Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
File: qnNO9a4hwOiX-hhkRxhOya1K4p0.mft (raw, json)
Hash identifier: SKXyS+/JBk/cSwqXkqqX8AKIP/1F/WR2L5mzeZBEX5Q=
Subject key identifier: 27:08:BA:C3:B7:3A:4D:9A:A6:87:07:32:38:56:D0:A8:4C:50:30:CE
Authority key identifier: AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D
Certificate issuer: /CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d
Certificate serial: 019F91DB27ADA10672DAABB4AD8CCC925CFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
Manifest number: 0B79
Signing time: Fri 24 Jul 2026 02:01:26 +0000
Manifest this update: Fri 24 Jul 2026 02:01:26 +0000
Manifest next update: Sat 25 Jul 2026 02:01:26 +0000
Files and hashes: 1: Nd2VWji2-npmv2b1apqFNWYSkaY.roa (hash: BWQO3/ctGckcd4Dl6OgXbOo4/UEjPFHnSYCpr3sCzaU=)
2: dKP6zKEOjA35eNWIADhSGj3djko.roa (hash: 2Lz2j2XDdHTzfHzI32dG004beOMGbTVI9KUsaPstIRU=)
3: qnNO9a4hwOiX-hhkRxhOya1K4p0.crl (hash: 9cVp4/1AZrepQE+9v+Re8fISwHhqUw/+k+WcpKKYBbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:27:ad:a1:06:72:da:ab:b4:ad:8c:cc:92:5c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d
Validity
Not Before: Jul 24 02:01:26 2026 GMT
Not After : Jul 25 02:01:26 2026 GMT
Subject: CN=2708bac3b73a4d9aa68707323856d0a84c5030ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:29:0f:d1:20:a6:66:aa:e4:de:55:15:f4:b4:
32:43:21:da:c6:b6:99:57:0e:3e:23:41:87:26:4a:
75:d7:ba:9a:2a:b1:6a:1d:a9:6b:df:51:4d:f6:0d:
5d:82:a2:46:f6:10:b6:01:30:5b:fc:39:50:cb:7e:
dd:cf:db:a1:66:24:5c:d2:c3:55:05:6b:99:23:0a:
1d:d0:d7:83:d7:e1:29:4d:3f:9c:4e:f9:e5:2d:27:
7e:39:1e:ad:85:99:0b:0f:79:ee:2d:fd:09:6c:5c:
27:36:fb:37:e3:bf:d1:71:ea:60:ff:72:e2:85:bf:
13:b3:07:d8:25:87:6f:3d:fc:fa:4c:9e:ec:72:d4:
59:0a:30:72:41:bc:ab:da:bb:2b:66:16:ff:aa:fb:
4e:86:b4:9b:e8:89:8a:60:34:01:a4:c2:97:58:03:
c7:79:e4:95:b4:c7:09:10:8d:7a:3c:82:d7:7f:b3:
4d:bd:db:57:46:f8:60:72:86:b9:29:4d:da:38:b8:
6c:32:b8:02:27:c8:2c:a2:98:94:7d:73:1d:d5:42:
19:3a:7d:d9:eb:db:d9:7d:02:0b:9b:65:25:82:27:
19:cd:27:36:52:3b:c6:f6:e9:75:60:b6:9e:b9:d4:
33:f3:04:f1:0a:39:20:77:7b:6d:20:a1:12:17:3d:
93:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:08:BA:C3:B7:3A:4D:9A:A6:87:07:32:38:56:D0:A8:4C:50:30:CE
X509v3 Authority Key Identifier:
keyid:AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:3e:0d:68:2f:5f:e2:1e:db:c4:4b:be:bb:bd:59:55:26:19:
2a:d1:d5:57:20:a2:e6:64:85:6a:17:c9:fc:67:74:bd:10:79:
ea:7c:ca:42:7f:68:ea:f9:45:e1:16:6f:9c:5f:10:28:8c:56:
f3:57:de:d4:a9:da:31:d2:ae:f2:b3:41:16:01:c3:f7:fb:c6:
99:4a:e1:38:29:0b:ec:95:57:c7:89:8d:15:7a:b9:a9:1a:13:
9e:dd:3a:dd:ee:2f:36:4f:0d:f2:f8:a8:a1:7a:22:75:a1:08:
bc:b8:74:f0:62:35:4d:5f:39:34:1a:45:f2:17:9d:26:ac:83:
62:2b:1c:f7:4f:53:69:9f:13:0e:c3:68:84:0e:2f:00:81:6f:
3d:f9:5d:fe:00:26:52:82:8e:63:f2:19:5e:b4:49:8d:0f:a5:
34:49:d8:29:00:d3:70:c7:a7:09:dc:02:93:07:6b:88:a0:7e:
87:cf:49:0f:55:14:c7:22:a2:da:1a:39:52:8d:db:3b:05:5f:
98:44:28:40:a8:1b:5c:ce:ed:d0:9c:c1:55:20:10:c7:3f:88:
32:df:40:eb:ba:d0:0a:f5:16:75:59:64:9e:20:dc:11:49:ff:
5c:fb:15:19:55:ad:21:49:ce:62:7c:07:e8:ed:86:69:e6:07:
0d:13:26:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:43:45 2026 by rpki-client