Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
File: QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft (raw, json)
Hash identifier: e6ShkQSUTKgm0efqwVo3zQIMxznN++5C+ogdf0JyR4s=
Subject key identifier: EE:58:35:A3:97:09:1B:BE:46:03:9A:FE:EA:F5:4E:EE:7C:75:A8:8C
Authority key identifier: 42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
Certificate issuer: /CN=427a2670508b945123beecbf13145ffbd7bfcde4
Certificate serial: 019FAA8787F1F4E00E27522A2E623B630D47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
Manifest number: 0BC1
Signing time: Tue 28 Jul 2026 21:00:36 +0000
Manifest this update: Tue 28 Jul 2026 21:00:36 +0000
Manifest next update: Wed 29 Jul 2026 21:00:36 +0000
Files and hashes: 1: 2j_D2kuSa562Zx4XnJ12w00oiMA.roa (hash: axWB++PeEKcojO8mVkayfPDvB+OsvgmhWTzXNDpM5Gk=)
2: 7Un3ch6sdTltAsulfRI9pykeqS0.roa (hash: qClWxzfRNb7UAsReGRMx4ioTUH4td3oi9VjiWf2rMZk=)
3: QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl (hash: WoHFf1I+iAn6kQ0iX8+mqYpcxB9Rj7mZ3lcR1fL5ook=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:87:f1:f4:e0:0e:27:52:2a:2e:62:3b:63:0d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427a2670508b945123beecbf13145ffbd7bfcde4
Validity
Not Before: Jul 28 21:00:36 2026 GMT
Not After : Jul 29 21:00:36 2026 GMT
Subject: CN=ee5835a397091bbe46039afeeaf54eee7c75a88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5b:5b:ae:b4:14:09:57:04:95:a0:cf:2e:39:
4b:25:dc:0f:33:72:3f:2e:e3:fc:55:80:52:d6:b3:
62:59:ee:7c:a9:3d:a4:07:57:bb:85:0b:a1:35:0f:
88:82:76:00:a2:3b:0b:32:2a:7b:87:75:06:f0:3f:
24:f5:0a:2c:80:d0:bb:4e:96:91:28:4e:6a:33:89:
7a:1d:33:3e:91:76:7e:1a:68:88:45:79:a5:1a:91:
5c:03:73:ae:b5:09:3b:c7:aa:da:bf:53:28:73:b4:
a6:38:4b:34:7f:25:33:4d:f5:ef:e7:1e:3c:d2:11:
59:a0:cd:6b:1b:d5:d4:e9:8f:a3:3d:c1:3f:45:21:
b4:78:28:da:76:e9:3b:f3:05:e7:94:f3:e2:a7:ec:
4e:06:97:21:32:79:48:22:df:43:b4:fe:16:be:4c:
21:60:0e:18:bc:2b:dd:5d:25:c5:3f:8f:24:f9:0b:
76:1e:9c:86:82:82:d3:5f:7c:22:f4:5a:77:a5:c1:
c7:82:26:a1:4c:27:dd:e8:09:79:1c:91:13:95:42:
61:d1:44:10:4d:4a:62:bf:62:bc:62:ff:1c:00:de:
c8:8d:a5:25:d8:ba:b4:c5:f9:fd:0f:c1:39:03:c1:
34:21:2c:80:27:30:9a:39:d7:a2:4b:8d:c5:de:d8:
a5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:58:35:A3:97:09:1B:BE:46:03:9A:FE:EA:F5:4E:EE:7C:75:A8:8C
X509v3 Authority Key Identifier:
keyid:42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:03:a7:c5:a9:0b:3d:6b:35:b3:83:32:c4:e9:98:ac:20:de:
de:db:90:f8:7e:9c:3e:e8:e4:f8:1b:71:23:ad:56:71:94:1f:
77:74:72:65:d4:62:62:8e:de:21:97:11:24:8a:08:8c:fe:36:
17:62:fa:41:26:7e:51:c5:6b:dc:d7:24:ee:a8:cc:30:49:39:
2d:94:8a:d9:c2:17:ab:39:b6:7e:ea:38:bf:cd:b2:8f:ae:ef:
99:e7:7b:4d:48:eb:26:15:fd:65:5c:a8:c3:c8:1c:26:43:78:
d1:f9:c7:68:8c:4c:4e:c8:76:4d:be:3b:7e:40:30:5e:44:38:
aa:c2:f6:a8:9a:0a:e9:4b:fa:d8:e1:ab:12:c5:72:ed:c4:df:
f3:fa:4e:13:d7:f4:48:8f:d5:27:2f:d2:58:37:19:84:5e:33:
20:e5:6d:89:ae:a1:b9:50:28:40:68:c0:68:ce:77:bb:f7:38:
19:cc:5a:dd:b6:76:c2:f5:87:53:61:89:34:c2:f5:a2:45:f3:
c8:51:f0:3a:9b:77:08:f6:14:09:06:73:46:17:0f:fd:d0:a6:
92:56:bc:99:cb:c8:df:32:b5:bb:83:55:c8:3b:68:1d:52:ca:
9d:3e:61:4d:2e:78:53:70:ec:8a:96:0a:0a:df:59:95:08:6e:
0f:23:f0:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qh4fx9OAOJ1IqLmI7Yw1HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyN2EyNjcwNTA4Yjk0NTEyM2JlZWNiZjEzMTQ1ZmZiZDdi
ZmNkZTQwHhcNMjYwNzI4MjEwMDM2WhcNMjYwNzI5MjEwMDM2WjAzMTEwLwYDVQQD
EyhlZTU4MzVhMzk3MDkxYmJlNDYwMzlhZmVlYWY1NGVlZTdjNzVhODhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1tbrrQUCVcElaDPLjlLJdwPM3I/
LuP8VYBS1rNiWe58qT2kB1e7hQuhNQ+IgnYAojsLMip7h3UG8D8k9QosgNC7TpaR
KE5qM4l6HTM+kXZ+GmiIRXmlGpFcA3OutQk7x6rav1Moc7SmOEs0fyUzTfXv5x48
0hFZoM1rG9XU6Y+jPcE/RSG0eCjaduk78wXnlPPip+xOBpchMnlIIt9DtP4Wvkwh
YA4YvCvdXSXFP48k+Qt2HpyGgoLTX3wi9Fp3pcHHgiahTCfd6Al5HJETlUJh0UQQ
TUpiv2K8Yv8cAN7IjaUl2Lq0xfn9D8E5A8E0ISyAJzCaOdeiS43F3tiliQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5YNaOXCRu+RgOa/ur1Tu58daiMMB8GA1UdIwQY
MBaAFEJ6JnBQi5RRI77svxMUX/vXv83kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW5vbWNGQ0xsRkVqdnV5X0V4UmYtOWVfemVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lYzJlMDgtZjYzYS00YmQ3LWI4NjQt
MDZiM2NlYTQ5MmVlLzEvUW5vbWNGQ0xsRkVqdnV5X0V4UmYtOWVfemVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9lYzJlMDgtZjYzYS00YmQ3LWI4NjQtMDZiM2NlYTQ5MmVl
LzEvUW5vbWNGQ0xsRkVqdnV5X0V4UmYtOWVfemVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAgOnxakL
PWs1s4MyxOmYrCDe3tuQ+H6cPujk+BtxI61WcZQfd3RyZdRiYo7eIZcRJIoIjP42
F2L6QSZ+UcVr3Nck7qjMMEk5LZSK2cIXqzm2fuo4v82yj67vmed7TUjrJhX9ZVyo
w8gcJkN40fnHaIxMTsh2Tb47fkAwXkQ4qsL2qJoK6Uv62OGrEsVy7cTf8/pOE9f0
SI/VJy/SWDcZhF4zIOVtia6huVAoQGjAaM53u/c4Gcxa3bZ2wvWHU2GJNML1okXz
yFHwOpt3CPYUCQZzRhcP/dCmkla8mcvI3zK1u4NVyDtoHVLKnT5hTS54U3DsipYK
Ct9ZlQhuDyPwSg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:28:59 2026 by rpki-client