Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
File: qjX0oGEfcqiSww2CEtIfhswTqWc.mft (raw, json)
Hash identifier: UBxZHaYdPXCZ+301lp5YKcY0XgaoLe9bt7I9HSCFyY4=
Subject key identifier: 1D:AA:29:9F:61:95:EE:74:11:AE:B6:5B:FF:54:C6:E9:12:CE:B2:2C
Authority key identifier: AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
Certificate issuer: /CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Certificate serial: 019F8F10004401BB9AD66AF80B0F27DBE32D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
Manifest number: 0A5E
Signing time: Thu 23 Jul 2026 13:00:18 +0000
Manifest this update: Thu 23 Jul 2026 13:00:18 +0000
Manifest next update: Fri 24 Jul 2026 13:00:18 +0000
Files and hashes: 1: XdHfu4aNbbqY05djIHZSat5N9NA.asa (hash: AUEcvgTMi0kC5OD2yO9q7Au5IXQUp3/LdfUmGStQlvw=)
2: qjX0oGEfcqiSww2CEtIfhswTqWc.crl (hash: T1n5oYUW8vp1mRCMyIbwnNe4CqyMhSto/6c0m3dcLQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:00:44:01:bb:9a:d6:6a:f8:0b:0f:27:db:e3:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Validity
Not Before: Jul 23 13:00:18 2026 GMT
Not After : Jul 24 13:00:18 2026 GMT
Subject: CN=1daa299f6195ee7411aeb65bff54c6e912ceb22c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cb:d3:7f:be:db:3a:34:f0:55:b6:11:41:96:
ed:c6:7c:e2:24:94:ac:95:c0:a6:aa:82:95:7a:8f:
a6:37:59:3b:ae:cb:1d:64:78:15:67:e5:c8:2b:8a:
77:69:9d:6e:62:5c:4b:23:56:fc:74:75:60:de:48:
41:5a:89:52:45:ff:a3:4f:7a:e4:84:88:82:2d:6c:
19:92:45:c1:26:2f:79:c8:e2:6d:94:c1:8a:76:2d:
cd:ab:f6:7e:f9:1e:17:0d:40:38:96:98:9f:77:e8:
19:42:3c:65:ca:33:33:39:00:ae:aa:95:73:79:81:
d4:b8:08:0d:7b:f1:4c:6e:79:9b:65:b1:53:f7:01:
9f:aa:81:f3:3d:c5:6c:2f:74:e6:14:52:34:9f:91:
c0:94:2b:6c:f8:f0:ed:08:d7:15:05:52:e7:c7:d5:
a1:94:23:64:31:66:41:99:76:ac:de:d2:d2:4d:58:
e4:99:50:2e:a8:4c:71:7e:8c:ea:d8:07:e2:21:74:
ae:a9:23:4c:6b:b7:32:10:ac:bc:6b:79:12:e5:54:
79:b6:f8:d1:75:40:ee:49:30:64:ab:a4:5d:28:51:
83:7d:2c:b0:74:1c:a6:35:d8:cf:c6:f9:57:59:33:
72:29:83:16:32:84:f0:d1:1b:4a:c5:61:30:6e:34:
86:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:AA:29:9F:61:95:EE:74:11:AE:B6:5B:FF:54:C6:E9:12:CE:B2:2C
X509v3 Authority Key Identifier:
keyid:AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e8:84:bf:0a:d6:b8:bb:d9:21:77:54:ac:2e:4c:a3:47:80:
eb:65:c1:b4:76:a9:d0:6d:83:f2:50:88:b4:b0:94:ed:e6:58:
00:06:1c:1d:11:eb:a3:74:51:9d:3c:ca:53:a8:83:78:cb:af:
a8:20:f9:48:58:a8:5b:36:8c:7b:df:79:b7:f9:df:9a:81:1a:
28:32:1e:13:db:a8:35:72:f4:8b:f2:cd:a9:0c:cf:dc:3e:9f:
bc:ca:39:25:d8:38:2f:42:90:0d:65:21:9b:bc:4e:a8:df:97:
c1:01:89:3a:0d:91:36:9d:bd:ae:76:b6:7e:43:18:ff:57:87:
66:0d:f1:31:b9:5b:3f:a9:76:54:cd:2a:cc:86:5c:f5:de:32:
8c:29:3b:50:c7:d1:81:e4:b2:92:6c:eb:7a:9e:77:c0:95:96:
49:52:b0:c0:6a:53:6c:d3:51:19:bd:03:7e:a2:07:4b:79:99:
84:79:69:44:84:a2:64:ab:2e:42:47:b0:a5:d5:4c:e7:b1:6f:
11:87:82:7f:9b:22:9a:90:24:c4:ec:6b:50:e5:09:52:1f:f1:
82:9c:67:db:67:0e:03:1c:61:ae:93:ea:57:e6:97:db:76:68:
3e:8c:b1:d5:98:e6:f9:9a:3e:18:25:b0:1b:29:63:96:cf:13:
50:e7:52:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:24 2026 by rpki-client