Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
File: qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft (raw, json)
Hash identifier: XpC3pg3Yv8fsxGv5HLW48I7D8txjYqowU9x+mo8L45Y=
Subject key identifier: 73:49:AA:1B:1A:8D:78:70:C9:1A:6C:94:4A:A3:DE:E6:DE:C0:44:6A
Authority key identifier: AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1
Certificate issuer: /CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1
Certificate serial: 019F921169366FFE22203A8148EEDAE7ACDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
Manifest number: 04DB
Signing time: Fri 24 Jul 2026 03:00:42 +0000
Manifest this update: Fri 24 Jul 2026 03:00:42 +0000
Manifest next update: Sat 25 Jul 2026 03:00:42 +0000
Files and hashes: 1: IQ5bkMn7w4mdfQTVCpKxTeAJY2A.roa (hash: BUMsO+3Md3GuCd0Sja0LiQrCDsbttYlIXUYoBXpu1Ks=)
2: JEsWD0_sPZeR3nDP6LBcihehfnQ.roa (hash: q6r9n8Jhyw8OGJcuwwPP+sOyeoKFsYrXF9zzzZNNxbI=)
3: qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl (hash: 9As54mZIh26+uqCxLNCkOwBu54xjnbCeyOsFWv0UCH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:69:36:6f:fe:22:20:3a:81:48:ee:da:e7:ac:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1
Validity
Not Before: Jul 24 03:00:42 2026 GMT
Not After : Jul 25 03:00:42 2026 GMT
Subject: CN=7349aa1b1a8d7870c91a6c944aa3dee6dec0446a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ca:92:35:2b:a5:19:c3:40:f1:6a:2d:1c:63:
88:6e:9c:c4:7f:0b:f1:5a:45:88:e2:d8:81:d8:1f:
56:e1:28:00:2e:a9:98:9a:b8:0c:2d:0a:e7:af:1e:
80:39:ff:c1:9c:42:96:82:52:91:a6:18:c2:26:61:
69:c1:f2:c0:75:09:b0:b2:0e:a5:37:e3:8b:b6:13:
c4:a2:73:f0:17:9c:fd:0e:0d:4e:5b:17:36:89:0b:
9e:40:bc:ed:15:54:01:86:dd:39:cf:e6:9f:39:82:
0d:09:ed:63:88:7d:65:90:05:ca:ea:f0:ac:eb:50:
35:c1:0c:e6:ff:b6:e1:99:5b:b5:99:3c:93:72:c9:
93:77:d9:cb:03:19:bd:29:de:dc:14:0b:99:6a:83:
8f:15:b4:0d:4e:33:82:61:b1:ec:4a:4b:8e:db:18:
d7:20:16:ea:00:d6:cd:a0:4e:b8:3d:c0:ac:94:ff:
0d:d5:c3:f8:bf:0a:fb:ae:57:3b:e1:60:b9:ea:72:
98:f1:ad:da:99:aa:81:57:8d:4d:c9:ea:89:b7:a5:
2e:67:82:b5:84:61:3a:5b:97:0a:51:ab:17:8c:d2:
de:c7:d1:81:27:bc:d4:0c:d3:68:ef:c5:82:b7:b5:
e2:95:69:28:38:49:8d:2b:f2:b4:11:e9:12:ab:6c:
d8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:49:AA:1B:1A:8D:78:70:C9:1A:6C:94:4A:A3:DE:E6:DE:C0:44:6A
X509v3 Authority Key Identifier:
keyid:AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:07:66:ae:1b:5e:16:b2:94:8f:28:c2:be:17:63:dc:53:7d:
0c:ed:a5:e8:6e:35:b0:aa:50:41:41:da:f4:c8:7d:bb:c4:e0:
5d:49:b7:e2:5e:1e:0d:c9:bf:ae:4f:78:ae:fe:c0:cb:be:3d:
fc:da:7a:75:30:47:1e:43:6f:00:c4:a5:8f:83:bc:a2:ea:52:
88:b4:2e:68:ac:c0:9a:41:fa:d7:a4:da:32:f9:aa:e1:4a:b3:
33:ba:ae:8b:90:87:b7:0b:18:6d:14:6f:12:f1:86:45:d7:8a:
64:61:c4:27:9e:8e:e6:60:ca:64:5c:7b:8e:76:8a:7b:8b:39:
38:ad:e1:1e:c9:c2:1d:93:18:47:8a:73:23:2a:39:df:ae:2f:
d9:87:24:b8:ed:b4:07:e3:2f:70:7a:d8:82:4c:20:c2:b3:6d:
b2:48:fe:2f:08:77:90:f7:3e:d5:d8:ea:73:db:3b:58:ae:d1:
b6:56:36:77:07:c6:8a:e9:65:46:54:51:25:a6:f3:d9:ed:78:
e2:32:25:c2:e5:74:57:6b:4e:56:91:a3:b1:fb:1d:23:a8:4d:
f9:0e:23:5a:55:c9:63:68:99:7a:c5:28:2e:73:1e:0f:5e:f1:
41:98:f5:bc:7c:01:49:9f:02:33:8f:ac:71:3b:94:73:92:ed:
25:f7:45:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:40:37 2026 by rpki-client