Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
File: qajkTlc8U8cZIxL8xyFQ0t43fW0.mft (raw, json)
Hash identifier: zJpWlEVeTdEerGgkWFvOYzOPRbEf/lN1lWFcw2ELUy8=
Subject key identifier: 77:1B:A9:B4:0E:B3:A8:79:77:EB:FD:29:CA:D1:B2:4B:D1:CA:23:3B
Authority key identifier: A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D
Certificate issuer: /CN=a9a8e44e573c53c7192312fcc72150d2de377d6d
Certificate serial: 019F9391FFD2C64B0F23AA3B3A50A085472B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
Manifest number: 19CE
Signing time: Fri 24 Jul 2026 10:00:46 +0000
Manifest this update: Fri 24 Jul 2026 10:00:46 +0000
Manifest next update: Sat 25 Jul 2026 10:00:46 +0000
Files and hashes: 1: hLY2--5SKTnZ1QC36Cf-E8Iq5ho.roa (hash: lfg0kzyvgHw2ZfZ5eS4nTJ7bYAVmeebrxL6dhvaG0Ms=)
2: qajkTlc8U8cZIxL8xyFQ0t43fW0.crl (hash: 2ESL+MmD2Ib+CnBlWM/CqG62O1H9nUijWK0cG1Q4fns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:ff:d2:c6:4b:0f:23:aa:3b:3a:50:a0:85:47:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a8e44e573c53c7192312fcc72150d2de377d6d
Validity
Not Before: Jul 24 10:00:46 2026 GMT
Not After : Jul 25 10:00:46 2026 GMT
Subject: CN=771ba9b40eb3a87977ebfd29cad1b24bd1ca233b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c9:42:3f:21:a1:9a:23:a2:6a:d1:fe:b7:46:
40:98:9b:2c:e0:66:68:f7:11:99:7c:83:15:73:35:
92:14:05:33:f0:c5:29:14:c5:7f:71:a6:e4:2e:f5:
4f:12:d8:bd:4f:e7:82:93:14:91:fd:a3:69:c2:d8:
e2:01:55:51:97:50:78:c3:c9:76:d9:48:43:f1:e7:
83:15:4f:b9:20:48:60:93:7b:41:f3:b2:26:ca:4d:
68:e2:5e:47:14:f5:c6:cb:2c:14:52:f6:4a:36:22:
19:25:8a:b6:bf:35:fc:62:8c:17:60:84:f9:ff:a6:
d7:e4:bd:20:ed:84:b4:e3:74:19:a0:2f:5f:68:87:
04:06:76:6f:43:9b:f2:5b:e0:5a:d1:5c:38:ad:a9:
9c:c5:dd:3a:8c:54:fa:06:a1:e6:26:0b:bd:d4:b1:
f8:a6:08:61:21:43:6f:da:d0:c8:b9:7a:81:44:9c:
4e:18:7c:5b:bd:f8:df:5b:63:fd:b3:93:3a:91:4d:
40:ac:57:6d:64:2f:5c:9a:13:28:3e:36:9a:60:9d:
66:fc:31:25:cd:97:75:be:e5:23:52:aa:ab:cf:5d:
7c:16:b1:96:c6:71:ef:6c:89:2e:83:7b:6a:c5:ab:
51:2f:f1:85:6e:07:6b:06:97:85:d0:a7:f0:57:46:
b7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:1B:A9:B4:0E:B3:A8:79:77:EB:FD:29:CA:D1:B2:4B:D1:CA:23:3B
X509v3 Authority Key Identifier:
keyid:A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c4:04:4d:04:19:e5:e3:f8:3e:d1:cc:53:bd:77:83:27:4f:
14:c7:50:20:ee:28:ac:b1:65:ff:97:51:c4:67:8f:d0:62:71:
a3:37:d0:1d:c7:01:fb:19:05:bb:30:84:2b:f3:39:ba:12:14:
66:34:00:2d:53:ad:d8:e4:d4:6f:21:d8:b6:e9:f5:c9:b4:35:
eb:48:5d:9f:d5:59:57:26:f0:1b:6b:9b:5c:76:5f:75:1a:0e:
87:a9:b5:5d:78:54:0d:89:5e:ec:eb:a1:50:e3:e0:02:09:35:
a9:b0:26:8e:ce:5d:23:0e:cb:6a:94:86:3a:d1:f7:f8:cf:46:
1a:df:37:9b:7d:13:c0:ef:1b:71:c2:95:f8:6a:f3:e0:1c:b6:
b3:37:44:12:83:90:82:26:7c:3b:cc:0f:e9:ab:e9:1a:4a:2c:
ef:9c:6b:9b:49:e9:9e:d5:b5:c7:49:e0:89:20:07:1b:65:b7:
4c:da:31:3e:37:58:44:c0:76:89:10:ed:57:49:7a:ad:3f:68:
18:8d:db:a5:a4:42:3a:0f:8b:d1:0c:8b:cb:f4:a9:f9:e2:a8:
87:e9:88:a9:17:4b:06:ef:18:63:42:57:de:e2:f0:d5:59:50:
df:65:29:d2:51:b2:94:ce:cf:88:4a:c6:3a:6a:2b:01:94:35:
3f:97:f4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:54:46 2026 by rpki-client