Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.mft
File: qERYOVOgK8amaZ3pJ89FcAfwVSg.mft (raw, json)
Hash identifier: LRsRUVRuUGI486i7Nn+hmNn4QNhE+xf+S9MEVLQ2Kq4=
Subject key identifier: 16:14:81:82:D3:CD:30:80:FB:9A:D3:1E:91:B5:03:8D:6C:8C:27:67
Authority key identifier: A8:44:58:39:53:A0:2B:C6:A6:69:9D:E9:27:CF:45:70:07:F0:55:28
Certificate issuer: /CN=a844583953a02bc6a6699de927cf457007f05528
Certificate serial: 019F946D7F2343848782BDBB6391F11C09B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qERYOVOgK8amaZ3pJ89FcAfwVSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.mft
Manifest number: 025F
Signing time: Fri 24 Jul 2026 14:00:31 +0000
Manifest this update: Fri 24 Jul 2026 14:00:31 +0000
Manifest next update: Sat 25 Jul 2026 14:00:31 +0000
Files and hashes: 1: bzuHav72txau2Blj1JcbQR-3zHA.roa (hash: TCvNISq9G9+8+m7g0vleezt4nSYPh9D8kXCKj2MC7tQ=)
2: qERYOVOgK8amaZ3pJ89FcAfwVSg.crl (hash: +n9FNjVNdSNmjXTw3S8ydQQlsP/GqSXuKO1olqB88+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qERYOVOgK8amaZ3pJ89FcAfwVSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:7f:23:43:84:87:82:bd:bb:63:91:f1:1c:09:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a844583953a02bc6a6699de927cf457007f05528
Validity
Not Before: Jul 24 14:00:31 2026 GMT
Not After : Jul 25 14:00:31 2026 GMT
Subject: CN=16148182d3cd3080fb9ad31e91b5038d6c8c2767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:12:c6:d9:71:18:68:fa:82:d4:ec:3f:83:c3:
79:45:a6:74:35:5e:d4:eb:d4:37:17:74:03:1f:3c:
d5:c3:7f:ed:06:c8:92:2d:d6:f0:aa:12:4e:83:39:
0e:ef:1e:3d:60:f7:d8:3e:f9:bc:0b:3d:ba:6e:a0:
b5:2c:2d:7f:f4:51:b5:77:91:67:35:09:33:4a:4e:
19:39:01:86:60:33:1e:57:52:f8:c3:23:ed:ce:67:
36:5c:54:71:73:8f:50:57:29:fe:47:e5:4f:c0:34:
fd:8c:a7:48:2c:a6:11:30:0f:45:84:de:8b:14:bc:
0c:7b:ed:ee:b3:85:f5:9b:c1:fb:3d:c1:9f:6b:02:
c0:a7:19:fe:6b:59:9c:94:43:8c:a6:c5:ac:37:fd:
b3:ef:b5:a3:08:7c:1c:fe:e3:53:47:d2:5e:3e:da:
6e:be:c5:63:1f:92:5f:d0:a3:3f:05:cc:93:50:42:
01:38:c9:40:2c:8b:f9:d6:b8:c8:da:ca:bf:6c:16:
87:f1:ce:96:e3:8d:07:4a:13:b0:15:19:6a:f2:b8:
d6:dc:38:b5:9a:eb:a8:34:04:d5:37:52:fe:f8:8e:
d3:bb:36:32:02:34:39:2b:68:ee:f8:99:b4:69:24:
67:df:18:1e:2c:06:0e:66:ac:53:5a:16:fa:5a:4f:
e4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:14:81:82:D3:CD:30:80:FB:9A:D3:1E:91:B5:03:8D:6C:8C:27:67
X509v3 Authority Key Identifier:
keyid:A8:44:58:39:53:A0:2B:C6:A6:69:9D:E9:27:CF:45:70:07:F0:55:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qERYOVOgK8amaZ3pJ89FcAfwVSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:0b:ef:8c:00:b8:9a:c1:8d:b8:f6:ea:cb:0f:74:18:4e:42:
5c:7d:34:d5:23:31:55:39:b4:6b:36:23:05:4d:5a:39:e7:d1:
62:39:c5:93:8e:22:29:c6:77:40:24:8b:21:98:e8:16:56:71:
36:a3:b7:f2:d1:24:03:ab:e3:30:70:e6:83:02:2e:68:9a:8c:
6b:04:07:f1:d7:37:ac:1c:a1:0e:9a:59:b3:eb:7e:11:3b:a5:
57:de:c0:ca:16:c1:34:a1:eb:89:e4:fd:6c:08:f8:33:b6:75:
53:b4:7f:3b:f6:39:29:80:44:11:20:6f:28:cf:67:6c:01:c3:
2f:51:cb:ac:bc:75:71:0d:21:b5:e3:70:07:65:f7:9a:45:eb:
ed:ab:d7:7a:4b:1e:d4:bc:8f:27:3a:17:75:76:5c:18:53:b6:
e8:45:d4:bd:8c:08:72:10:6e:4e:42:2d:a9:72:28:16:12:f0:
b9:3e:5f:1f:cf:58:e1:47:b4:4c:2f:c9:e2:fa:45:ec:b0:08:
27:2d:a8:99:47:a8:c8:e6:85:7f:a2:8a:67:00:81:48:3b:35:
42:aa:97:f8:60:5a:61:cf:49:91:fc:be:d2:1b:4e:5b:b1:d4:
7e:69:cf:8d:a0:2d:a1:7a:e3:bc:6a:c2:c3:db:b4:92:0c:d3:
6b:59:84:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:41:10 2026 by rpki-client