Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a82835-123b-4532-aba6-d60d5127825d/1/qhWXLPu3b6dqmjPaeXxnM8NItP4.mft
File: qhWXLPu3b6dqmjPaeXxnM8NItP4.mft (raw, json)
Hash identifier: Tj+1CgY2qpj4xWeEneLmLxzBdQgPz2grYv4d8Il2SsI=
Subject key identifier: B4:A4:A1:D9:E8:16:EE:97:5D:39:46:DA:D0:7F:54:EC:CD:21:B7:6C
Authority key identifier: AA:15:97:2C:FB:B7:6F:A7:6A:9A:33:DA:79:7C:67:33:C3:48:B4:FE
Certificate issuer: /CN=aa15972cfbb76fa76a9a33da797c6733c348b4fe
Certificate serial: 019F8E6BC92FBC49EA1C54FC3603FACB99F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qhWXLPu3b6dqmjPaeXxnM8NItP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a82835-123b-4532-aba6-d60d5127825d/1/qhWXLPu3b6dqmjPaeXxnM8NItP4.mft
Manifest number: 0157
Signing time: Thu 23 Jul 2026 10:00:56 +0000
Manifest this update: Thu 23 Jul 2026 10:00:56 +0000
Manifest next update: Fri 24 Jul 2026 10:00:56 +0000
Files and hashes: 1: f-tD8eTfmg96rXItlzB5NU95HTc.asa (hash: dsO4U94ntj0LR9lV9Plk0cr+ZXf5ETUXO5D2F4wmKsI=)
2: jrpa6ffgl6ZLg25PBip0s0JQIn4.roa (hash: V9w3w4fEjx0PYusw02oT6lMuGBaV9qjr55iLXhK3FqQ=)
3: qhWXLPu3b6dqmjPaeXxnM8NItP4.crl (hash: xzJVskZl1V6KCEkyIteoMF0DKk4s8au9P8dxTVHYpwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a82835-123b-4532-aba6-d60d5127825d/1/qhWXLPu3b6dqmjPaeXxnM8NItP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a82835-123b-4532-aba6-d60d5127825d/1/qhWXLPu3b6dqmjPaeXxnM8NItP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qhWXLPu3b6dqmjPaeXxnM8NItP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:6b:c9:2f:bc:49:ea:1c:54:fc:36:03:fa:cb:99:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa15972cfbb76fa76a9a33da797c6733c348b4fe
Validity
Not Before: Jul 23 10:00:56 2026 GMT
Not After : Jul 24 10:00:56 2026 GMT
Subject: CN=b4a4a1d9e816ee975d3946dad07f54eccd21b76c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ba:65:1b:af:cb:f3:cc:0b:1b:b1:a7:a2:ff:
8c:ea:53:95:ec:b7:eb:aa:d3:43:95:89:f6:a7:40:
e2:3c:37:c0:8e:4a:96:81:d2:e2:6f:f8:00:94:35:
dd:6e:a6:2d:5e:f5:d5:78:bb:95:8f:d8:83:c1:9f:
92:86:4b:fc:33:af:fd:65:3f:ec:44:fd:e8:5e:90:
cb:5b:e3:aa:f0:0a:f5:ed:da:93:d8:6a:42:e6:c5:
46:a7:47:21:37:9e:67:e6:0c:ab:ef:e4:d4:9e:46:
1d:e9:6a:a9:f6:a6:bb:4f:43:28:c4:6f:75:bf:77:
02:24:a8:b4:ad:ee:21:25:67:1c:0e:88:27:5e:cb:
9a:06:a6:cd:7e:24:a9:75:e4:76:00:90:93:87:b7:
6c:87:53:01:a9:a6:90:44:bc:40:a6:34:89:be:6b:
4b:ee:e4:33:d4:9d:b2:5a:bf:ec:88:d6:3e:5a:7a:
df:49:58:6e:0c:ee:e5:68:c6:03:1b:25:d0:a1:e5:
c7:41:cc:e4:67:51:b8:83:c9:d1:bc:0f:7b:d5:09:
e5:45:19:1b:92:4a:c5:30:b2:34:27:68:d5:cb:7c:
38:cb:df:57:4f:16:7a:14:cf:8f:3c:51:6a:68:be:
67:a5:75:2a:0d:73:ae:bf:d5:4c:05:f8:a0:c0:9f:
37:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A4:A1:D9:E8:16:EE:97:5D:39:46:DA:D0:7F:54:EC:CD:21:B7:6C
X509v3 Authority Key Identifier:
keyid:AA:15:97:2C:FB:B7:6F:A7:6A:9A:33:DA:79:7C:67:33:C3:48:B4:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qhWXLPu3b6dqmjPaeXxnM8NItP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a82835-123b-4532-aba6-d60d5127825d/1/qhWXLPu3b6dqmjPaeXxnM8NItP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a82835-123b-4532-aba6-d60d5127825d/1/qhWXLPu3b6dqmjPaeXxnM8NItP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:16:27:c1:66:8a:6d:8d:83:50:b1:9a:e4:8f:8d:a8:f7:ab:
ee:52:e9:5e:cc:c1:c8:cb:54:30:0e:d4:85:cb:29:59:e5:1a:
7c:97:46:5e:0f:af:60:c8:a5:d7:15:b2:e4:af:ac:a1:8f:9c:
db:a3:ba:d1:c4:27:a5:29:eb:91:50:25:63:d4:a2:ef:db:ba:
16:03:ed:97:1c:dd:99:da:67:d4:f7:47:28:d4:8b:b6:db:79:
35:4b:af:0f:40:d6:da:21:f2:0d:48:8c:13:1e:1a:ac:1f:57:
c8:b0:69:68:df:00:10:ee:66:ff:fb:a8:c3:e5:ba:c9:91:c6:
ba:29:ac:3c:63:01:ec:9d:b9:96:c1:9c:28:aa:3a:8e:1d:5c:
be:d1:8a:0a:73:88:6c:ed:66:4e:c1:00:61:f5:27:7c:0a:d1:
e9:62:44:98:0d:37:1b:bf:06:b2:95:07:af:9f:23:74:b7:0a:
33:8c:85:7d:b4:67:db:57:4a:27:18:f9:3f:ab:28:04:3d:5c:
0b:f1:74:28:bc:32:1d:2f:de:3d:80:7d:ef:06:a3:53:9f:3b:
b7:a1:37:ae:f9:bd:70:5e:0c:78:59:0d:12:af:39:41:a6:38:
39:18:c8:63:22:c4:6c:d0:6d:04:4d:49:e0:2b:e6:05:a3:66:
a8:0d:b5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:24 2026 by rpki-client