Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
File: qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft (raw, json)
Hash identifier: QHrj2cu08FWLnvFRhDtR3/dNbSJNEVh/5Z9Z4tUkEf4=
Subject key identifier: 60:AE:FD:A5:09:04:AD:B3:C5:BD:2B:63:CF:0D:FA:07:A0:DD:4D:52
Authority key identifier: AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
Certificate issuer: /CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Certificate serial: 019F92B5D22C7F2F410E77559FFEBB79C59B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
Manifest number: 19A0
Signing time: Fri 24 Jul 2026 06:00:16 +0000
Manifest this update: Fri 24 Jul 2026 06:00:16 +0000
Manifest next update: Sat 25 Jul 2026 06:00:16 +0000
Files and hashes: 1: L-HwD3a1YvSj02j1QCP8hdaPo2Q.roa (hash: 5Wk7yg6Zqe4Rx0Uz4L8PVzxHV08SwQbCHKVJQ29cOi4=)
2: qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl (hash: 0gt2CqMsmwwBIuKoMzIiKgcnYE7GhZ99BObmVfxcQHE=)
3: yDO02X54f1LQ0eg7vIsPILfqVfg.roa (hash: QejEGgHdQAnoB+VVS4oCOej9y3m34VK1Ik/jfXOr3V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b5:d2:2c:7f:2f:41:0e:77:55:9f:fe:bb:79:c5:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Validity
Not Before: Jul 24 06:00:16 2026 GMT
Not After : Jul 25 06:00:16 2026 GMT
Subject: CN=60aefda50904adb3c5bd2b63cf0dfa07a0dd4d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:76:a7:d4:50:18:db:32:1b:81:13:79:e2:09:
6b:f9:af:e7:33:50:b4:cc:6b:6f:7d:d0:db:30:35:
c2:e0:2a:59:91:8c:67:95:79:be:23:12:1f:fe:c5:
72:b7:8a:8d:85:d3:bd:65:64:d1:89:26:53:4b:e1:
19:ae:68:bf:42:b2:a2:2f:58:36:80:1c:02:a9:79:
49:c0:1a:c1:a6:05:9e:ab:01:00:cd:12:a3:32:9d:
8f:eb:a0:f7:7c:cd:c3:0f:ed:a9:e4:54:73:30:a0:
0b:af:4a:8c:3f:b7:c4:07:ba:9e:21:24:60:3d:be:
0c:14:31:b9:91:4a:0e:99:6e:05:b0:f3:f1:f0:ba:
a4:87:87:49:23:d4:04:d5:fa:d7:39:cf:5e:b7:21:
98:6d:4f:0a:42:f0:70:fe:26:26:8e:02:19:f8:62:
20:9c:98:cd:9d:f0:65:6b:15:d0:c7:c0:e4:6a:60:
c7:a4:e8:16:7a:19:9f:e6:e1:6a:1a:f7:f0:4f:df:
72:5a:38:37:98:62:66:38:e9:1f:b5:42:cf:d4:21:
65:57:23:4e:3e:da:bf:40:d7:ee:73:3c:35:c7:33:
e4:0b:e2:2b:37:c1:50:4a:1c:c4:09:47:fb:54:01:
20:91:6f:4e:9c:6a:1c:1d:ae:39:ee:a6:bb:e1:de:
95:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:AE:FD:A5:09:04:AD:B3:C5:BD:2B:63:CF:0D:FA:07:A0:DD:4D:52
X509v3 Authority Key Identifier:
keyid:AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:97:1e:96:97:d9:de:d8:4a:c6:2b:75:e5:25:5d:53:cf:8f:
2b:64:0a:d8:40:50:4c:62:ca:4a:93:17:3b:6d:79:ab:17:bf:
e6:90:14:2f:b1:a0:64:5f:6b:dc:fd:d0:61:ea:19:93:c4:65:
d0:5f:bf:47:28:80:e2:00:66:15:cf:a5:2f:65:20:db:d7:e9:
5f:fe:c6:c1:50:80:92:e5:71:13:1f:78:83:9d:c8:12:7a:da:
d2:6c:9a:8e:a5:d2:1e:2a:e4:48:b9:a2:39:32:a7:fc:16:b5:
b3:a7:28:25:32:b3:60:a8:95:50:44:ee:f4:ad:78:10:b1:28:
9b:a8:cd:94:34:ae:9a:b6:ee:42:46:0e:a1:8c:97:39:17:ee:
2e:d4:25:b9:49:21:4f:ed:cf:ae:84:3c:b9:5a:b9:95:7e:de:
53:6d:36:44:ec:b7:b4:ff:8d:50:85:fd:ed:cc:98:f2:8d:be:
b5:53:5a:25:23:4b:2a:90:9a:8e:3c:c4:cd:23:66:e7:ce:1c:
98:91:4b:9f:2f:70:33:62:ae:4c:ca:46:34:f2:d6:00:0e:b4:
54:4f:0b:92:a5:6f:39:2b:b8:0b:74:17:e2:1a:a9:cf:06:db:
28:56:30:72:d6:a2:55:b5:ba:f3:88:16:55:2d:18:4b:cb:6e:
00:2c:2c:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+StdIsfy9BDndVn/67ecWbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhZmM0MWFhZmJiY2NhYTk2NzExODQ5NzQ1ZWY3MjJhNTI2
MGFjN2UwHhcNMjYwNzI0MDYwMDE2WhcNMjYwNzI1MDYwMDE2WjAzMTEwLwYDVQQD
Eyg2MGFlZmRhNTA5MDRhZGIzYzViZDJiNjNjZjBkZmEwN2EwZGQ0ZDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXan1FAY2zIbgRN54glr+a/nM1C0
zGtvfdDbMDXC4CpZkYxnlXm+IxIf/sVyt4qNhdO9ZWTRiSZTS+EZrmi/QrKiL1g2
gBwCqXlJwBrBpgWeqwEAzRKjMp2P66D3fM3DD+2p5FRzMKALr0qMP7fEB7qeISRg
Pb4MFDG5kUoOmW4FsPPx8Lqkh4dJI9QE1frXOc9etyGYbU8KQvBw/iYmjgIZ+GIg
nJjNnfBlaxXQx8DkamDHpOgWehmf5uFqGvfwT99yWjg3mGJmOOkftULP1CFlVyNO
Ptq/QNfuczw1xzPkC+IrN8FQShzECUf7VAEgkW9OnGocHa457qa74d6VJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCu/aUJBK2zxb0rY88N+geg3U1SMB8GA1UdIwQY
MBaAFKr8Qar7vMqpZxGEl0XvcipSYKx+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXZ4QnF2dTh5cWxuRVlTWFJlOXlLbEpnckg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85ZmRkZDQtNTI2YS00ODA3LWIxMjct
MWJjMzFjNjI0MDFmLzEvcXZ4QnF2dTh5cWxuRVlTWFJlOXlLbEpnckg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85ZmRkZDQtNTI2YS00ODA3LWIxMjctMWJjMzFjNjI0MDFm
LzEvcXZ4QnF2dTh5cWxuRVlTWFJlOXlLbEpnckg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI5celpfZ
3thKxit15SVdU8+PK2QK2EBQTGLKSpMXO215qxe/5pAUL7GgZF9r3P3QYeoZk8Rl
0F+/RyiA4gBmFc+lL2Ug29fpX/7GwVCAkuVxEx94g53IEnra0myajqXSHirkSLmi
OTKn/Ba1s6coJTKzYKiVUETu9K14ELEom6jNlDSumrbuQkYOoYyXORfuLtQluUkh
T+3ProQ8uVq5lX7eU202ROy3tP+NUIX97cyY8o2+tVNaJSNLKpCajjzEzSNm584c
mJFLny9wM2KuTMpGNPLWAA60VE8LkqVvOSu4C3QX4hqpzwbbKFYwctaiVbW684gW
VS0YS8tuACwsNg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:05:06 2026 by rpki-client