T/7tqesghO1+2JUmgEbo5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MmRiOWI4MGRmYjljOTU2NzhiMDdlZjJjOTUzZDYzMTA3
ZjVmNjIwHhcNMjYwNzI0MTIwMDM4WhcNMjYwNzI1MTIwMDM4WjAzMTEwLwYDVQQD
EyhmZTBlMzhhZjRmNzM1M2Y0MDc1ODk0Mjk5NDBmOGMxYzdjYzc3ZGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgxGE3f+CMRQww8fTWx4Vw3x2EE0
mEy2ALrOUCJ0CuK+mhLPkoddg8mRZjHvVxymA4aN1qzRB603PLtmXawdfOnaaBRU
dMv/hNo20I8Z8xGgtvyGLExaQbwoa3Bor7pYdwuRy5vi2h00InC+cqmvvUD3TiTx
HxzpNji+tKIkn7Y3w1RLniAiuBoqsl8xr24dp9yOivi9Y0y4mqSnR1vo6Zfkbknj
i6LjMpk0oqUS+TnVzBtaDihQfE/mftcv/3KKAsE4dKnxwQcIcPnX6ei0gtTTfMn8
DRUCrRsqeCbJ4b6lQ3ESdnYSRPAqNvDyrU9RXMA1m5Wj22tbGfyk2aLWpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4OOK9Pc1P0B1iUKZQPjBx8x32rMB8GA1UdIwQY
MBaAFKktubgN+5yVZ4sH7yyVPWMQf19iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVMyNXVBMzduSlZuaXdmdkxKVTlZeEJfWDJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC80MmIzYmItMTkzNS00NzhiLWEzMDIt
Y2I3YTVmZDFhYzQ3LzEvcVMyNXVBMzduSlZuaXdmdkxKVTlZeEJfWDJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC80MmIzYmItMTkzNS00NzhiLWEzMDItY2I3YTVmZDFhYzQ3
LzEvcVMyNXVBMzduSlZuaXdmdkxKVTlZeEJfWDJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYyZ5xmT8
XdaSoOquiSAc3R76djNkMavEXtlG2uVieYrDUu859r81RIcpLuzRevB/6sQyMBbx
tT0ZWoO23MSrecWphR7x7FlsTJ2E/hW4g/UEnezB7f6YfJDqLjE+TBaTTqtGq6iv
n5QNN21r/lP6QMmg8B/SviUBMOW0XHSvL40sDZd8XBDtDHHBIu1zdM/hUHes/ShV
bHBajIv5Yymwj8ait7Ru9ZzKvhhIuVHltAhRLB8gGeJcmJGbfx1mLScXTa8BssG4
S+PDThsqjqqlCoEiLLpTxtd8OworJ09onueogIfmrqD224Du27/MRMtrsMkzw+Gm
SLNTxLTGgmNImg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:20:47 2026 by rpki-client