Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.mft
File: qfNHED7zSa2C8basQ-dsD_o4wvg.mft (raw, json)
Hash identifier: PEG1Z24Eamh/WOwCVLGDZzb7m7G/PeVWkbl6E3Uww6o=
Subject key identifier: 34:C0:CA:47:82:D7:62:40:98:B2:9D:2A:B3:01:2E:98:AE:2F:FD:3E
Authority key identifier: A9:F3:47:10:3E:F3:49:AD:82:F1:B6:AC:43:E7:6C:0F:FA:38:C2:F8
Certificate issuer: /CN=a9f347103ef349ad82f1b6ac43e76c0ffa38c2f8
Certificate serial: 019F935AC095DFF388A8807D091FF1080A52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfNHED7zSa2C8basQ-dsD_o4wvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:00:26 +0000
Manifest this update: Fri 24 Jul 2026 09:00:26 +0000
Manifest next update: Sat 25 Jul 2026 09:00:26 +0000
Files and hashes: 1: Cegt9gCk36CfyQoZLzS4cnrOmWA.roa (hash: yHvXAS+TMxPI4zuMGTC5jZ53ix1/BV7IdsaANR877aM=)
2: qfNHED7zSa2C8basQ-dsD_o4wvg.crl (hash: fnkwR6KQEv+w7iDqL9Dm2E4Nn+cRasYX867MyYLTMXw=)
3: voGOvW0BRa27Yr9p1xeqy3udyvc.roa (hash: JKI8fmA0jDEWhuhuTal1D06exvXzvzQH3NDd7ekumtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfNHED7zSa2C8basQ-dsD_o4wvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:c0:95:df:f3:88:a8:80:7d:09:1f:f1:08:0a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9f347103ef349ad82f1b6ac43e76c0ffa38c2f8
Validity
Not Before: Jul 24 09:00:26 2026 GMT
Not After : Jul 25 09:00:26 2026 GMT
Subject: CN=34c0ca4782d7624098b29d2ab3012e98ae2ffd3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1b:89:26:69:53:0c:2c:84:b2:3e:36:55:58:
a6:4b:5c:b8:bb:f5:f4:bf:b2:d4:eb:1f:b9:4e:9b:
5f:a9:7c:c2:3c:82:92:02:e9:30:af:ec:a5:9a:a5:
a3:d5:62:49:70:45:96:76:0f:91:70:72:41:db:66:
5d:72:be:6b:06:c3:6f:11:ea:69:82:49:65:eb:d7:
a7:b9:54:1c:0d:a4:7e:86:7e:28:cc:89:74:6d:8e:
7f:0b:15:fb:82:f6:fd:81:fb:7d:22:ca:84:5a:3b:
bc:d6:8a:40:ff:48:6e:ae:b4:08:00:83:9c:a1:d2:
66:14:13:eb:eb:23:ea:90:0f:82:99:82:8f:7a:c3:
fe:12:56:ee:09:93:de:77:c4:e9:95:84:3b:c7:4c:
c3:19:09:21:d7:72:48:df:6c:f7:ff:0c:c3:bd:db:
ba:b2:00:9c:0a:17:e0:2b:4f:93:60:cd:ac:d2:7f:
e0:dd:fd:db:7b:b8:77:57:b9:cc:b6:35:dc:75:a4:
26:3b:30:47:8e:38:ae:47:53:f0:10:97:39:ee:d5:
b7:16:f7:1c:1d:23:52:fa:04:1b:9a:71:2c:07:98:
b7:4b:99:a0:74:83:fc:66:fa:7d:42:be:bf:23:51:
6f:64:20:b4:5d:1b:f4:87:06:75:57:f7:3c:c2:a1:
df:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C0:CA:47:82:D7:62:40:98:B2:9D:2A:B3:01:2E:98:AE:2F:FD:3E
X509v3 Authority Key Identifier:
keyid:A9:F3:47:10:3E:F3:49:AD:82:F1:B6:AC:43:E7:6C:0F:FA:38:C2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfNHED7zSa2C8basQ-dsD_o4wvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:15:16:7d:80:cb:43:43:e5:49:1f:bd:8f:8c:80:30:79:da:
8b:b0:6a:cd:85:16:38:19:61:0e:04:5a:1c:e3:4e:ab:62:85:
36:6d:37:64:9a:61:02:f7:b1:12:83:21:a9:bb:f2:e2:ff:ac:
c9:8c:d6:c2:39:ca:33:d7:bd:54:49:eb:2f:65:f1:75:c2:56:
55:e8:e0:3a:fe:e2:96:44:d9:ed:67:ad:51:cc:8e:be:91:a1:
0a:81:6d:78:ae:46:01:59:a8:14:a4:57:f9:5e:7c:48:ea:31:
2f:ac:02:b1:ed:7e:c5:9e:47:30:80:85:f9:41:c5:25:11:11:
10:3a:ca:d0:30:c3:97:8f:b6:02:4e:05:69:5c:4b:e5:b8:19:
0e:50:23:d6:20:c8:18:00:ce:8a:20:67:e4:cf:8e:13:e2:62:
30:3d:62:e6:ed:8a:69:64:68:1e:1f:52:01:4c:31:ed:fa:a3:
14:1f:be:27:6a:e7:4d:d6:42:a0:b9:0d:f1:94:0a:65:88:d8:
b1:a8:fe:aa:5e:19:9f:51:6c:39:d4:18:54:16:81:d9:d3:9a:
70:cd:a0:78:8a:db:ca:8e:c8:12:d4:76:be:35:7e:d7:9b:4b:
ea:22:ab:2f:23:c1:33:df:17:8e:36:65:b9:42:d7:9e:10:16:
99:00:57:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TWsCV3/OIqIB9CR/xCApSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZjM0NzEwM2VmMzQ5YWQ4MmYxYjZhYzQzZTc2YzBmZmEz
OGMyZjgwHhcNMjYwNzI0MDkwMDI2WhcNMjYwNzI1MDkwMDI2WjAzMTEwLwYDVQQD
EygzNGMwY2E0NzgyZDc2MjQwOThiMjlkMmFiMzAxMmU5OGFlMmZmZDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRuJJmlTDCyEsj42VVimS1y4u/X0
v7LU6x+5TptfqXzCPIKSAukwr+ylmqWj1WJJcEWWdg+RcHJB22Zdcr5rBsNvEepp
gkll69enuVQcDaR+hn4ozIl0bY5/CxX7gvb9gft9IsqEWju81opA/0hurrQIAIOc
odJmFBPr6yPqkA+CmYKPesP+ElbuCZPed8TplYQ7x0zDGQkh13JI32z3/wzDvdu6
sgCcChfgK0+TYM2s0n/g3f3be7h3V7nMtjXcdaQmOzBHjjiuR1PwEJc57tW3Fvcc
HSNS+gQbmnEsB5i3S5mgdIP8Zvp9Qr6/I1FvZCC0XRv0hwZ1V/c8wqHf0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDTAykeC12JAmLKdKrMBLpiuL/0+MB8GA1UdIwQY
MBaAFKnzRxA+80mtgvG2rEPnbA/6OML4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWZOSEVEN3pTYTJDOGJhc1EtZHNEX280d3ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9kYTI1YzktNGZlMS00NWRhLThlNzQt
MmJlYTM0Yjg5MzhiLzEvcWZOSEVEN3pTYTJDOGJhc1EtZHNEX280d3ZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9kYTI1YzktNGZlMS00NWRhLThlNzQtMmJlYTM0Yjg5Mzhi
LzEvcWZOSEVEN3pTYTJDOGJhc1EtZHNEX280d3ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeRUWfYDL
Q0PlSR+9j4yAMHnai7BqzYUWOBlhDgRaHONOq2KFNm03ZJphAvexEoMhqbvy4v+s
yYzWwjnKM9e9VEnrL2XxdcJWVejgOv7ilkTZ7WetUcyOvpGhCoFteK5GAVmoFKRX
+V58SOoxL6wCse1+xZ5HMICF+UHFJREREDrK0DDDl4+2Ak4FaVxL5bgZDlAj1iDI
GADOiiBn5M+OE+JiMD1i5u2KaWRoHh9SAUwx7fqjFB++J2rnTdZCoLkN8ZQKZYjY
saj+ql4Zn1FsOdQYVBaB2dOacM2geIrbyo7IEtR2vjV+15tL6iKrLyPBM98XjjZl
uULXnhAWmQBXsA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:26 2026 by rpki-client