Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
File: qDOwgB1A0FhJBy4vyBITsCXSorw.mft (raw, json)
Hash identifier: WK+Zvabu8sX94XIwZmykyj82fk95qN/7VgVdBETYfqI=
Subject key identifier: 45:96:3D:67:3E:D2:6B:A5:12:EF:CB:D2:D6:30:D5:F8:7F:CF:71:55
Authority key identifier: A8:33:B0:80:1D:40:D0:58:49:07:2E:2F:C8:12:13:B0:25:D2:A2:BC
Certificate issuer: /CN=a833b0801d40d05849072e2fc81213b025d2a2bc
Certificate serial: 019FAC76D86F5798C2BD7F79B04DE62EA7F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
Manifest number: 0388
Signing time: Wed 29 Jul 2026 06:01:37 +0000
Manifest this update: Wed 29 Jul 2026 06:01:37 +0000
Manifest next update: Thu 30 Jul 2026 06:01:37 +0000
Files and hashes: 1: 8dx6CDeeDv1yQZPzxZW_CCsiWuI.roa (hash: d7H5FvAS5k9Xu18WJ58VOwYw00U/ixBu9RyNPrcPus0=)
2: qDOwgB1A0FhJBy4vyBITsCXSorw.crl (hash: +vHfmEfHG09G4j+lEtju+rci+zbMz7H6p0IoEkKRO1Y=)
3: vZtaog6rpuNltteEkdUJlHMVrcw.roa (hash: 7RtaWZDq5AUONnDyPCbjKsuXwOlICNTJNhflkjZkwLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:d8:6f:57:98:c2:bd:7f:79:b0:4d:e6:2e:a7:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a833b0801d40d05849072e2fc81213b025d2a2bc
Validity
Not Before: Jul 29 06:01:37 2026 GMT
Not After : Jul 30 06:01:37 2026 GMT
Subject: CN=45963d673ed26ba512efcbd2d630d5f87fcf7155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fb:fa:98:74:b3:c6:b5:38:bc:91:9d:82:a1:
30:32:d3:68:e5:7a:a3:71:24:71:ef:cb:43:86:5f:
11:66:1a:a3:fa:34:4f:e8:21:7a:9c:1f:9a:6d:4c:
54:9f:1b:9d:ba:05:8e:96:0b:50:27:8b:7d:c8:27:
47:e8:f0:54:68:d3:51:36:8f:d8:92:4f:ba:f4:e0:
6e:b7:e7:7f:1a:9f:8d:6a:f3:70:8e:cc:d5:c2:b1:
97:73:ce:16:9f:da:a4:7a:f6:a0:b7:14:81:14:c3:
8e:b8:c9:af:6d:62:21:ea:2e:da:de:1e:75:c4:a6:
1e:a2:b2:1a:e0:32:1f:5b:99:da:86:cf:50:4c:43:
96:4d:de:c5:35:6c:4a:36:a2:1b:61:59:c9:85:91:
7c:0a:00:2a:ac:42:4d:7b:d7:53:92:f5:88:44:36:
c3:ba:2f:1a:58:57:25:8d:0b:02:22:d7:30:41:ec:
d3:d4:b0:a1:a1:c4:9c:86:16:f7:e7:05:68:75:c1:
94:96:08:86:61:fd:39:33:f0:41:78:b8:57:45:71:
15:57:d1:6f:cf:11:24:40:1a:e0:7b:ca:cb:09:08:
3c:c6:3f:3a:4a:6e:7a:20:74:62:4f:1e:64:a1:48:
99:37:50:19:4f:ed:79:b5:ea:d3:6d:a4:6c:c0:f8:
05:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:96:3D:67:3E:D2:6B:A5:12:EF:CB:D2:D6:30:D5:F8:7F:CF:71:55
X509v3 Authority Key Identifier:
keyid:A8:33:B0:80:1D:40:D0:58:49:07:2E:2F:C8:12:13:B0:25:D2:A2:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:17:ee:cb:2b:5f:e6:b7:55:37:7e:d3:b7:22:37:57:2e:aa:
ee:60:1a:fb:bd:03:88:d3:1e:87:80:ed:ed:e4:1a:58:80:08:
00:5d:b0:e5:54:72:e4:b8:fc:26:07:6a:e2:27:49:fd:76:79:
cb:3b:4f:6c:1a:f1:18:b8:29:c8:43:cc:77:f2:8b:19:4b:40:
32:36:6b:5c:c4:9b:90:d1:5b:b2:b9:bf:4c:59:cf:bf:a5:6a:
63:c6:86:73:84:d9:01:21:b7:ca:87:e4:d2:87:62:8c:df:3b:
1a:0d:66:7f:8c:6e:c6:58:80:80:69:95:f8:f7:43:aa:82:79:
bb:51:41:1f:65:a8:89:37:48:53:bd:59:5c:6c:11:5a:d6:f1:
5b:7b:e2:0c:99:0a:7f:8c:1d:d2:35:ea:c4:cb:e7:64:0c:49:
80:47:a7:31:f3:85:68:34:5d:0a:6e:1d:ea:87:4a:ba:ef:7d:
82:23:b7:94:d5:67:ee:ed:8a:e0:e5:6a:c9:99:ce:7c:75:04:
c5:57:0f:9f:1a:86:cc:c3:89:cd:f0:59:d0:be:18:63:aa:40:
c0:a8:d5:3e:c3:83:4a:20:54:cd:b9:34:15:4e:08:60:3f:80:
04:6e:21:1f:7d:06:60:f4:60:11:76:42:d7:9d:47:8d:f6:00:
3d:c1:45:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:19:36 2026 by rpki-client