Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
File: qDOwgB1A0FhJBy4vyBITsCXSorw.mft (raw, json)
Hash identifier: zTbclXva0Ov9xO+lqW/MXlaxKPYYWJWWfy6hY3CFMWI=
Subject key identifier: BB:CA:C3:54:0E:D7:B3:A2:49:49:E3:B3:16:48:DD:34:E9:44:A1:F9
Authority key identifier: A8:33:B0:80:1D:40:D0:58:49:07:2E:2F:C8:12:13:B0:25:D2:A2:BC
Certificate issuer: /CN=a833b0801d40d05849072e2fc81213b025d2a2bc
Certificate serial: 019EC0DB78D78A8B7C449DA0E0D68EBCC57C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
Manifest number: 030E
Signing time: Sat 13 Jun 2026 12:01:09 +0000
Manifest this update: Sat 13 Jun 2026 12:01:09 +0000
Manifest next update: Sun 14 Jun 2026 12:01:09 +0000
Files and hashes: 1: 8dx6CDeeDv1yQZPzxZW_CCsiWuI.roa (hash: d7H5FvAS5k9Xu18WJ58VOwYw00U/ixBu9RyNPrcPus0=)
2: qDOwgB1A0FhJBy4vyBITsCXSorw.crl (hash: JEWyLdgmB29ZkZjxbuwCPnwzO26t8s46eXv890QlH5s=)
3: vZtaog6rpuNltteEkdUJlHMVrcw.roa (hash: 7RtaWZDq5AUONnDyPCbjKsuXwOlICNTJNhflkjZkwLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:78:d7:8a:8b:7c:44:9d:a0:e0:d6:8e:bc:c5:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a833b0801d40d05849072e2fc81213b025d2a2bc
Validity
Not Before: Jun 13 12:01:09 2026 GMT
Not After : Jun 14 12:01:09 2026 GMT
Subject: CN=bbcac3540ed7b3a24949e3b31648dd34e944a1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8d:75:4c:85:79:71:50:3f:4e:4d:0a:00:dd:
20:22:a9:7c:be:34:0c:24:bc:8f:78:45:01:71:5a:
96:d4:34:08:da:c0:ef:3a:ba:44:3a:e6:a5:67:fb:
10:15:86:ea:2c:65:a0:74:92:15:80:10:4e:30:2d:
85:20:8b:75:30:fd:d7:13:12:c9:89:3d:41:b8:96:
01:20:a8:8e:a9:00:c9:2c:4a:66:59:fc:fd:4e:8e:
0d:7c:51:82:21:c4:e2:94:78:c9:e4:f1:46:9b:b1:
68:d3:fe:70:b9:e6:01:a7:37:66:40:83:5e:47:d5:
b5:16:67:4b:08:7a:fb:c4:a4:a9:29:9e:ca:6e:24:
ab:43:29:48:e5:8f:81:ef:3e:eb:5e:bd:cb:b2:0e:
f0:b6:a9:ba:72:32:93:33:f5:f6:31:b8:5c:04:d8:
17:06:5a:48:6a:86:e7:2f:72:8e:1e:67:2a:d4:e8:
ca:ee:3f:8e:96:50:3b:d6:7a:9d:be:f6:ce:65:a1:
2f:d0:cc:93:30:03:2a:1d:50:66:66:4e:2a:11:a6:
d2:d7:79:e6:0d:11:84:65:47:2e:4c:29:a8:79:89:
46:cf:56:e7:25:22:0e:b3:33:35:58:ab:be:01:cd:
ce:c7:71:f4:1e:04:54:a2:d4:0d:48:e3:08:70:23:
57:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CA:C3:54:0E:D7:B3:A2:49:49:E3:B3:16:48:DD:34:E9:44:A1:F9
X509v3 Authority Key Identifier:
keyid:A8:33:B0:80:1D:40:D0:58:49:07:2E:2F:C8:12:13:B0:25:D2:A2:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:4f:ad:80:9e:26:00:ef:a3:8c:22:30:cd:5c:f5:cf:1a:7f:
fc:ef:d0:1a:fc:fa:37:e6:69:cf:a3:f2:9a:8f:51:ca:35:5d:
28:29:b2:27:e6:7c:50:fb:34:93:ed:b5:69:76:fa:07:11:23:
8d:cb:9d:18:31:a0:0c:32:90:7b:af:58:43:29:92:43:cb:25:
73:d1:09:c4:2e:72:41:5c:07:5c:1d:d7:88:de:dc:0c:9d:a3:
96:b4:b3:36:31:50:57:c7:5b:90:61:be:45:3a:a2:3d:4e:69:
83:32:51:d5:27:ab:41:29:be:01:59:06:13:88:05:fe:90:4b:
b9:b2:ba:6d:22:89:17:1d:55:5b:45:f4:b6:d2:a6:28:cd:73:
76:2f:72:c6:bf:61:3e:1a:22:ea:d9:af:28:00:83:4f:5c:67:
66:22:b1:5d:18:7c:fd:c4:46:56:c3:05:88:03:98:40:89:fa:
0a:22:f9:37:94:7b:57:96:83:a7:4c:98:77:4e:4f:ad:73:d5:
63:94:74:7d:8a:82:42:1e:16:12:ee:f6:e9:68:c6:df:62:48:
df:6b:f1:ab:d4:f7:1c:81:af:77:15:7a:b0:f8:63:35:e7:37:
2f:3a:56:4a:d1:48:98:c5:1b:bf:f5:ec:1a:cf:3c:68:b5:bc:
68:76:5b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:47:44 2026 by rpki-client