Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
File: QRoqlAW9oWccEHdvRCYnPJBOStA.mft (raw, json)
Hash identifier: f3Xa1LfDeJ4djbeR9s9Lxw4nupugSP04FRh2veGl+N0=
Subject key identifier: EC:92:AE:60:E2:3C:85:98:DA:A2:5D:7C:4B:CB:8D:49:54:70:74:B9
Authority key identifier: 41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
Certificate issuer: /CN=411a2a9405bda1671c10776f4426273c904e4ad0
Certificate serial: 019FA906CF3F59EDB2AA4C147B7C8AB49EAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
Manifest number: 19D7
Signing time: Tue 28 Jul 2026 14:00:23 +0000
Manifest this update: Tue 28 Jul 2026 14:00:23 +0000
Manifest next update: Wed 29 Jul 2026 14:00:23 +0000
Files and hashes: 1: JhKTt4vHe2Da6Kx5S6KE0aGaD54.roa (hash: nw0ozHE1LZlyAK+hkXXsJOHymcfFOhmuSyMz6eBbqyE=)
2: O5zwSwZaq-PnYfyFgUGaYTtXVCc.roa (hash: EcphMyhwWu+HB1619MCd3HbMcseN3a1eZUs2rmX7LwY=)
3: QRoqlAW9oWccEHdvRCYnPJBOStA.crl (hash: 9apX3bzyWuDSKpT5B4h7N5INzDga99189hiPodHxjMw=)
4: mV0XT4eYWUzPfujoqVHWBgPdVhw.asa (hash: SxQBgXkzl2s7ZSzL5zFHD8gDFNbcwGk2HGZOyqJzEQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:cf:3f:59:ed:b2:aa:4c:14:7b:7c:8a:b4:9e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411a2a9405bda1671c10776f4426273c904e4ad0
Validity
Not Before: Jul 28 14:00:23 2026 GMT
Not After : Jul 29 14:00:23 2026 GMT
Subject: CN=ec92ae60e23c8598daa25d7c4bcb8d49547074b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fb:8b:00:67:24:f4:39:26:38:1f:d4:0c:8d:
47:09:61:b7:1c:42:a6:b2:db:b5:4f:06:ad:ee:0d:
0a:80:74:02:87:40:7b:03:a4:98:34:73:96:1e:ec:
cf:c5:a6:64:30:43:70:b9:26:36:6d:46:e9:25:74:
f4:b9:77:d1:61:6d:a8:8b:8b:4e:03:c3:3f:b7:eb:
12:d3:e4:39:15:f5:da:3d:d7:a1:a5:4e:99:26:65:
8b:3d:56:ed:62:72:9b:8d:42:44:9a:71:aa:7d:47:
19:e5:e9:3e:ca:a9:66:58:81:31:ac:bf:21:1b:59:
bc:bb:4e:5d:ad:50:ef:80:f2:b2:f0:f2:6b:87:82:
75:4d:a1:f8:2d:72:b3:6a:7b:7c:3e:7f:28:b3:6b:
8b:95:78:36:14:80:18:13:a8:50:d5:e2:df:19:7b:
08:38:c5:7f:7d:b8:9d:22:e7:b0:3e:7c:88:14:bf:
06:b9:87:4c:19:88:70:d2:b5:e9:29:1e:54:69:a9:
66:64:86:b5:bb:31:00:50:16:17:69:58:17:63:58:
87:e8:d2:e5:cd:7f:46:87:6e:2d:24:98:9b:ac:c6:
c1:1f:19:92:67:5d:38:cc:41:4c:6d:c6:8e:bb:e3:
59:d2:f9:08:95:54:b6:9f:8b:e9:e8:9e:d5:f0:b6:
b7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:92:AE:60:E2:3C:85:98:DA:A2:5D:7C:4B:CB:8D:49:54:70:74:B9
X509v3 Authority Key Identifier:
keyid:41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:dd:05:b9:90:53:04:75:b1:ab:5e:60:7c:c3:ce:7d:de:b3:
0f:21:5b:cf:f7:f6:0b:d2:70:8c:73:26:e4:01:91:5d:1b:16:
19:e4:ad:2b:50:b5:c0:a3:2f:f8:ab:d6:af:f3:cd:5e:a2:2f:
7c:1e:4a:4b:ad:44:12:c5:20:fa:ce:4b:ec:28:14:85:6d:8a:
82:d6:16:ff:ad:82:d5:2a:b9:a8:34:96:b0:ca:99:1a:dc:d5:
e5:f4:06:c5:73:b8:7b:ed:a2:f9:25:a5:af:9f:8b:35:5e:87:
e0:9f:45:0a:97:0d:ad:d5:ec:07:ab:a9:23:af:ae:15:1c:83:
2a:1a:74:d7:a4:e2:40:76:3a:d0:15:74:8e:df:1e:68:4d:49:
6e:0f:53:dd:f6:ff:7b:71:05:31:20:f5:1e:e7:8a:1a:16:d3:
f3:b6:a2:52:36:7c:4b:b8:30:92:ab:cb:89:97:33:93:44:57:
8a:19:9d:9a:1d:5b:c8:2b:2e:4f:3e:d5:b9:57:4c:45:b6:c0:
c9:b7:99:94:f7:60:be:f6:b6:52:a9:32:4d:3b:2c:ef:d7:9b:
32:8d:64:39:c8:15:b5:a1:b7:52:6e:68:08:f9:dd:38:34:33:
06:48:05:a0:c3:c2:ea:9f:e6:b5:f8:ad:e3:f6:bd:8d:40:be:
99:d1:a4:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pBs8/We2yqkwUe3yKtJ6vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMWEyYTk0MDViZGExNjcxYzEwNzc2ZjQ0MjYyNzNjOTA0
ZTRhZDAwHhcNMjYwNzI4MTQwMDIzWhcNMjYwNzI5MTQwMDIzWjAzMTEwLwYDVQQD
EyhlYzkyYWU2MGUyM2M4NTk4ZGFhMjVkN2M0YmNiOGQ0OTU0NzA3NGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufuLAGck9DkmOB/UDI1HCWG3HEKm
stu1Twat7g0KgHQCh0B7A6SYNHOWHuzPxaZkMENwuSY2bUbpJXT0uXfRYW2oi4tO
A8M/t+sS0+Q5FfXaPdehpU6ZJmWLPVbtYnKbjUJEmnGqfUcZ5ek+yqlmWIExrL8h
G1m8u05drVDvgPKy8PJrh4J1TaH4LXKzant8Pn8os2uLlXg2FIAYE6hQ1eLfGXsI
OMV/fbidIuewPnyIFL8GuYdMGYhw0rXpKR5UaalmZIa1uzEAUBYXaVgXY1iH6NLl
zX9Gh24tJJibrMbBHxmSZ104zEFMbcaOu+NZ0vkIlVS2n4vp6J7V8La3jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOySrmDiPIWY2qJdfEvLjUlUcHS5MB8GA1UdIwQY
MBaAFEEaKpQFvaFnHBB3b0QmJzyQTkrQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVJvcWxBVzlvV2NjRUhkdlJDWW5QSkJPU3RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9mZTY4NzAtMDk5MC00YzIxLTllNGQt
OGM1MmU2NjZhOGEyLzEvUVJvcWxBVzlvV2NjRUhkdlJDWW5QSkJPU3RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9mZTY4NzAtMDk5MC00YzIxLTllNGQtOGM1MmU2NjZhOGEy
LzEvUVJvcWxBVzlvV2NjRUhkdlJDWW5QSkJPU3RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnt0FuZBT
BHWxq15gfMPOfd6zDyFbz/f2C9JwjHMm5AGRXRsWGeStK1C1wKMv+KvWr/PNXqIv
fB5KS61EEsUg+s5L7CgUhW2KgtYW/62C1Sq5qDSWsMqZGtzV5fQGxXO4e+2i+SWl
r5+LNV6H4J9FCpcNrdXsB6upI6+uFRyDKhp016TiQHY60BV0jt8eaE1Jbg9T3fb/
e3EFMSD1HueKGhbT87aiUjZ8S7gwkqvLiZczk0RXihmdmh1byCsuTz7VuVdMRbbA
ybeZlPdgvva2UqkyTTss79ebMo1kOcgVtaG3Um5oCPndODQzBkgFoMPC6p/mtfit
4/a9jUC+mdGkuw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:23:41 2026 by rpki-client