Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/qkHqzdOJUCmcnoEKOen_VCnL4lo.mft
File: qkHqzdOJUCmcnoEKOen_VCnL4lo.mft (raw, json)
Hash identifier: 2uCcxwa/Aa6Im3Qjs3uAAda/GT5fwgppXGapGaDwh5A=
Subject key identifier: 7A:3E:5E:AC:0C:B7:3E:98:D3:5E:AB:77:C5:C0:19:AE:B3:80:B8:E1
Authority key identifier: AA:41:EA:CD:D3:89:50:29:9C:9E:81:0A:39:E9:FF:54:29:CB:E2:5A
Certificate issuer: /CN=aa41eacdd38950299c9e810a39e9ff5429cbe25a
Certificate serial: 019F916D4F9FDB2C2D7BC5FF2BCAB59AC914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkHqzdOJUCmcnoEKOen_VCnL4lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/qkHqzdOJUCmcnoEKOen_VCnL4lo.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:01:27 +0000
Manifest this update: Fri 24 Jul 2026 00:01:27 +0000
Manifest next update: Sat 25 Jul 2026 00:01:27 +0000
Files and hashes: 1: aMJy9IeANZbYVL8CAtiHgm0xoqQ.roa (hash: E4M6mEfejQMjX8Zwy4Poh/25Qtop8e+0EXBl1KbNADM=)
2: qkHqzdOJUCmcnoEKOen_VCnL4lo.crl (hash: +4R7tg/5lg63adt5xQR19BYvhPFlRHS1ikcYGG/RzaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/qkHqzdOJUCmcnoEKOen_VCnL4lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/qkHqzdOJUCmcnoEKOen_VCnL4lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkHqzdOJUCmcnoEKOen_VCnL4lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:4f:9f:db:2c:2d:7b:c5:ff:2b:ca:b5:9a:c9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa41eacdd38950299c9e810a39e9ff5429cbe25a
Validity
Not Before: Jul 24 00:01:27 2026 GMT
Not After : Jul 25 00:01:27 2026 GMT
Subject: CN=7a3e5eac0cb73e98d35eab77c5c019aeb380b8e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5b:18:cb:a8:dd:e6:8b:10:6e:4f:44:07:d8:
d9:4d:8f:c8:33:a9:56:56:36:78:db:8c:45:4e:00:
bc:96:1b:08:a9:05:ea:a7:4f:16:a2:2d:ca:c8:d3:
8a:aa:21:e7:fd:10:00:8c:df:71:ce:ff:77:2b:4d:
aa:d1:ea:ab:8f:e5:c2:47:52:07:fb:89:1d:77:a5:
a3:ff:0d:e3:17:a5:07:4b:c9:a5:f2:fb:dc:39:5a:
82:a3:6b:c6:61:8e:fd:a9:d7:27:8b:f2:8d:6d:8a:
76:d1:8e:5d:1a:16:04:23:ad:ca:bd:22:61:03:6f:
28:90:bc:d0:50:75:80:af:54:b5:91:a3:7e:5d:ce:
90:c3:13:00:f5:19:5d:2f:21:2a:da:82:65:9d:16:
a2:df:d1:39:12:24:4f:df:9b:6a:b9:d1:a1:c8:cd:
07:95:e0:99:66:5c:e9:25:83:eb:b6:f8:29:59:ba:
7f:16:49:fe:d5:c9:5c:9b:29:46:f9:95:ee:c2:31:
33:df:d8:f3:c5:b9:c9:e3:a2:93:26:a0:5a:7f:f2:
57:00:8c:8a:9c:da:14:0e:7d:ee:ab:09:64:3e:05:
63:b1:8f:5c:12:86:61:0c:0f:ec:12:f3:92:73:68:
7a:ec:23:63:4f:22:0f:b5:82:62:c4:ea:17:92:fe:
60:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3E:5E:AC:0C:B7:3E:98:D3:5E:AB:77:C5:C0:19:AE:B3:80:B8:E1
X509v3 Authority Key Identifier:
keyid:AA:41:EA:CD:D3:89:50:29:9C:9E:81:0A:39:E9:FF:54:29:CB:E2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkHqzdOJUCmcnoEKOen_VCnL4lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/qkHqzdOJUCmcnoEKOen_VCnL4lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/qkHqzdOJUCmcnoEKOen_VCnL4lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:e6:7e:73:f4:dd:60:aa:3f:d5:15:10:f2:63:a3:fd:14:59:
a1:5f:04:c2:b5:4f:7c:97:a1:0d:bc:8e:cc:f8:52:94:e0:34:
c9:38:6d:7b:7b:27:d5:d6:61:04:80:6b:cf:75:02:12:d6:d4:
cc:8e:64:59:6d:e4:af:0f:39:f4:cb:38:03:71:0e:eb:cc:e7:
8d:ba:8c:dc:a7:e7:00:6f:97:ca:ab:95:0b:55:ed:f3:d4:17:
0c:7a:db:bd:62:20:96:f7:a9:bb:2a:70:d7:5a:16:c1:1a:50:
a7:b7:24:e8:de:36:03:f0:ac:3d:f4:82:cd:f8:6a:10:a9:a8:
48:28:12:17:35:a5:0b:c8:92:53:cd:7e:e9:b5:45:09:ea:f8:
2a:f3:63:c0:e2:1f:d3:af:9d:01:b9:79:07:85:96:85:9f:46:
8a:30:a0:9a:b9:a1:7c:2f:69:f4:45:19:35:31:39:3f:ef:9a:
c8:9e:d9:17:a0:43:f3:0e:db:49:3a:91:1d:69:2b:15:62:b7:
ef:9c:b0:39:d4:99:ea:20:7f:7a:73:e0:7e:ee:19:65:93:f2:
d9:a0:07:74:8a:69:8f:59:36:92:a7:56:94:83:07:9e:57:26:
ac:6a:ac:92:8f:ae:c3:3c:67:26:43:d1:3d:03:28:e6:b3:77:
34:56:aa:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:15:27 2026 by rpki-client