Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
File: r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft (raw, json)
Hash identifier: uhuyXpDVpV2hYkBbPRbvvD6ubbh4CU5m+x7QW+2iqNE=
Subject key identifier: 8A:2B:BB:B1:3B:83:84:0C:7F:02:06:01:80:64:FA:2E:15:A2:60:39
Authority key identifier: AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
Certificate issuer: /CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Certificate serial: 019F91DB1E4E3FD43162FC591C9AD38491BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
Manifest number: 16BC
Signing time: Fri 24 Jul 2026 02:01:24 +0000
Manifest this update: Fri 24 Jul 2026 02:01:24 +0000
Manifest next update: Sat 25 Jul 2026 02:01:24 +0000
Files and hashes: 1: 0llklTGwRpo1D7HWMMbydisxDQ4.roa (hash: 3z2IZ4s8AyOuNF65gLQqbep0m2rYxv6RvjyL7CQP75U=)
2: QWs1csGK8KUFGhfj2QFKlBU8El0.roa (hash: 0iVAN86kduscSDUBK67oi4SEPANLs+DqgTgFkRGgbJQ=)
3: r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl (hash: FOaRJKjvoRVNfU/SPmSlkue3ziMbJZwSFRIsPw6lOek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:1e:4e:3f:d4:31:62:fc:59:1c:9a:d3:84:91:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Validity
Not Before: Jul 24 02:01:24 2026 GMT
Not After : Jul 25 02:01:24 2026 GMT
Subject: CN=8a2bbbb13b83840c7f0206018064fa2e15a26039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:28:a2:9b:e0:c1:fa:0e:a0:69:88:38:07:ab:
a6:c0:df:9c:23:77:7c:a2:dd:48:55:98:f9:12:5d:
5e:57:3a:ad:25:89:49:44:71:99:b5:41:7d:9f:05:
c5:a3:75:e2:59:e1:9b:2c:8b:3c:78:63:69:9c:75:
0a:fa:af:87:cc:91:c5:dc:23:f3:5e:3a:23:07:ef:
6d:27:cf:ed:4c:9e:3f:15:f9:55:c2:5b:2b:82:3d:
1c:4b:f7:c5:39:23:eb:78:ae:97:06:fe:ce:18:d2:
cc:9b:a0:9a:7c:58:bc:bd:9d:e9:41:ed:42:69:c3:
42:00:63:d7:36:65:09:45:a1:a4:ff:41:ee:4d:4b:
d0:f1:a5:7e:03:58:98:3d:c7:cc:e5:cb:ea:ba:fc:
e8:ba:46:6a:a6:48:14:5b:f7:20:52:53:57:db:75:
49:d1:59:cf:93:72:db:77:c2:70:7e:11:2e:b6:9c:
8b:c4:17:81:f3:9e:5f:bb:c5:26:ac:5b:62:56:5a:
04:3b:57:7a:58:2b:d0:eb:86:1c:09:aa:04:93:79:
6d:c7:80:6e:9b:29:9e:06:36:0e:ba:de:a2:2a:37:
3a:ad:11:79:8c:21:c8:65:1d:ab:e8:2e:ff:cb:df:
4b:31:71:e3:52:7d:5f:02:78:ce:af:fd:9d:16:fc:
e9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2B:BB:B1:3B:83:84:0C:7F:02:06:01:80:64:FA:2E:15:A2:60:39
X509v3 Authority Key Identifier:
keyid:AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:59:4c:d7:be:74:19:cf:cb:c6:e8:8d:41:c7:74:9b:8f:1b:
c5:f5:c5:06:43:5d:2f:a1:41:c2:71:0f:c1:a8:46:06:8d:aa:
3a:67:41:ec:c0:9e:4b:1d:61:29:3b:ba:24:d9:f7:6d:25:09:
72:0b:06:f1:e1:01:f3:00:a4:87:53:60:0c:7e:30:43:79:4a:
a8:c8:60:93:60:d4:5d:f7:60:c1:76:65:1a:f0:be:75:dd:73:
d2:95:90:d1:9c:34:43:34:01:15:a2:12:e9:26:0d:a6:62:ec:
8d:76:2e:1d:9d:56:fb:79:c8:77:62:1c:49:78:da:d2:cb:c0:
86:28:01:3b:d3:8d:86:4f:5b:42:11:53:00:3d:40:86:d2:00:
7c:f3:91:33:47:09:b8:d1:d5:d6:3b:70:f3:d9:81:9c:0c:f9:
04:af:d1:7f:e7:28:df:fe:61:0b:43:35:ff:95:fb:b1:e3:60:
a8:aa:61:57:42:de:72:d0:ab:1a:af:ec:9b:2e:ed:9e:cc:f0:
31:03:b5:db:b6:9d:9b:fa:e9:99:f4:16:89:0b:a2:60:19:d4:
5b:d5:22:1b:63:65:f7:ff:7b:f7:df:ff:3d:7a:d8:b8:4f:3a:
0e:44:ed:fc:09:81:38:f5:33:f4:a9:91:ae:03:b6:d7:86:90:
42:d5:97:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:03:14 2026 by rpki-client