Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
File: QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft (raw, json)
Hash identifier: 2uHfU2cmZIhFIfSg6btw7RYUHVmaMlzONiJ1FBSBjSI=
Subject key identifier: BD:A4:FA:74:FB:63:CA:EE:7B:57:49:3C:EF:E5:A1:D5:68:F2:CE:CD
Authority key identifier: 40:08:C4:86:EF:56:17:0C:41:2F:26:61:5D:0A:40:94:BC:A1:FB:2C
Certificate issuer: /CN=4008c486ef56170c412f26615d0a4094bca1fb2c
Certificate serial: 019F9135CCE7ADF7A6F7E1A7C5AD2C3020A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
Manifest number: 0275
Signing time: Thu 23 Jul 2026 23:00:49 +0000
Manifest this update: Thu 23 Jul 2026 23:00:49 +0000
Manifest next update: Fri 24 Jul 2026 23:00:49 +0000
Files and hashes: 1: LJsNdySzgVhzx0jmB1MhskD9sjw.roa (hash: vvBtgWk4yOZ39bGRHX8IHXL1uvrBI1sSum79JzJWzi4=)
2: QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl (hash: xOZwfB9x+wqebvQ93tNHqFfQK7WX2Lr/ltsr+bxX1sY=)
3: gwoZZje1uQSgGQlJSX6ThKbi_v4.roa (hash: yNNrupm/CBG1AsTLbQhGB7upwtdrSdYjgUOcddBU48E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:cc:e7:ad:f7:a6:f7:e1:a7:c5:ad:2c:30:20:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4008c486ef56170c412f26615d0a4094bca1fb2c
Validity
Not Before: Jul 23 23:00:49 2026 GMT
Not After : Jul 24 23:00:49 2026 GMT
Subject: CN=bda4fa74fb63caee7b57493cefe5a1d568f2cecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c9:39:c6:31:73:26:ca:0d:13:51:be:1c:4f:
46:36:75:9a:1b:39:aa:be:61:44:9e:9a:ef:8a:ff:
63:cc:43:f0:62:89:1c:ac:16:3e:3d:da:8c:d6:9c:
c5:1d:da:da:a5:d9:02:b0:74:c4:36:b4:e0:5e:e9:
ce:d0:42:a1:45:8a:f4:8f:1c:4e:5a:ad:e5:54:42:
ac:df:c9:ec:7b:4e:fe:b0:d6:14:55:fe:95:76:63:
0f:9c:90:a0:4c:35:f2:f6:ce:e4:58:8d:b4:ea:ff:
0c:7d:98:52:a2:c6:48:cb:46:82:05:4a:c2:31:43:
fc:c0:1b:ee:02:84:3b:7f:3a:8b:a9:bd:4e:4a:41:
3b:90:e2:1b:61:92:2c:4b:a2:2d:6d:d0:d0:47:72:
c4:5c:f1:75:05:ab:73:c8:64:f1:9c:8c:c0:df:28:
61:4a:fd:fb:da:d6:3a:af:1c:60:3b:65:a2:db:cf:
a9:aa:11:ff:0a:f6:c1:3c:29:17:25:38:78:79:60:
10:07:46:41:e1:57:4f:cb:80:63:01:99:ad:48:32:
f7:cd:6a:10:33:10:2b:e2:88:2b:ef:30:31:ff:9f:
0e:12:44:0d:8c:c9:b2:ef:a1:93:5a:48:f5:3d:d0:
c6:cf:d1:35:9f:53:82:28:51:0b:f9:bf:72:b6:93:
f0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A4:FA:74:FB:63:CA:EE:7B:57:49:3C:EF:E5:A1:D5:68:F2:CE:CD
X509v3 Authority Key Identifier:
keyid:40:08:C4:86:EF:56:17:0C:41:2F:26:61:5D:0A:40:94:BC:A1:FB:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:7f:10:94:d5:24:ef:ff:f3:01:4c:37:ff:c3:ee:18:59:ac:
9d:2c:14:e4:3c:cd:4c:11:20:6a:5d:4b:44:4e:72:01:4f:47:
1c:77:e7:ea:c4:0f:c2:ea:96:2a:99:d8:6a:85:ab:33:e7:56:
4c:36:d1:01:08:5b:14:e7:05:fa:a6:e1:f0:bd:78:f4:bd:0c:
b5:9b:39:ba:e8:43:12:a3:5e:0f:a5:c9:2c:fc:dd:0b:29:cc:
23:e2:33:7c:e7:24:c7:15:39:13:05:d6:3d:d1:cd:44:1b:b6:
21:f8:04:2e:7d:7a:2f:67:9d:0d:7d:71:f2:3e:cb:e8:5a:d2:
d0:57:12:47:26:9c:20:a3:8c:a6:30:11:e7:54:57:85:42:fa:
36:36:8d:51:f8:eb:d3:21:33:aa:e3:cc:d2:1c:6e:39:f8:55:
90:74:d4:d2:2c:0e:d3:83:dc:2e:0a:23:ac:c3:bc:97:f2:5e:
d3:cd:45:c2:c5:9b:f9:04:8d:35:37:a6:cb:fa:e9:a6:70:fc:
ec:c3:14:0c:7c:b4:2e:c2:b9:d9:a6:cd:fa:e0:65:a4:7d:60:
59:0e:06:2e:d3:c4:16:46:db:62:a3:e3:d7:36:24:97:45:a6:
9b:db:6d:63:c4:24:de:f7:51:f0:82:a9:0f:67:d4:f3:d7:ec:
37:1f:bc:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RNcznrfem9+Gnxa0sMCChMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMDhjNDg2ZWY1NjE3MGM0MTJmMjY2MTVkMGE0MDk0YmNh
MWZiMmMwHhcNMjYwNzIzMjMwMDQ5WhcNMjYwNzI0MjMwMDQ5WjAzMTEwLwYDVQQD
EyhiZGE0ZmE3NGZiNjNjYWVlN2I1NzQ5M2NlZmU1YTFkNTY4ZjJjZWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsk5xjFzJsoNE1G+HE9GNnWaGzmq
vmFEnprviv9jzEPwYokcrBY+PdqM1pzFHdrapdkCsHTENrTgXunO0EKhRYr0jxxO
Wq3lVEKs38nse07+sNYUVf6VdmMPnJCgTDXy9s7kWI206v8MfZhSosZIy0aCBUrC
MUP8wBvuAoQ7fzqLqb1OSkE7kOIbYZIsS6ItbdDQR3LEXPF1BatzyGTxnIzA3yhh
Sv372tY6rxxgO2Wi28+pqhH/CvbBPCkXJTh4eWAQB0ZB4VdPy4BjAZmtSDL3zWoQ
MxAr4ogr7zAx/58OEkQNjMmy76GTWkj1PdDGz9E1n1OCKFEL+b9ytpPwHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL2k+nT7Y8rue1dJPO/lodVo8s7NMB8GA1UdIwQY
MBaAFEAIxIbvVhcMQS8mYV0KQJS8ofssMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUFqRWh1OVdGd3hCTHlaaFhRcEFsTHloLXl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hOTdmOWYtM2RmMC00NTQ2LTljZTct
ZTkyYTI1NDkxY2VkLzEvUUFqRWh1OVdGd3hCTHlaaFhRcEFsTHloLXl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9hOTdmOWYtM2RmMC00NTQ2LTljZTctZTkyYTI1NDkxY2Vk
LzEvUUFqRWh1OVdGd3hCTHlaaFhRcEFsTHloLXl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvn8QlNUk
7//zAUw3/8PuGFmsnSwU5DzNTBEgal1LRE5yAU9HHHfn6sQPwuqWKpnYaoWrM+dW
TDbRAQhbFOcF+qbh8L149L0MtZs5uuhDEqNeD6XJLPzdCynMI+IzfOckxxU5EwXW
PdHNRBu2IfgELn16L2edDX1x8j7L6FrS0FcSRyacIKOMpjAR51RXhUL6NjaNUfjr
0yEzquPM0hxuOfhVkHTU0iwO04PcLgojrMO8l/Je081FwsWb+QSNNTemy/rppnD8
7MMUDHy0LsK52abN+uBlpH1gWQ4GLtPEFkbbYqPj1zYkl0Wmm9ttY8Qk3vdR8IKp
D2fU89fsNx+8BQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:28:17 2026 by rpki-client