Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/qLLDezil93OVmHikQQ21nhc9wgY.mft
File: qLLDezil93OVmHikQQ21nhc9wgY.mft (raw, json)
Hash identifier: /qzNo1P0VEbYfQdYHcfum6o2RoHab1NOLeQhnmp9Huc=
Subject key identifier: 26:81:30:24:9B:A7:EA:69:FE:73:CE:A6:CA:C3:7B:81:E8:98:25:F8
Authority key identifier: A8:B2:C3:7B:38:A5:F7:73:95:98:78:A4:41:0D:B5:9E:17:3D:C2:06
Certificate issuer: /CN=a8b2c37b38a5f773959878a4410db59e173dc206
Certificate serial: 019F95494E1828063D1DC88394DFBDE5FB5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLLDezil93OVmHikQQ21nhc9wgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/qLLDezil93OVmHikQQ21nhc9wgY.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:00:36 +0000
Manifest this update: Fri 24 Jul 2026 18:00:36 +0000
Manifest next update: Sat 25 Jul 2026 18:00:36 +0000
Files and hashes: 1: OunyrU6BBdReyTyaGtBOEde3_sk.roa (hash: dT+oapbW+wFYcujVYugQxPifKqhdPs/FWRx90NuTH1s=)
2: qLLDezil93OVmHikQQ21nhc9wgY.crl (hash: Ytrh4+Gvq3UH9CtxxnXzBxAXLM2Qt7PCHlT5E+m4icg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/qLLDezil93OVmHikQQ21nhc9wgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/qLLDezil93OVmHikQQ21nhc9wgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLLDezil93OVmHikQQ21nhc9wgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:4e:18:28:06:3d:1d:c8:83:94:df:bd:e5:fb:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b2c37b38a5f773959878a4410db59e173dc206
Validity
Not Before: Jul 24 18:00:36 2026 GMT
Not After : Jul 25 18:00:36 2026 GMT
Subject: CN=268130249ba7ea69fe73cea6cac37b81e89825f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:63:4c:1f:f5:1b:93:b0:19:00:80:b6:23:3b:
07:a8:1a:e2:5b:65:a1:10:52:8c:ca:e8:95:b2:61:
69:02:f3:69:e1:9f:54:96:32:37:d6:ef:88:e3:ac:
ab:87:3d:3b:a1:af:6c:1a:e0:9a:b2:45:97:0f:6a:
0e:63:00:76:7d:9f:ad:f9:1e:5e:27:29:54:a8:a9:
ed:69:39:14:d7:c9:56:40:62:01:c6:f3:7a:c6:ae:
98:83:e3:b2:fb:5e:76:3b:45:3e:ad:63:3b:29:91:
8f:af:82:70:02:a3:67:82:59:e9:af:e5:60:ea:48:
c7:7e:bc:91:86:2f:8f:44:76:07:1f:88:77:66:3f:
a7:7c:74:5d:c2:1c:0c:6c:0e:b8:d6:35:a4:0e:9d:
08:3d:32:12:fe:31:17:a9:08:08:88:54:ca:32:3b:
82:01:d3:8a:1e:f2:b9:b5:4f:3e:58:8f:ce:41:37:
4d:2a:d1:a8:4c:56:fe:09:4b:d4:62:e8:02:5e:da:
90:34:db:1f:a4:51:30:fc:96:7f:f9:9d:48:29:1a:
11:bd:71:c1:98:a1:09:c0:95:9c:c8:a3:d3:52:34:
f2:ac:cc:92:9b:c1:ca:24:65:b1:ec:1d:28:99:c1:
1c:97:a4:f3:57:eb:fa:7f:a4:c3:3f:2a:02:55:1a:
aa:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:81:30:24:9B:A7:EA:69:FE:73:CE:A6:CA:C3:7B:81:E8:98:25:F8
X509v3 Authority Key Identifier:
keyid:A8:B2:C3:7B:38:A5:F7:73:95:98:78:A4:41:0D:B5:9E:17:3D:C2:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLLDezil93OVmHikQQ21nhc9wgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/qLLDezil93OVmHikQQ21nhc9wgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/qLLDezil93OVmHikQQ21nhc9wgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:89:f3:31:74:6b:6e:78:86:c8:7d:cd:f3:f3:e1:ec:6c:6e:
0d:66:ad:17:95:e9:08:89:82:db:ac:9b:03:b5:39:d7:10:78:
ad:30:4b:78:22:69:97:ea:21:55:f5:fd:89:49:4d:37:c3:dc:
a5:c3:b6:d3:d9:fe:47:47:ab:e8:29:41:94:b0:86:7d:6e:71:
1f:fb:35:11:4b:55:4d:66:ec:66:df:b7:4c:ac:1b:88:a7:52:
a3:68:e8:59:9a:1d:51:6d:07:42:c2:8e:93:33:14:32:01:e5:
32:ac:eb:6a:61:f0:1b:cf:63:0e:76:06:51:f3:42:e1:2c:8e:
16:46:69:f9:86:82:b3:70:ca:3a:89:b6:ea:f3:55:2c:73:7f:
d5:55:e5:3b:b4:97:1a:3e:d6:a6:bd:6b:a0:f1:a0:ff:35:7f:
ea:f7:a4:8e:c0:71:3a:6d:31:eb:8c:54:f0:2c:7e:7c:1c:81:
a1:2f:4b:ac:76:5a:1a:54:5f:c8:47:64:3f:e1:91:ea:a5:24:
91:d0:b0:64:48:36:13:26:3a:01:4b:3f:3b:1d:30:36:e2:1e:
13:3f:72:94:5c:f9:cf:03:62:ba:b9:cd:8c:9b:db:26:88:45:
5d:62:31:c8:bd:a9:78:a7:49:a0:ba:02:66:98:d2:fe:53:86:
06:15:b9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:51:10 2026 by rpki-client