Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
File: qDOwgB1A0FhJBy4vyBITsCXSorw.mft (raw, json)
Hash identifier: H2Ti9+mL4Oyihdcnp/BuoCfFFw2TunY2IZwjKDSpsdM=
Subject key identifier: 4A:46:14:5F:26:5E:91:A5:2C:BB:05:0E:F2:A3:78:BF:5D:D6:D6:48
Authority key identifier: A8:33:B0:80:1D:40:D0:58:49:07:2E:2F:C8:12:13:B0:25:D2:A2:BC
Certificate issuer: /CN=a833b0801d40d05849072e2fc81213b025d2a2bc
Certificate serial: 019FAA880AAE98AEA1A6CC8D3A3AF3430CB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
Manifest number: 0387
Signing time: Tue 28 Jul 2026 21:01:10 +0000
Manifest this update: Tue 28 Jul 2026 21:01:10 +0000
Manifest next update: Wed 29 Jul 2026 21:01:10 +0000
Files and hashes: 1: 8dx6CDeeDv1yQZPzxZW_CCsiWuI.roa (hash: d7H5FvAS5k9Xu18WJ58VOwYw00U/ixBu9RyNPrcPus0=)
2: qDOwgB1A0FhJBy4vyBITsCXSorw.crl (hash: fSUM+mKeWQ8qAKNDLFQ131ermh35Ro50nND/qWPcA30=)
3: vZtaog6rpuNltteEkdUJlHMVrcw.roa (hash: 7RtaWZDq5AUONnDyPCbjKsuXwOlICNTJNhflkjZkwLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:0a:ae:98:ae:a1:a6:cc:8d:3a:3a:f3:43:0c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a833b0801d40d05849072e2fc81213b025d2a2bc
Validity
Not Before: Jul 28 21:01:10 2026 GMT
Not After : Jul 29 21:01:10 2026 GMT
Subject: CN=4a46145f265e91a52cbb050ef2a378bf5dd6d648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d1:80:0a:29:1c:89:ec:f5:fa:10:61:4b:c8:
75:22:8d:fa:e4:3e:1d:50:ff:e2:b3:b6:f8:fb:56:
66:69:0f:08:d3:9e:e6:13:bc:cd:dc:15:58:e7:44:
0f:71:15:fa:87:ec:a7:3a:a7:d4:a9:b8:c2:35:82:
8f:95:3e:9b:d3:f6:c1:01:30:e3:ec:c2:e7:98:1e:
2b:17:2e:b7:a7:38:b9:62:2b:2d:45:e8:5d:e1:bf:
8a:1c:bc:15:cd:27:9e:88:41:fb:41:c3:f1:a0:aa:
ea:42:99:7a:1c:e5:7e:37:ee:c9:91:d0:7c:e0:c2:
e6:37:24:45:5f:35:65:9c:77:3e:8b:0c:94:8c:f1:
4c:48:ab:8e:c7:90:2d:34:a6:7c:4a:0f:d6:14:07:
0d:67:a3:4d:c6:04:9e:a9:28:3d:43:0c:74:8e:6c:
af:f8:80:eb:a2:53:28:0f:bf:e8:c1:de:9e:aa:08:
2b:2e:a0:5a:88:3e:d1:73:ff:5c:2f:eb:43:90:f1:
72:fd:bf:41:d3:eb:20:8b:1e:e8:7a:72:40:ed:e3:
01:5d:56:50:30:36:da:88:c9:3e:06:61:36:3e:c2:
40:60:f8:b5:e2:6e:ca:cf:10:40:5a:9c:c0:a3:95:
97:77:39:46:85:02:6f:83:3a:2f:d8:9f:72:81:56:
97:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:46:14:5F:26:5E:91:A5:2C:BB:05:0E:F2:A3:78:BF:5D:D6:D6:48
X509v3 Authority Key Identifier:
keyid:A8:33:B0:80:1D:40:D0:58:49:07:2E:2F:C8:12:13:B0:25:D2:A2:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:2b:73:64:61:22:21:90:11:9b:e4:34:c4:a0:30:f1:82:0c:
f1:66:25:cd:4a:bc:9b:98:d9:1e:db:52:de:66:72:6c:9e:15:
b4:c1:11:b6:6c:d7:b0:46:9a:50:b6:26:9f:bc:2e:0e:15:7d:
06:e8:75:47:f5:e6:56:1b:a1:e3:b0:ba:17:3d:8e:83:f7:5e:
46:35:4c:12:4d:5f:0c:04:64:ea:f2:53:a0:bf:a8:d7:de:72:
18:26:99:fc:78:f9:f4:39:13:06:e5:02:92:5f:1d:bb:44:6b:
3a:e0:ed:09:9f:f4:0f:81:c6:cb:03:e8:8c:e5:32:af:3c:ed:
5d:89:5d:23:1b:48:86:56:2c:0b:70:ce:17:d6:c5:3d:96:f5:
bd:62:2b:4f:4e:5e:7d:ad:34:20:89:cb:c9:cc:a5:26:f2:d4:
a4:b8:1d:00:f8:5d:e0:86:45:82:4e:4e:80:16:7f:5d:fa:08:
9e:69:43:2d:17:31:4a:2f:26:3f:88:78:11:f4:a6:c6:05:d3:
b2:ac:9a:32:44:eb:e3:ae:01:47:97:c3:10:a4:2a:92:56:a0:
2a:00:4c:9e:a3:03:5b:67:1e:08:bf:84:49:7b:31:46:1a:d2:
71:13:ec:a4:60:eb:55:cb:b6:d1:3a:d3:b6:b7:8e:98:c1:00:
6a:72:34:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:10:01 2026 by rpki-client