Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.mft
File: qERYOVOgK8amaZ3pJ89FcAfwVSg.mft (raw, json)
Hash identifier: X+pGXyZQqxdaBCXBDsWga/F2q9ab9kn4RTRq7T85ci0=
Subject key identifier: 04:F0:E1:78:04:28:64:A2:A8:23:17:91:67:CA:6C:66:F7:4F:ED:1B
Authority key identifier: A8:44:58:39:53:A0:2B:C6:A6:69:9D:E9:27:CF:45:70:07:F0:55:28
Certificate issuer: /CN=a844583953a02bc6a6699de927cf457007f05528
Certificate serial: 019FA9AB8A728DAC4672F2EA55CD132D26A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qERYOVOgK8amaZ3pJ89FcAfwVSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.mft
Manifest number: 026A
Signing time: Tue 28 Jul 2026 17:00:19 +0000
Manifest this update: Tue 28 Jul 2026 17:00:19 +0000
Manifest next update: Wed 29 Jul 2026 17:00:19 +0000
Files and hashes: 1: bzuHav72txau2Blj1JcbQR-3zHA.roa (hash: TCvNISq9G9+8+m7g0vleezt4nSYPh9D8kXCKj2MC7tQ=)
2: qERYOVOgK8amaZ3pJ89FcAfwVSg.crl (hash: Dc7ykCkmtgYgBRmPhHwtPkoQqcD4GSSdU7ie5nmGtgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qERYOVOgK8amaZ3pJ89FcAfwVSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:8a:72:8d:ac:46:72:f2:ea:55:cd:13:2d:26:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a844583953a02bc6a6699de927cf457007f05528
Validity
Not Before: Jul 28 17:00:19 2026 GMT
Not After : Jul 29 17:00:19 2026 GMT
Subject: CN=04f0e178042864a2a823179167ca6c66f74fed1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:09:b2:04:ae:59:9c:5d:52:9e:43:47:0f:c8:
b0:70:81:ac:1c:9d:d7:15:8c:f3:8b:99:18:64:8d:
ff:00:98:7e:92:69:37:b6:82:e6:26:11:27:e6:7a:
53:36:7c:64:50:d0:de:bc:80:b1:15:5c:19:71:5b:
9a:47:c3:c3:49:95:ab:b1:5a:2b:19:75:8f:bd:7d:
b8:b0:2f:01:75:1d:5f:1a:fd:01:95:3d:a2:cd:c6:
01:78:b5:af:35:4c:4b:8c:15:8f:89:d5:31:41:4a:
99:3b:8b:d7:0e:12:7c:ad:e9:ed:6e:a4:af:b1:0a:
60:01:b6:9b:b3:6c:bd:58:e8:9b:f5:6e:4d:82:67:
56:06:dc:38:e9:09:82:7a:ca:52:d9:eb:42:38:26:
64:c6:16:8a:f5:04:7b:68:4c:c9:e8:1f:e6:82:8a:
7f:9b:0d:29:da:84:e6:0a:0f:b6:a4:8f:28:f1:9a:
74:7c:3f:11:77:0f:d2:f0:ad:5d:e5:73:b2:ca:36:
e2:5a:fd:bd:45:23:2a:f3:c5:c9:96:ec:2c:53:6c:
0c:59:ae:98:4f:51:6e:59:f5:85:c7:17:5b:67:ed:
7c:19:96:4c:a8:1e:47:7a:bd:10:ba:73:5a:8d:14:
9c:9e:bd:e0:a0:9b:01:a6:04:d4:9a:ca:3e:38:da:
ff:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F0:E1:78:04:28:64:A2:A8:23:17:91:67:CA:6C:66:F7:4F:ED:1B
X509v3 Authority Key Identifier:
keyid:A8:44:58:39:53:A0:2B:C6:A6:69:9D:E9:27:CF:45:70:07:F0:55:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qERYOVOgK8amaZ3pJ89FcAfwVSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:62:63:47:bf:4a:f8:fe:c7:bf:3d:56:e2:cc:be:e5:f4:8b:
96:13:6a:e3:07:45:b0:6b:c9:79:2f:45:82:a0:5d:b3:f9:79:
ce:28:e0:b8:ff:90:e3:88:8f:97:11:9c:c7:a9:5a:57:bd:95:
54:e0:dd:02:50:d0:48:ca:16:bb:63:a8:e1:a0:73:8e:69:f6:
c7:31:46:9b:7c:03:6f:55:14:86:00:76:54:9b:c5:f4:14:48:
6f:b3:4b:e3:a5:eb:8b:d9:aa:3a:9a:62:5f:1d:63:0e:28:f6:
90:82:94:20:8b:9a:71:3e:c3:27:4a:bc:60:8c:a9:94:0f:1c:
9b:eb:18:0d:af:37:6a:57:76:6c:55:a4:33:fe:1e:84:b0:db:
48:a4:82:d5:e6:cb:2d:5a:e8:d5:97:53:29:eb:2b:86:fb:c9:
72:38:93:22:9e:bd:8e:d3:f4:5d:8e:00:42:f7:0c:9d:f9:2b:
5f:32:dd:0c:46:62:d9:c7:6c:6d:ea:d7:ab:c8:0d:6f:9f:1d:
a5:c6:e4:a5:61:1e:e5:2a:d8:17:df:f0:e6:39:8b:95:12:ee:
0d:b1:29:de:86:58:9e:46:36:77:10:93:23:b1:58:90:59:16:
a1:d1:ae:d7:66:96:28:3c:41:ba:ca:95:a0:af:e1:0c:55:70:
c2:46:8c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:18:11 2026 by rpki-client