Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
File: QWbAb_SeBTSAniNABbqlzKfhRqg.mft (raw, json)
Hash identifier: LOYGh+ZjLRquydw0zpBbM60P+Ous5XH0Syb0ouujH2s=
Subject key identifier: 38:EA:69:7A:BC:E1:0D:A3:A2:81:FE:43:39:16:77:17:8B:D0:0A:5B
Authority key identifier: 41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8
Certificate issuer: /CN=4166c06ff49e0534809e234005baa5cca7e146a8
Certificate serial: 019F8E348BB2413E1D84901C23DA2D964BF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
Manifest number: 04DD
Signing time: Thu 23 Jul 2026 09:00:35 +0000
Manifest this update: Thu 23 Jul 2026 09:00:35 +0000
Manifest next update: Fri 24 Jul 2026 09:00:35 +0000
Files and hashes: 1: 6fKXSa7fnznp7NE8PH4sDiQyQyo.asa (hash: rIayLgXGwK3y6K7mwVo9kHrQgOm3DGeSouSk4AwPqp8=)
2: OHcGQbUAqdSq6mt4_3eyTZJR1XA.roa (hash: O7C2wF+M5BpxMvsOFLPpquh+G4qmdUXld04pX58Ae9M=)
3: QWbAb_SeBTSAniNABbqlzKfhRqg.crl (hash: iYstZlfIKRDQBHrwnpt3Jp1J0NoxFZaBbp4/r3AgACA=)
4: VL-lnxlE6fflxqRRlw7b9MCnGvo.roa (hash: GtOH60oIJtJHnm++7YABJtPUhpfnGJz3iJ4jvFL6ZBk=)
5: hdOOC1IEysAq-Z-Tmv9_lJQDID4.roa (hash: yt1gpylTF5DwEVRgiWOOxqt2J7YwsxusRFsZDCgtRfE=)
6: k1LZ-UFNX-GYC_CbICC5vAyhqGU.roa (hash: WWrThQ244IWu8OYVTPeLpxaxBpbHuCRQtgMgtXzO41g=)
7: kjzLCEj1tYw7sDbLWbp9V6YxOOM.roa (hash: qZYqyURYcynOIWE252O3MtzO4WaOHKWvGwoZG8pxdGk=)
8: xAgNG2ab1Odx9OPGL8O_VCHs2r4.roa (hash: Qg0Er9yW1p6tGJCqfUrEgpKUwThpO2+ur4790Y2y8Ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:34:8b:b2:41:3e:1d:84:90:1c:23:da:2d:96:4b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4166c06ff49e0534809e234005baa5cca7e146a8
Validity
Not Before: Jul 23 09:00:35 2026 GMT
Not After : Jul 24 09:00:35 2026 GMT
Subject: CN=38ea697abce10da3a281fe43391677178bd00a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:91:89:e2:29:33:70:92:6e:f0:93:ef:03:c6:
91:72:42:87:c0:4e:ae:ad:dd:54:33:98:b8:1f:e7:
3c:e8:1f:94:e4:7c:a3:9c:44:90:41:b3:dd:42:35:
1c:d5:ef:88:94:55:79:08:60:7f:90:2a:a5:70:bb:
ad:54:fe:e3:f9:62:07:0a:15:b3:6f:02:9d:0d:0c:
69:89:97:25:ef:5f:4c:ac:6c:b8:20:ad:55:1c:ef:
4e:a4:01:d4:e4:df:a0:07:59:d7:50:7f:d4:32:1c:
bd:d4:83:31:52:7d:69:43:80:3f:bd:cb:d1:ff:df:
41:4b:be:97:f6:75:ad:2a:cb:e0:7e:3d:89:3e:03:
02:09:ae:60:a0:59:f2:51:64:0e:86:91:86:4a:0e:
b5:1c:90:ec:fc:ab:94:ed:d7:49:95:29:99:aa:35:
27:84:29:4f:ff:17:f8:a7:ae:9a:a1:2e:b4:45:19:
4a:f4:2f:48:e4:47:ae:89:e9:8b:4d:a1:fb:19:fd:
f8:dd:1e:2f:30:14:2a:08:ea:76:39:58:eb:9e:ee:
e2:e9:0d:f8:cc:82:23:21:0c:ee:96:c5:b0:90:65:
12:89:f7:a5:2d:b7:27:fe:74:fa:1e:a9:32:56:9c:
b7:a4:4c:2c:61:f3:e7:bc:72:92:fb:87:c0:c8:62:
7d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EA:69:7A:BC:E1:0D:A3:A2:81:FE:43:39:16:77:17:8B:D0:0A:5B
X509v3 Authority Key Identifier:
keyid:41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e6:15:88:b4:94:06:d5:53:d5:3a:c3:93:8b:29:f9:e6:03:
6e:5a:f3:aa:b1:9a:ae:d5:a5:ed:44:fb:44:ab:8b:3f:f6:91:
0b:7e:40:4a:77:26:c5:51:f3:a4:30:da:1f:be:9f:f3:9e:e2:
4c:a7:ba:62:46:d9:77:18:40:cb:43:53:7d:cf:1e:8e:af:07:
c8:9e:7e:52:8f:51:ef:f3:22:0d:dc:e9:c7:7f:90:46:a2:98:
16:b1:4d:0c:fd:27:d5:28:fa:13:da:05:bd:c7:53:9a:33:4c:
77:e3:05:65:e1:ed:5b:62:cd:1f:aa:47:f8:c7:79:89:58:c3:
1e:e8:80:4b:4e:76:1b:62:a9:e1:90:30:e2:bb:a3:67:ad:03:
a1:87:f2:5f:7b:09:9f:29:64:97:5a:ea:d4:04:e6:5d:d4:af:
a3:01:d3:b5:f3:26:53:a4:6d:19:a4:8a:7f:20:87:b6:9b:7c:
68:cf:d0:99:1b:88:82:7b:e0:47:42:8f:fa:28:4e:31:e4:ee:
48:f7:e2:f6:25:2e:29:cf:a3:08:74:3d:b8:51:38:24:3d:73:
de:1e:43:cd:19:e3:fa:6b:4a:6c:12:4d:cd:89:18:bb:ec:d2:
20:ee:e7:15:57:ed:31:58:ab:7c:55:03:9e:0e:f9:4a:81:06:
67:4f:b7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:24 2026 by rpki-client