
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
File: QIAlx94EAODzyI1KEioxfjLF4hw.mft (raw, json)
Hash identifier: fxALlZ5yTVAnwOZFP7qPicrErlmnKIzvE/nBEST2EDs=
Subject key identifier: C8:67:9A:86:AC:29:D7:CF:06:3F:B2:59:89:04:94:F1:30:FA:65:41
Authority key identifier: 40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
Certificate issuer: /CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Certificate serial: 019F9323E48E945F247CDF3D13068158C979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
Manifest number: 19D2
Signing time: Fri 24 Jul 2026 08:00:30 +0000
Manifest this update: Fri 24 Jul 2026 08:00:30 +0000
Manifest next update: Sat 25 Jul 2026 08:00:30 +0000
Files and hashes: 1: AwpzkVc0oTDl0sjoa6-QEqDiUec.roa (hash: x7d6UyA4Hucc8K4+EGGBB/UoxNRtjZ72KYH63IunwOE=)
2: QIAlx94EAODzyI1KEioxfjLF4hw.crl (hash: nDnqmHn5ZA+GI9DnHiLRYVvIyZ2yX1/kpuu4pJaydwI=)
3: VEGHoxhhHVB-D4aY0Y3_4jbUdyo.roa (hash: oOu25O1lLjcQ94aJO/rE50oCG5Vg7rSdNnxkHyjmobc=)
4: dAYviiIQ0ZH5t51e9Yw2PCGTVhA.roa (hash: YawdemXrdjGI6Mt73jp819mShD2ngjs7tuw/5rjzQBM=)
5: mX2v1E6XLguFnbjaAo9xkuZ_YbU.roa (hash: EsNOl7YE7/jiv9Lddbv0Cg6u3OhdzH3IL5pGXlsPUKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:e4:8e:94:5f:24:7c:df:3d:13:06:81:58:c9:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Validity
Not Before: Jul 24 08:00:30 2026 GMT
Not After : Jul 25 08:00:30 2026 GMT
Subject: CN=c8679a86ac29d7cf063fb259890494f130fa6541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b5:57:f6:03:ef:b3:f1:98:11:b0:7f:fe:b5:
91:a9:4f:00:47:2f:cf:92:4c:56:26:d3:06:9d:4e:
42:78:32:51:64:42:d8:ae:53:e9:d4:33:4e:83:26:
e9:43:41:98:9a:e2:fb:ff:7f:d5:53:7c:cc:32:4f:
8f:8b:93:e7:3b:ee:81:0f:41:2f:2b:e9:fc:69:6a:
08:4e:46:25:20:69:79:38:ef:37:da:af:77:ae:36:
31:38:ce:a4:85:fb:95:55:b8:e9:af:49:3b:a2:21:
73:12:6e:1d:3d:a7:dd:eb:2f:eb:3f:04:47:f9:ed:
3a:22:35:f3:03:31:b9:07:59:9d:25:37:91:17:47:
a0:8c:c6:d8:fa:63:c9:fd:cd:2e:a8:d9:71:b2:1a:
5a:84:ce:49:00:a2:22:89:6e:73:2d:3f:51:3d:50:
0e:71:ef:a8:c7:9f:85:97:9b:f7:90:8f:c7:24:0c:
39:af:37:d7:b3:8a:89:01:f2:65:cb:80:aa:2f:21:
2a:53:aa:8f:4b:34:dd:83:57:5d:50:d0:28:4b:95:
5a:3c:40:4b:43:bd:49:fd:42:4c:b5:3e:7f:68:0d:
e7:b6:ba:3f:97:8d:48:fc:8e:a5:8a:49:4d:13:de:
46:1d:4e:25:85:37:83:f3:d8:1d:09:4c:d3:5e:93:
4b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:67:9A:86:AC:29:D7:CF:06:3F:B2:59:89:04:94:F1:30:FA:65:41
X509v3 Authority Key Identifier:
keyid:40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:df:46:ef:42:99:ce:96:d1:37:f6:d8:99:d1:dd:79:e7:c1:
3c:d2:75:c6:35:d8:fb:6d:5f:72:65:f7:db:6b:40:e1:21:d0:
34:55:d0:e6:df:98:d4:7d:5c:d7:a4:e6:05:f0:b2:d2:c4:78:
57:43:79:58:64:b2:6f:d8:a0:69:19:08:bd:fe:94:56:f7:81:
d7:17:68:f5:49:bf:13:56:d7:5d:f7:06:d0:5e:50:71:2c:4a:
e8:e7:be:00:5e:66:ca:9b:10:71:e5:1d:76:0e:dc:b9:78:2c:
8b:b4:bf:6b:31:3f:63:af:4e:58:fd:42:db:8a:74:d0:bf:e5:
f4:24:63:64:71:04:2c:fb:67:ca:fb:74:f6:44:15:15:6b:8f:
ce:62:44:e2:1e:82:24:34:90:95:0f:42:eb:a2:74:d5:79:e9:
f2:33:04:eb:35:6b:95:79:94:7d:4c:0d:85:3b:b7:11:f3:cb:
ce:50:33:8d:fd:21:4c:59:c2:a4:bb:3d:73:36:fc:76:3d:00:
3d:16:15:c9:4b:b9:c4:c7:d6:6f:d9:48:70:68:98:e1:ea:c4:
fa:a0:67:b3:c5:7e:db:79:13:35:b4:a7:67:d5:7d:b8:e1:22:
81:bd:b2:b6:24:5b:b7:28:43:43:c1:c4:84:10:37:85:63:f6:
1c:67:69:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TI+SOlF8kfN89EwaBWMl5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwODAyNWM3ZGUwNDAwZTBmM2M4OGQ0YTEyMmEzMTdlMzJj
NWUyMWMwHhcNMjYwNzI0MDgwMDMwWhcNMjYwNzI1MDgwMDMwWjAzMTEwLwYDVQQD
EyhjODY3OWE4NmFjMjlkN2NmMDYzZmIyNTk4OTA0OTRmMTMwZmE2NTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorVX9gPvs/GYEbB//rWRqU8ARy/P
kkxWJtMGnU5CeDJRZELYrlPp1DNOgybpQ0GYmuL7/3/VU3zMMk+Pi5PnO+6BD0Ev
K+n8aWoITkYlIGl5OO832q93rjYxOM6khfuVVbjpr0k7oiFzEm4dPafd6y/rPwRH
+e06IjXzAzG5B1mdJTeRF0egjMbY+mPJ/c0uqNlxshpahM5JAKIiiW5zLT9RPVAO
ce+ox5+Fl5v3kI/HJAw5rzfXs4qJAfJly4CqLyEqU6qPSzTdg1ddUNAoS5VaPEBL
Q71J/UJMtT5/aA3ntro/l41I/I6liklNE95GHU4lhTeD89gdCUzTXpNLjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMhnmoasKdfPBj+yWYkElPEw+mVBMB8GA1UdIwQY
MBaAFECAJcfeBADg88iNShIqMX4yxeIcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUlBbHg5NEVBT0R6eUkxS0Vpb3hmakxGNGh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy81OTMwM2QtNzQ4YS00Nzk3LTgxMWUt
ZmVlMmU4ZDQwODRmLzEvUUlBbHg5NEVBT0R6eUkxS0Vpb3hmakxGNGh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy81OTMwM2QtNzQ4YS00Nzk3LTgxMWUtZmVlMmU4ZDQwODRm
LzEvUUlBbHg5NEVBT0R6eUkxS0Vpb3hmakxGNGh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkN9G70KZ
zpbRN/bYmdHdeefBPNJ1xjXY+21fcmX322tA4SHQNFXQ5t+Y1H1c16TmBfCy0sR4
V0N5WGSyb9igaRkIvf6UVveB1xdo9Um/E1bXXfcG0F5QcSxK6Oe+AF5mypsQceUd
dg7cuXgsi7S/azE/Y69OWP1C24p00L/l9CRjZHEELPtnyvt09kQVFWuPzmJE4h6C
JDSQlQ9C66J01Xnp8jME6zVrlXmUfUwNhTu3EfPLzlAzjf0hTFnCpLs9czb8dj0A
PRYVyUu5xMfWb9lIcGiY4erE+qBns8V+23kTNbSnZ9V9uOEigb2ytiRbtyhDQ8HE
hBA3hWP2HGdpPg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:26:18 2026 by rpki-client