Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
File: qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft (raw, json)
Hash identifier: ggAHutgQBT/mB8m7j8ayiAv0V45sjU2w5BfrTOA6lw8=
Subject key identifier: D2:31:22:C1:25:E7:3F:C6:A6:C1:AF:91:B7:D8:89:79:82:F2:1C:AD
Authority key identifier: AA:52:12:95:8D:8E:1B:AA:14:4A:82:A8:21:F9:3A:89:0D:CB:A4:9A
Certificate issuer: /CN=aa5212958d8e1baa144a82a821f93a890dcba49a
Certificate serial: 019F90FF4105ED85F413F7B9634EB7A94152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
Manifest number: 0418
Signing time: Thu 23 Jul 2026 22:01:15 +0000
Manifest this update: Thu 23 Jul 2026 22:01:15 +0000
Manifest next update: Fri 24 Jul 2026 22:01:15 +0000
Files and hashes: 1: G-pSc2GfZAe2Cv8BFVoi_llwABY.roa (hash: /7Z+9K3xhy+MwBsaOn4K/qhwmhDwNSO3C+IKdxiNzxI=)
2: qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl (hash: R5s7nRQaPO7euktmU5fDwgYKClpXhL7TLmpUjrvhZ4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:41:05:ed:85:f4:13:f7:b9:63:4e:b7:a9:41:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa5212958d8e1baa144a82a821f93a890dcba49a
Validity
Not Before: Jul 23 22:01:15 2026 GMT
Not After : Jul 24 22:01:15 2026 GMT
Subject: CN=d23122c125e73fc6a6c1af91b7d8897982f21cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b7:61:9e:c5:31:2c:f5:05:48:f0:78:00:83:
9a:0d:0f:17:3c:41:4d:5f:d7:f2:b1:4b:56:a7:3b:
45:f7:27:10:53:7a:54:c7:0a:17:94:6f:76:03:1c:
0f:ff:d0:00:4d:4e:ae:a5:51:12:d3:cb:5b:b8:ad:
c3:d3:27:c9:15:66:7c:c8:0b:f7:08:3d:eb:ac:43:
12:5b:b4:07:10:4e:ae:ce:7e:bd:c1:b1:0c:ec:da:
2a:18:cd:0e:65:81:41:3e:4f:dc:a5:9e:55:b4:61:
d1:b7:1f:a7:e6:99:34:22:46:c9:07:81:3a:fd:04:
d5:8e:7a:0f:3e:21:b6:a3:eb:38:e7:22:36:db:a0:
86:6a:12:23:fe:9d:36:a8:9f:88:51:42:58:a3:d8:
74:e8:75:80:27:7c:b3:1b:ac:cf:18:ad:99:89:cf:
ec:db:db:93:40:39:5e:83:5c:c7:98:a5:1b:43:98:
d9:0d:2c:df:7a:6b:bd:67:dd:61:18:0f:e5:ea:6f:
1b:5c:24:44:37:07:4c:b1:e4:04:53:c1:e9:29:79:
a0:04:83:4b:3b:0f:a2:75:8e:58:1e:64:43:68:03:
3b:2b:b6:d9:25:7d:3f:02:08:b8:8a:8f:1d:43:5a:
f3:fc:9c:b7:70:b0:b9:82:f0:2b:9c:d6:7c:22:57:
24:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:31:22:C1:25:E7:3F:C6:A6:C1:AF:91:B7:D8:89:79:82:F2:1C:AD
X509v3 Authority Key Identifier:
keyid:AA:52:12:95:8D:8E:1B:AA:14:4A:82:A8:21:F9:3A:89:0D:CB:A4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:78:8b:b0:32:f2:6b:00:e5:eb:d0:3a:2e:2f:3c:24:0f:5d:
df:c1:2b:92:eb:5a:b9:90:67:0f:23:a5:ce:bf:09:35:b8:0c:
25:0f:28:85:60:49:f0:99:d7:1e:7e:d4:b0:c3:3e:08:07:aa:
82:44:ac:68:9b:67:af:c4:90:19:74:19:86:fc:ef:22:8e:db:
50:60:40:bc:75:9f:9b:f0:58:b5:ba:ca:90:60:bb:fc:97:a6:
54:5a:65:50:6f:2c:11:f8:4c:e1:55:e4:59:45:b5:c1:2e:0a:
87:00:07:e7:b8:fe:78:e3:3b:c4:11:a2:50:0f:cf:86:06:2d:
42:17:6a:70:7a:e6:13:35:b8:d7:73:0b:94:58:28:15:56:a6:
be:81:5a:75:73:ec:8e:8f:f0:6b:6e:21:13:07:9b:eb:6f:6f:
a6:0e:b0:9b:12:7e:46:6f:a2:3a:14:15:c1:1a:7d:62:4c:0f:
d7:1a:ee:10:7e:0b:7f:c6:0b:cc:91:2c:d9:97:70:c9:59:d8:
8e:9d:f4:ea:f4:c3:5d:78:95:a8:f5:ac:fd:89:a1:a7:fe:cc:
ad:36:70:8a:10:48:81:3f:59:a9:79:00:17:88:be:cc:13:d9:
a2:4f:0c:d3:11:73:3c:f8:7f:de:95:67:77:ae:6a:f0:73:2b:
4c:be:ba:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/0EF7YX0E/e5Y063qUFSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNTIxMjk1OGQ4ZTFiYWExNDRhODJhODIxZjkzYTg5MGRj
YmE0OWEwHhcNMjYwNzIzMjIwMTE1WhcNMjYwNzI0MjIwMTE1WjAzMTEwLwYDVQQD
EyhkMjMxMjJjMTI1ZTczZmM2YTZjMWFmOTFiN2Q4ODk3OTgyZjIxY2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLdhnsUxLPUFSPB4AIOaDQ8XPEFN
X9fysUtWpztF9ycQU3pUxwoXlG92AxwP/9AATU6upVES08tbuK3D0yfJFWZ8yAv3
CD3rrEMSW7QHEE6uzn69wbEM7NoqGM0OZYFBPk/cpZ5VtGHRtx+n5pk0IkbJB4E6
/QTVjnoPPiG2o+s45yI226CGahIj/p02qJ+IUUJYo9h06HWAJ3yzG6zPGK2Zic/s
29uTQDleg1zHmKUbQ5jZDSzfemu9Z91hGA/l6m8bXCRENwdMseQEU8HpKXmgBINL
Ow+idY5YHmRDaAM7K7bZJX0/Agi4io8dQ1rz/Jy3cLC5gvArnNZ8IlckqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNIxIsEl5z/GpsGvkbfYiXmC8hytMB8GA1UdIwQY
MBaAFKpSEpWNjhuqFEqCqCH5OokNy6SaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWxJU2xZMk9HNm9VU29Lb0lmazZpUTNMcEpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9kOGU1ZTMtZjg5Ny00ZGEyLTlkZjYt
YjQwMWE0YTA0NDkyLzEvcWxJU2xZMk9HNm9VU29Lb0lmazZpUTNMcEpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9kOGU1ZTMtZjg5Ny00ZGEyLTlkZjYtYjQwMWE0YTA0NDky
LzEvcWxJU2xZMk9HNm9VU29Lb0lmazZpUTNMcEpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0niLsDLy
awDl69A6Li88JA9d38ErkutauZBnDyOlzr8JNbgMJQ8ohWBJ8JnXHn7UsMM+CAeq
gkSsaJtnr8SQGXQZhvzvIo7bUGBAvHWfm/BYtbrKkGC7/JemVFplUG8sEfhM4VXk
WUW1wS4KhwAH57j+eOM7xBGiUA/PhgYtQhdqcHrmEzW413MLlFgoFVamvoFadXPs
jo/wa24hEweb629vpg6wmxJ+Rm+iOhQVwRp9YkwP1xruEH4Lf8YLzJEs2ZdwyVnY
jp306vTDXXiVqPWs/Ymhp/7MrTZwihBIgT9ZqXkAF4i+zBPZok8M0xFzPPh/3pVn
d65q8HMrTL66+g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:39:49 2026 by rpki-client