Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
File: q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft (raw, json)
Hash identifier: LKmhZUzMldz4GoKRjkkyw2nTlQ0kMnPTs2sYO2i/cFs=
Subject key identifier: 29:A2:12:90:23:26:BB:C2:64:A1:F5:88:CD:F1:39:91:F5:68:0D:7A
Authority key identifier: AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
Certificate issuer: /CN=abbad3de831da94222c1add104caf4c3247689ac
Certificate serial: 019FAA879309B6818AF564A81075962C3208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
Manifest number: 1A18
Signing time: Tue 28 Jul 2026 21:00:39 +0000
Manifest this update: Tue 28 Jul 2026 21:00:39 +0000
Manifest next update: Wed 29 Jul 2026 21:00:39 +0000
Files and hashes: 1: 7QXSQMVR5e3PA33Tbe1jUFBiBtU.roa (hash: Fu/x5ydAHbzxjRuQ9kPsYtD1frLQkvc1el/MBrSoppE=)
2: D_nN_vPhKORNTjWjIas_aeL_fw4.roa (hash: 2kCeAo6j8PDX4i6BTYf7QZybuVQ19wHuoI+CXgfbp/g=)
3: NIWJ9b544URGWTLtmkZjvf2kxIA.roa (hash: DSfziWB0uqzODbT1D3jvb0WNAfepSpfXbax16O29J9U=)
4: e7dlLb1mQuulDFLIJIubZnzn92Y.roa (hash: pjhxvegNUc0jD9hr5mE16h6OsbQxuTM2Z8MfFLGcvIk=)
5: q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl (hash: RWeVpckyF1AC9xfQnlIbFvTsmhYr+k0FLT8AFOg38Q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:93:09:b6:81:8a:f5:64:a8:10:75:96:2c:32:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbad3de831da94222c1add104caf4c3247689ac
Validity
Not Before: Jul 28 21:00:39 2026 GMT
Not After : Jul 29 21:00:39 2026 GMT
Subject: CN=29a212902326bbc264a1f588cdf13991f5680d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:21:c9:f5:2c:9e:05:10:a4:03:35:ac:5d:0f:
b9:1a:c7:ce:10:2d:de:83:a3:1f:e3:d5:bc:f7:b1:
51:22:7f:00:61:0f:e1:aa:c2:bb:22:07:d0:d7:7b:
14:24:e1:4b:22:93:5f:e8:86:1c:f0:08:7f:fb:28:
69:9e:31:19:22:da:02:1c:24:52:5b:e8:8f:2d:8f:
e8:8d:06:fa:97:09:1a:88:e2:43:6b:81:1e:c5:3d:
10:06:6d:91:a6:07:b4:6a:42:81:b7:92:8c:82:45:
88:f2:7e:9d:44:8e:c7:88:7a:50:fe:93:7e:21:9d:
52:97:41:9b:bd:e2:67:64:9a:de:ec:cd:9f:bf:8c:
14:f1:2b:59:0d:76:20:e0:c5:4c:19:bd:c1:2e:2b:
22:6c:e5:9d:2b:40:d0:f0:38:29:ff:14:db:c1:d5:
5b:30:7b:59:46:9e:5f:1f:fd:89:58:bf:a0:18:f0:
d5:cf:bf:9e:58:9e:a5:3e:29:06:f1:fc:96:23:d2:
24:f4:73:66:3e:65:89:19:10:7d:e2:7a:36:93:7c:
2a:68:99:7f:e2:35:52:78:3b:b9:bb:bf:73:e5:1b:
fd:71:5e:40:71:cd:ac:f7:21:c8:99:45:06:63:70:
91:26:c0:a1:5b:7c:84:89:84:fc:bb:f1:1f:af:6b:
71:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A2:12:90:23:26:BB:C2:64:A1:F5:88:CD:F1:39:91:F5:68:0D:7A
X509v3 Authority Key Identifier:
keyid:AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c0:e0:36:df:5f:a3:c5:8b:90:2a:f3:95:65:ab:07:4b:d4:
ae:32:51:17:79:d3:53:74:e1:bc:4d:1e:d0:ec:3b:dd:79:cf:
13:a9:00:8f:a3:de:4d:d2:26:af:bc:3d:c4:5c:f4:65:04:fc:
86:f9:82:1e:3f:09:b4:9a:29:18:2f:6a:c1:9b:3e:14:82:5f:
84:93:a9:f6:c7:42:d8:87:fa:96:1b:27:0f:96:62:0b:54:9a:
88:f5:68:3b:1d:28:d7:00:3b:45:cb:37:7d:db:af:06:d4:25:
24:45:59:da:d7:e5:93:fc:ae:9d:c5:a2:d3:7f:42:54:17:80:
ca:79:25:d2:cb:c0:fb:54:1a:73:7d:34:fd:45:73:33:31:8f:
d2:69:a8:d4:2e:c8:df:0e:21:8e:b2:90:e3:d1:cf:92:06:89:
86:40:30:fd:95:e2:e2:81:f6:82:0d:b9:6b:64:92:81:59:70:
e8:54:65:a3:e3:70:0a:72:0d:90:5c:2f:21:c8:16:13:7f:6e:
58:c7:22:96:e0:05:84:bb:16:4c:e1:1f:ee:6e:a5:5d:fa:4e:
20:8e:78:98:34:9e:56:02:0f:d1:da:ba:79:7d:41:b6:e9:25:
b7:6e:47:de:76:fc:62:69:05:4d:80:4f:18:41:84:ae:b6:79:
3c:64:db:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:53:19 2026 by rpki-client