Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
File: qBfHRT83fpy2-uXIk8Bno-HTUUU.mft (raw, json)
Hash identifier: uO8AKWBMU7v2eKq1awQgkwAbq1M/WIPfGJAydZVKlD8=
Subject key identifier: 93:F2:5D:56:20:16:0D:80:0C:14:B4:06:21:9C:FC:C8:BB:48:4D:47
Authority key identifier: A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
Certificate issuer: /CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Certificate serial: 019FAABEADA68196514EF94332AAAF9B15C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
Manifest number: 11F5
Signing time: Tue 28 Jul 2026 22:00:50 +0000
Manifest this update: Tue 28 Jul 2026 22:00:50 +0000
Manifest next update: Wed 29 Jul 2026 22:00:50 +0000
Files and hashes: 1: bDniOy7bJDqEB7j18XhIORHd9P4.roa (hash: 7UeZ8ffZs41TrgD9TFvep3setoYXza5q1+hwG2ZnLPc=)
2: ce9B0xiqGv3-6XVsohVP_4mQ2nc.roa (hash: bZXcOl6PpFz9za7K+EZymB9rux3LD9nnlgPnINrzVx8=)
3: qBfHRT83fpy2-uXIk8Bno-HTUUU.crl (hash: PSud90rGxKcGk5Rvm4CrdlEx7/mmY2Zyw/ocJKLYOU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:ad:a6:81:96:51:4e:f9:43:32:aa:af:9b:15:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Validity
Not Before: Jul 28 22:00:50 2026 GMT
Not After : Jul 29 22:00:50 2026 GMT
Subject: CN=93f25d5620160d800c14b406219cfcc8bb484d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c1:c2:d6:4a:8f:e5:a1:14:6b:5b:90:db:4d:
a4:00:33:08:08:f1:c7:5d:f9:ca:77:91:e5:81:ec:
fc:40:34:6a:c6:e4:b9:fb:08:2d:ec:8e:da:ee:52:
42:9a:9f:8c:de:4d:5d:42:03:6a:18:d9:7d:44:7f:
72:09:f3:25:fe:bc:a6:25:0b:0e:d7:ff:12:7a:b6:
8e:0d:f7:b0:06:b6:fb:06:48:8a:aa:a3:f9:5f:a0:
5a:e3:5a:7c:f7:3d:af:e3:2b:31:0d:11:09:12:74:
94:e8:4e:c1:e5:ed:04:29:b1:bd:b2:f9:f1:24:f7:
a2:a9:25:f6:18:b5:94:a7:3f:dc:ed:c1:32:b2:73:
4b:ce:ff:59:6c:d8:74:e6:60:78:37:21:2c:b3:2c:
35:76:cd:5b:cf:e8:93:30:4f:ad:d9:27:7a:ee:4b:
b3:e4:19:9f:43:47:0a:16:ea:30:54:4b:d5:3a:ef:
d4:ae:40:ff:e1:6c:e3:86:d0:df:e9:da:e6:5d:34:
2d:68:a1:3c:d6:43:16:b0:6d:5e:07:7a:16:b4:60:
df:ce:ff:cd:cb:32:4b:bb:65:b9:53:f2:b0:30:6f:
bc:3a:e8:75:78:52:23:4c:16:08:d1:fa:50:2c:d3:
5a:9b:97:a2:c8:2b:ca:1c:e4:7c:68:f2:9f:0e:fb:
5d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F2:5D:56:20:16:0D:80:0C:14:B4:06:21:9C:FC:C8:BB:48:4D:47
X509v3 Authority Key Identifier:
keyid:A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:3e:e9:09:39:65:b0:de:5c:c0:ac:45:12:57:4b:b3:ac:f3:
b3:7e:e1:f3:fd:18:81:23:76:6c:3c:f9:1e:87:81:18:3d:28:
fc:1a:8d:ae:46:15:e5:12:5b:43:76:fd:b2:95:3e:0b:6a:d8:
80:2e:10:2e:33:99:ae:39:99:62:13:20:77:da:0e:d9:ec:08:
df:5d:12:82:90:1a:66:13:d1:4d:e0:6f:33:45:98:ad:27:29:
4f:af:c1:bc:bb:ff:94:37:8e:46:10:86:d6:b3:5b:b0:2a:87:
f9:2d:96:e3:9b:49:61:93:f7:90:53:18:d8:43:df:cf:46:3f:
d8:99:1a:8e:d1:7b:64:b9:59:96:bc:9a:d9:fb:e3:db:d7:db:
fe:02:7c:28:8c:3a:b8:00:43:37:b8:0d:05:2f:91:33:f3:1f:
d9:47:fa:96:65:1c:fb:39:1d:df:57:94:a9:49:8f:c1:24:9d:
50:04:02:31:b0:32:ee:49:26:d5:b3:37:97:d7:c5:1c:f8:35:
61:6a:37:a9:4f:45:c9:d1:c7:f0:18:23:6e:2d:6a:06:f5:fa:
a9:71:2c:3a:8e:3e:db:f3:a7:ff:15:ce:50:ef:57:bc:d8:e0:
38:d1:04:f1:6e:46:b1:4c:05:3a:44:c8:70:2f:d5:9e:79:12:
b2:80:60:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:03:39 2026 by rpki-client