Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
File: qsV1yvoAvEHVfElKwfXbz-54My4.mft (raw, json)
Hash identifier: N3l0dfcvzohjfUJvaZePD84ERHrktmkNxatND4RdmRU=
Subject key identifier: DA:F5:F0:44:DB:A6:E5:1F:56:5D:D3:4F:B9:17:F7:AD:E9:63:24:1D
Authority key identifier: AA:C5:75:CA:FA:00:BC:41:D5:7C:49:4A:C1:F5:DB:CF:EE:78:33:2E
Certificate issuer: /CN=aac575cafa00bc41d57c494ac1f5dbcfee78332e
Certificate serial: 019F946D7209B8D3C1E6768A3A1B90FE460A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 14:00:28 +0000
Manifest this update: Fri 24 Jul 2026 14:00:28 +0000
Manifest next update: Sat 25 Jul 2026 14:00:28 +0000
Files and hashes: 1: IPShWGUXlOQysmlHN59ggxp79no.roa (hash: h66cPY9mKXXd6y+2DIeK9BUX2MMAhCZtqkFLMLMhdLk=)
2: UUFYP2GnG27gknclmWjbFXee-5c.asa (hash: vtuGXz4SCbN+csRPRpu2i0eRfkh5mJ/Z4XlVSXzxMy4=)
3: qsV1yvoAvEHVfElKwfXbz-54My4.crl (hash: CXRqncq7YiJc8GrHQVxRzUUizy2TtvTjXKcaRiy1IKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:72:09:b8:d3:c1:e6:76:8a:3a:1b:90:fe:46:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac575cafa00bc41d57c494ac1f5dbcfee78332e
Validity
Not Before: Jul 24 14:00:28 2026 GMT
Not After : Jul 25 14:00:28 2026 GMT
Subject: CN=daf5f044dba6e51f565dd34fb917f7ade963241d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:06:6e:ce:88:51:b8:34:81:6e:db:91:b2:50:
6a:02:e5:22:9c:cd:a5:05:63:7c:c9:86:ac:2d:4f:
14:b8:1d:db:81:28:bb:8f:8a:97:84:aa:14:49:a6:
83:2f:36:b2:86:c1:fd:92:27:a3:11:0e:f3:8e:4f:
e9:cf:e8:17:1e:11:cb:64:3d:1e:10:e2:1d:53:a7:
a4:e2:4a:70:43:72:7e:dc:a8:58:d5:28:35:50:5c:
eb:94:d4:26:ec:1f:b9:54:29:f5:92:6d:20:4b:b9:
91:bb:16:d6:b3:0d:b3:0f:8d:d6:e8:37:c5:42:40:
d5:82:08:ce:f9:58:c8:82:95:3d:04:3f:59:ae:d4:
df:e0:91:80:e4:7f:5b:d3:68:f5:fa:7d:49:fc:81:
6c:cc:0f:3d:b9:34:d5:b1:87:40:fb:69:34:a8:f0:
31:1b:99:84:7a:b1:5b:a9:f2:d9:16:e5:da:8c:26:
2f:10:97:50:f2:2a:45:da:1a:94:9c:b3:3b:ac:c5:
09:b6:58:00:4d:63:c0:03:6b:7d:17:a6:06:1a:a4:
1b:fb:75:79:23:18:77:15:7b:4f:3a:6e:68:65:db:
c9:52:40:72:a5:d7:e7:27:64:40:52:cb:4a:94:f2:
03:e4:d8:e2:1a:79:60:2f:ee:ff:0f:d0:be:86:a5:
b3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F5:F0:44:DB:A6:E5:1F:56:5D:D3:4F:B9:17:F7:AD:E9:63:24:1D
X509v3 Authority Key Identifier:
keyid:AA:C5:75:CA:FA:00:BC:41:D5:7C:49:4A:C1:F5:DB:CF:EE:78:33:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:8d:7c:e5:ef:d0:2e:bb:17:b8:37:f8:04:72:af:e5:05:9f:
25:45:52:1a:ba:ef:8c:fb:e1:86:4a:d5:36:96:60:54:e2:a8:
e4:2d:6f:a3:0d:14:d1:1f:46:14:06:d9:a1:ef:f1:78:d1:2a:
3e:ac:06:d0:03:d5:64:fa:79:de:3c:84:e6:2c:a8:35:f3:6b:
90:2b:88:b5:98:a7:4d:28:37:92:7b:e8:2c:48:ba:1a:a2:b0:
5f:8f:aa:1a:16:49:09:a9:09:2a:94:7b:f3:7c:6f:a9:d7:78:
ad:44:a7:94:00:b2:91:e4:7b:e0:39:ab:97:d7:95:f7:b6:8e:
43:dc:3d:8f:7a:19:72:fd:dc:f2:47:c7:ef:01:43:d8:8c:c5:
a2:9b:b1:00:23:eb:e9:79:2a:67:47:d5:d1:08:79:8e:d4:13:
17:52:8b:3e:e2:d7:1b:6c:12:74:65:f2:fb:6e:f5:25:4a:81:
30:87:5e:52:c5:b1:76:92:28:b3:3e:28:ec:ae:d6:c9:89:d4:
c6:37:46:bd:bc:bf:98:51:5e:e8:f1:d1:a5:98:91:93:fe:8d:
26:10:4d:c2:30:4b:0a:fe:69:4c:57:8d:fe:c5:2c:3d:4f:08:
c2:95:cd:5a:ee:00:d4:11:29:ec:87:63:08:18:e4:2a:77:9a:
e9:2f:97:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UbXIJuNPB5naKOhuQ/kYKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhYzU3NWNhZmEwMGJjNDFkNTdjNDk0YWMxZjVkYmNmZWU3
ODMzMmUwHhcNMjYwNzI0MTQwMDI4WhcNMjYwNzI1MTQwMDI4WjAzMTEwLwYDVQQD
EyhkYWY1ZjA0NGRiYTZlNTFmNTY1ZGQzNGZiOTE3ZjdhZGU5NjMyNDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwZuzohRuDSBbtuRslBqAuUinM2l
BWN8yYasLU8UuB3bgSi7j4qXhKoUSaaDLzayhsH9kiejEQ7zjk/pz+gXHhHLZD0e
EOIdU6ek4kpwQ3J+3KhY1Sg1UFzrlNQm7B+5VCn1km0gS7mRuxbWsw2zD43W6DfF
QkDVggjO+VjIgpU9BD9ZrtTf4JGA5H9b02j1+n1J/IFszA89uTTVsYdA+2k0qPAx
G5mEerFbqfLZFuXajCYvEJdQ8ipF2hqUnLM7rMUJtlgATWPAA2t9F6YGGqQb+3V5
Ixh3FXtPOm5oZdvJUkBypdfnJ2RAUstKlPID5NjiGnlgL+7/D9C+hqWzLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNr18ETbpuUfVl3TT7kX963pYyQdMB8GA1UdIwQY
MBaAFKrFdcr6ALxB1XxJSsH128/ueDMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXNWMXl2b0F2RUhWZkVsS3dmWGJ6LTU0TXk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8zNWQ1OTgtYzMyYy00OWE3LWIxZjYt
OGY5MTNlMjY5NmU1LzEvcXNWMXl2b0F2RUhWZkVsS3dmWGJ6LTU0TXk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8zNWQ1OTgtYzMyYy00OWE3LWIxZjYtOGY5MTNlMjY5NmU1
LzEvcXNWMXl2b0F2RUhWZkVsS3dmWGJ6LTU0TXk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGo185e/Q
LrsXuDf4BHKv5QWfJUVSGrrvjPvhhkrVNpZgVOKo5C1vow0U0R9GFAbZoe/xeNEq
PqwG0APVZPp53jyE5iyoNfNrkCuItZinTSg3knvoLEi6GqKwX4+qGhZJCakJKpR7
83xvqdd4rUSnlACykeR74Dmrl9eV97aOQ9w9j3oZcv3c8kfH7wFD2IzFopuxACPr
6XkqZ0fV0Qh5jtQTF1KLPuLXG2wSdGXy+271JUqBMIdeUsWxdpIosz4o7K7WyYnU
xjdGvby/mFFe6PHRpZiRk/6NJhBNwjBLCv5pTFeN/sUsPU8IwpXNWu4A1BEp7Idj
CBjkKnea6S+X1w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:55:39 2026 by rpki-client