Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
File: qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft (raw, json)
Hash identifier: PUSTtVdh1FAK8RvFkjjE3IwDcPuBhszamg5x9sYxXws=
Subject key identifier: EE:FA:E3:E7:CD:22:CB:7D:F8:EE:B1:39:20:2A:F3:32:30:54:89:A4
Authority key identifier: A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
Certificate issuer: /CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Certificate serial: 019F921193FBDE10266FAEC17C31A895CDCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
Manifest number: 105C
Signing time: Fri 24 Jul 2026 03:00:53 +0000
Manifest this update: Fri 24 Jul 2026 03:00:53 +0000
Manifest next update: Sat 25 Jul 2026 03:00:53 +0000
Files and hashes: 1: bhlKdXGmWCr9DFWjhc8P0wglZIc.roa (hash: jECjuduWw41GZ7hEmsgN93fP6SWVQcwry3yoxhpzbrA=)
2: qKMToe_MWgm-y06gJ6u3-V2krkc.roa (hash: IhBtU1yl4hzFItLKbqNgqy5ZA2HU2qEodxBl6f6yCww=)
3: qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl (hash: V+Q/TowCXyUdDxznfSTUOaA3UTAhp7coZpkPSN/B7wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:93:fb:de:10:26:6f:ae:c1:7c:31:a8:95:cd:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Validity
Not Before: Jul 24 03:00:53 2026 GMT
Not After : Jul 25 03:00:53 2026 GMT
Subject: CN=eefae3e7cd22cb7df8eeb139202af332305489a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ab:7b:3e:0a:3b:4e:b6:94:6a:6b:06:bb:e7:
25:c3:30:9f:9a:b0:69:71:76:cc:9c:73:85:e5:21:
96:37:2a:68:00:6f:45:d0:f9:6e:35:00:4c:cc:b4:
80:a0:ff:dc:01:8d:51:6d:e2:b4:77:7c:2a:2c:6d:
9b:ae:2c:bc:64:54:c7:62:56:e5:52:0f:ae:8d:26:
e6:0f:1b:55:8d:6f:2d:64:d9:76:d0:19:62:0a:b9:
13:20:8f:11:d0:79:4b:a3:c7:a6:fb:39:e0:b6:31:
31:14:ba:82:21:a8:7f:83:79:d9:51:42:75:9a:ac:
39:c6:23:07:27:a2:37:d4:71:5d:88:7a:9e:42:2a:
9c:77:f6:d6:5a:09:20:2c:eb:8d:f5:91:b4:7f:c1:
bd:9a:10:b0:5a:8c:42:32:85:5a:44:75:e4:76:af:
63:1d:16:43:59:35:99:bc:b4:46:91:9a:77:43:58:
67:47:04:52:f8:97:4c:70:04:d6:cb:9b:55:34:86:
ae:a6:1f:08:85:4a:50:68:3c:00:45:21:f7:63:92:
ca:79:5c:8f:b9:10:e9:c2:c3:d5:da:35:29:3a:d4:
64:fe:04:50:d3:a9:20:69:68:f5:ec:7c:c2:ee:c6:
56:f0:36:ae:38:ae:25:96:5d:a2:3d:43:91:e0:df:
32:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FA:E3:E7:CD:22:CB:7D:F8:EE:B1:39:20:2A:F3:32:30:54:89:A4
X509v3 Authority Key Identifier:
keyid:A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:34:f7:df:f2:89:73:f4:83:42:3e:38:1b:2a:26:e2:0b:87:
77:22:62:64:07:06:ca:e5:83:40:ab:ed:44:81:b6:48:25:35:
c3:18:b8:ac:70:4d:8c:cd:39:e6:cb:92:69:1b:f4:35:5b:fb:
28:bc:9e:b1:7f:95:46:92:9f:9a:b9:aa:42:26:ba:ad:7a:a8:
58:13:a9:17:95:04:7e:a1:e0:95:54:da:e6:e1:3e:b7:8e:fd:
77:92:5d:d7:13:88:25:52:e0:2b:b4:49:c4:40:3a:4c:6e:79:
92:d5:e6:b7:58:e2:0f:2a:61:c2:72:b0:97:6b:4c:9f:30:0c:
ae:d4:6b:33:b8:49:2b:6c:a5:92:d8:ce:98:db:20:dc:e6:df:
b1:e5:84:4b:50:e9:72:f1:de:14:83:8a:d6:51:1a:5d:e0:0f:
20:74:c9:92:8c:0f:35:f0:b3:1b:84:a1:bb:7a:ec:75:06:79:
24:6e:d2:0e:7b:ea:5e:1e:d9:11:0b:4d:a4:50:48:ee:03:02:
c2:ea:a2:9f:5a:54:62:26:6d:70:fa:52:fe:39:f9:70:03:23:
7d:bc:0c:7c:c4:1e:e5:07:33:fc:01:d7:3a:41:5b:d0:fe:b9:
9d:2f:4f:1a:f0:28:e2:3d:be:d3:ac:5d:00:1e:30:45:39:12:
7e:20:c6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:20:25 2026 by rpki-client