Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.mft
File: qp8GoFvDKfAAVRK56LgYUDtKlwI.mft (raw, json)
Hash identifier: t6pclzHFE30x3gann+68QH2erjYZi4ZyspZUsYiFFbo=
Subject key identifier: 32:76:15:C9:81:0F:A0:86:14:CF:2E:55:BE:B7:92:C7:0B:EC:C4:CB
Authority key identifier: AA:9F:06:A0:5B:C3:29:F0:00:55:12:B9:E8:B8:18:50:3B:4A:97:02
Certificate issuer: /CN=aa9f06a05bc329f0005512b9e8b818503b4a9702
Certificate serial: 019F916D0EEDADBEF67F4998FE5569B5EE8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qp8GoFvDKfAAVRK56LgYUDtKlwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.mft
Manifest number: 01DE
Signing time: Fri 24 Jul 2026 00:01:11 +0000
Manifest this update: Fri 24 Jul 2026 00:01:11 +0000
Manifest next update: Sat 25 Jul 2026 00:01:11 +0000
Files and hashes: 1: _4VYQRquhP3n7V0ZIUcFIYF3tcc.roa (hash: E+o4HFAoGMbScOOdpRNVFuEWt1wZ9tuocl+KZhVyuoo=)
2: qp8GoFvDKfAAVRK56LgYUDtKlwI.crl (hash: 4y9x+c2AzJFk3IkacdfS43xlvAmUVM1G31Ra0czpsRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qp8GoFvDKfAAVRK56LgYUDtKlwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:0e:ed:ad:be:f6:7f:49:98:fe:55:69:b5:ee:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9f06a05bc329f0005512b9e8b818503b4a9702
Validity
Not Before: Jul 24 00:01:11 2026 GMT
Not After : Jul 25 00:01:11 2026 GMT
Subject: CN=327615c9810fa08614cf2e55beb792c70becc4cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:25:36:10:b8:ca:fc:0e:b5:fa:09:25:ed:0a:
24:a4:a9:ad:86:3d:df:7b:53:90:a8:78:3d:70:7b:
90:7b:51:e6:22:fd:66:20:b1:85:e4:cd:97:87:b6:
73:b2:d8:55:42:d6:5e:57:c3:4d:95:53:b6:f5:9d:
23:7a:90:05:d4:9f:eb:ea:3c:08:6f:8b:e5:e5:6e:
1e:51:99:d6:bf:e3:6c:35:78:1b:df:7a:1d:9d:9b:
b9:3e:75:9d:3b:23:fa:5a:95:e7:4c:63:43:b6:d3:
45:1b:b3:86:d5:20:ad:c8:36:2d:07:f8:dd:57:76:
47:cb:21:38:77:6b:ae:9d:4f:ec:03:be:78:b9:ef:
88:9f:3c:a3:2d:92:b0:c3:35:d6:0f:7b:c3:1c:b7:
10:d5:b1:f4:44:95:15:21:06:39:50:50:37:8b:fa:
d7:4f:ab:87:75:4c:f5:12:d0:77:9f:c2:8a:0e:e0:
6f:dc:e0:32:b3:1f:26:94:f5:80:cd:02:69:6a:e1:
fb:8f:36:ad:8e:62:75:6b:e9:04:54:2f:3c:50:a3:
58:44:e2:c7:bf:6e:9d:47:b9:00:13:c9:45:fb:76:
92:f3:fe:6d:7e:98:4f:8d:fb:13:cd:f3:f7:80:00:
37:78:4b:0d:5c:5b:ab:78:bb:39:77:f5:4c:36:9b:
da:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:76:15:C9:81:0F:A0:86:14:CF:2E:55:BE:B7:92:C7:0B:EC:C4:CB
X509v3 Authority Key Identifier:
keyid:AA:9F:06:A0:5B:C3:29:F0:00:55:12:B9:E8:B8:18:50:3B:4A:97:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qp8GoFvDKfAAVRK56LgYUDtKlwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:56:87:c2:10:4a:cd:ce:b3:51:bb:3f:85:87:da:29:35:43:
7a:3b:9f:15:c7:5c:79:4d:56:4d:9c:41:dc:74:81:b3:e9:5e:
5d:e9:fc:c6:44:64:1f:cf:ad:50:11:e7:a6:e3:13:c8:f9:0b:
57:55:37:3b:00:39:20:7c:90:56:e7:c1:01:82:32:42:8d:15:
2e:a1:f4:43:1b:9f:dd:89:07:87:ec:6d:1a:8e:0c:7b:98:78:
be:96:f5:20:e6:d7:77:58:de:be:38:71:23:f9:da:d7:2f:f3:
2c:88:52:ff:42:c7:88:85:7b:64:e0:80:8a:61:5d:cc:51:34:
d0:4b:83:cd:d9:bd:e4:ba:36:bd:9f:b7:5e:78:7b:92:ce:74:
0f:22:e7:c0:72:e3:58:4a:dc:2d:0b:56:07:aa:a5:19:36:29:
77:ff:34:7d:d0:ce:cc:79:da:ce:75:5c:6d:34:90:c0:54:f4:
31:ef:6f:98:19:34:59:bb:e9:95:1a:04:f3:b0:47:a3:52:d2:
1c:e9:da:1a:a4:42:b2:83:61:83:52:c6:41:7b:74:9c:0b:86:
87:2c:80:57:c5:e4:67:f1:78:04:ee:bf:56:b1:81:0a:59:f6:
f9:1c:22:49:c9:66:23:ce:6e:2e:f7:f0:39:70:2d:4a:4e:b0:
0d:ee:b4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:38:40 2026 by rpki-client