Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
File: qyt5QmiS7R2nsuYYZ3DPsErmA80.mft (raw, json)
Hash identifier: TPLApBywAVq0F/VJLR3TdOnRzvX+74yM9QkP7QQXEvI=
Subject key identifier: CA:A5:7A:F1:13:44:AE:D9:AD:AB:91:EA:7A:76:72:66:D4:AF:74:25
Authority key identifier: AB:2B:79:42:68:92:ED:1D:A7:B2:E6:18:67:70:CF:B0:4A:E6:03:CD
Certificate issuer: /CN=ab2b79426892ed1da7b2e6186770cfb04ae603cd
Certificate serial: 019F8F108F90339A20E01B4E4794E3DF2982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
Manifest number: 0C6C
Signing time: Thu 23 Jul 2026 13:00:54 +0000
Manifest this update: Thu 23 Jul 2026 13:00:54 +0000
Manifest next update: Fri 24 Jul 2026 13:00:54 +0000
Files and hashes: 1: Ep1UdBXzCWlqSTpFzem1RUVZTHA.asa (hash: f0L/PAFatn0IgaIhqoEyZoZ0cRFuKV57J/o6cZd4vJM=)
2: UVwGUstyqvelkq37jwrCyB34k94.asa (hash: E7qX0L3M0NDAHs6Gtk5Rp5Gs8S25rdSfJnVG4BtVL6w=)
3: qyt5QmiS7R2nsuYYZ3DPsErmA80.crl (hash: D24L/s6lnoIc09AK3elqfNVTglmSRHfBVST/P0VImCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:8f:90:33:9a:20:e0:1b:4e:47:94:e3:df:29:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2b79426892ed1da7b2e6186770cfb04ae603cd
Validity
Not Before: Jul 23 13:00:54 2026 GMT
Not After : Jul 24 13:00:54 2026 GMT
Subject: CN=caa57af11344aed9adab91ea7a767266d4af7425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8a:91:9d:af:78:bb:9e:38:5a:17:d0:fa:97:
3e:86:4e:80:7c:37:9b:79:e6:90:2f:95:4b:af:44:
d4:94:40:c2:11:81:08:8b:5e:dd:1f:69:4d:26:c3:
da:d1:4e:47:06:e3:1c:a8:92:88:51:cf:a0:16:6e:
56:66:2a:f4:c8:5f:24:f6:ce:fc:86:20:95:41:4a:
f5:59:c5:41:a8:2e:3a:83:a6:bc:e8:5a:85:75:42:
f9:1d:ae:20:d6:7e:b4:68:a7:da:87:08:87:03:6a:
a3:c4:87:02:1f:c9:30:9a:0d:1a:30:51:c8:b1:2b:
9c:e0:3f:40:bf:f0:1d:a1:ef:b2:b0:d7:c6:5b:cf:
36:4f:f3:78:e4:e5:46:b1:90:2d:ba:e2:e6:ca:f6:
62:71:8e:11:fa:13:bd:ca:34:af:ce:19:76:9a:4d:
f8:1e:89:ab:a0:10:8d:2f:9d:54:32:fa:ac:97:ae:
57:2a:be:14:01:98:06:47:d5:df:f7:de:47:cd:b6:
f6:bb:ef:a2:dc:3f:79:35:a9:30:4d:86:98:57:d7:
48:c3:a1:19:d4:39:ba:76:36:c7:24:e4:5c:6b:41:
67:9b:e9:cf:6b:07:69:d2:ff:8f:1b:e8:61:ce:46:
6a:a5:6a:b7:a4:8b:85:ba:e7:87:98:96:2e:54:5f:
a5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A5:7A:F1:13:44:AE:D9:AD:AB:91:EA:7A:76:72:66:D4:AF:74:25
X509v3 Authority Key Identifier:
keyid:AB:2B:79:42:68:92:ED:1D:A7:B2:E6:18:67:70:CF:B0:4A:E6:03:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:12:b9:3c:9d:f1:88:7c:73:01:f6:92:1e:23:4b:1b:77:13:
44:b7:91:48:91:72:ba:c7:ee:26:d3:3b:a3:ee:b3:c3:d0:d4:
2e:66:63:1a:66:28:8f:25:cb:de:23:0b:f8:11:0a:e5:0d:04:
fe:0f:57:82:c5:1f:5a:e4:b1:52:02:51:b8:57:74:4c:5c:c5:
12:b0:62:42:f1:77:89:f1:93:14:be:04:83:39:2c:95:cc:68:
bd:b8:db:18:2c:20:bf:be:cd:d4:ab:d1:87:03:ed:32:da:cf:
67:05:cd:12:42:b9:cd:3e:44:83:36:69:bb:76:ad:b1:6b:38:
e2:d0:98:f4:d9:28:f6:6c:c5:2f:fb:f3:98:f3:5d:15:ef:04:
b4:64:a0:08:c9:3a:36:c7:31:61:7e:33:b0:31:14:c7:ff:ad:
ce:b6:28:e5:3d:07:2d:3d:84:a2:59:60:40:94:03:75:1c:2f:
6b:10:c8:5f:ea:92:9c:22:98:5b:47:4d:67:06:52:8f:71:d6:
56:52:79:f6:1c:e2:e6:dd:82:57:54:bd:d9:eb:77:35:ba:be:
69:c6:9e:66:2f:ce:9e:3f:6c:5e:37:f2:41:8e:d4:01:28:2d:
f3:c6:46:58:74:cb:aa:9b:83:e5:d2:5f:d0:f7:2f:aa:70:19:
62:31:49:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:07:48 2026 by rpki-client