Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
File: qujptNjblGuyDM9RJ5cHXIr9g80.mft (raw, json)
Hash identifier: G1nTHeIBDaqIQF5KQo5G+prLgRDYX4XyUUW+u/pW5QU=
Subject key identifier: 09:DB:4B:4F:35:72:EC:EE:17:AA:16:C6:F0:3F:29:15:05:6F:A4:1D
Authority key identifier: AA:E8:E9:B4:D8:DB:94:6B:B2:0C:CF:51:27:97:07:5C:8A:FD:83:CD
Certificate issuer: /CN=aae8e9b4d8db946bb20ccf512797075c8afd83cd
Certificate serial: 019F9580812BE273C8377BC947D2697577EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
Manifest number: 0829
Signing time: Fri 24 Jul 2026 19:00:54 +0000
Manifest this update: Fri 24 Jul 2026 19:00:54 +0000
Manifest next update: Sat 25 Jul 2026 19:00:54 +0000
Files and hashes: 1: aHdJjEV_MZGQhS1-oSIoUxNhu0w.roa (hash: V1XVv/qtFeaO0uUYLoorR9Olh/izTLbjNE3cg3DaNhc=)
2: qujptNjblGuyDM9RJ5cHXIr9g80.crl (hash: KTXzI3dJZpgQo1kABzgGPkM1c0oeNyvnGjv0Oo7E/+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:81:2b:e2:73:c8:37:7b:c9:47:d2:69:75:77:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae8e9b4d8db946bb20ccf512797075c8afd83cd
Validity
Not Before: Jul 24 19:00:54 2026 GMT
Not After : Jul 25 19:00:54 2026 GMT
Subject: CN=09db4b4f3572ecee17aa16c6f03f2915056fa41d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:58:5a:36:c0:b8:f7:13:b8:e4:91:ed:4c:bb:
ed:51:ab:d8:0e:8b:26:21:1c:ff:48:d3:62:80:82:
ab:50:69:cb:58:60:71:43:14:af:af:56:47:0b:e6:
76:42:d9:41:30:51:cb:23:95:cd:da:71:98:20:24:
72:12:e5:04:57:8c:e9:fc:e2:40:91:d6:50:49:c8:
4c:13:c4:54:f2:0b:ef:ed:63:f1:be:ac:79:2e:fd:
99:cf:57:72:5f:d0:90:22:d4:e6:c6:e3:b8:bd:4e:
f1:aa:a7:37:34:c1:73:75:79:2c:ed:26:e3:83:98:
30:1d:58:c6:0f:39:83:a0:72:a8:e9:6f:b9:78:86:
c3:5a:9d:b2:a9:b7:54:86:a9:9c:82:dd:e5:77:4f:
b3:9a:f7:b8:09:0a:ad:bc:cf:be:2d:1c:8d:36:90:
5b:30:41:d2:86:6b:e2:fa:6e:3e:a8:89:0b:29:24:
36:a5:80:e8:df:e1:59:0f:c5:d7:a2:a3:a0:c1:52:
99:e5:b4:2f:be:a6:53:92:cd:4c:d9:cb:b5:37:60:
09:fb:b4:0e:b8:5d:d8:6e:14:0f:0f:14:9a:26:42:
5c:a2:3d:e0:3d:bd:e9:42:73:de:13:1b:1c:b3:a6:
2a:5e:85:97:68:8a:d8:c9:30:1f:70:0a:25:28:25:
97:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DB:4B:4F:35:72:EC:EE:17:AA:16:C6:F0:3F:29:15:05:6F:A4:1D
X509v3 Authority Key Identifier:
keyid:AA:E8:E9:B4:D8:DB:94:6B:B2:0C:CF:51:27:97:07:5C:8A:FD:83:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ea:85:70:bf:ef:d7:69:58:18:a7:b3:95:74:c3:6d:ef:d2:
e8:f6:0d:e3:40:23:55:c7:36:6a:8b:4b:7c:67:e3:50:5f:ed:
1d:5c:49:74:3a:ee:78:6e:fa:2f:8b:1f:54:02:17:d5:8b:c3:
1d:f5:1e:14:48:d4:e7:eb:9b:90:96:2e:24:2a:f6:27:19:8a:
51:1b:b6:af:17:84:13:69:e3:63:73:f5:f2:8f:47:4d:e3:a7:
6a:3a:c2:ad:1c:e6:92:28:4f:f6:63:3b:43:c1:fb:67:8e:b9:
67:b3:50:6c:73:7c:46:4a:62:ac:45:89:a9:fe:27:7f:47:a7:
93:ff:eb:13:8a:90:5f:77:d5:7b:17:aa:23:60:4a:14:12:c6:
f8:1e:fe:f7:dc:0c:e9:87:a8:20:a9:8c:30:e5:74:96:42:89:
46:92:be:53:a8:30:64:cc:86:24:2d:fc:c4:d3:73:5d:9b:c5:
d3:d5:d6:1b:b3:9a:2c:73:c9:7c:b6:2c:81:a7:29:c7:7e:56:
5e:5c:b3:f1:b3:95:32:7d:66:f8:4d:6f:bd:96:d7:a7:e3:cc:
73:e4:d5:d3:c3:83:e4:31:d4:ee:07:36:9d:9f:f6:49:56:0c:
dc:9c:75:1c:5b:ac:df:dc:21:0d:6a:6b:bc:08:d7:d9:ba:08:
ef:91:c3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:13:11 2026 by rpki-client