Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
File: Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft (raw, json)
Hash identifier: f59PE6Etd77xJfMsIl/qpZ3brezFwo+/PiZoNXRSj9E=
Subject key identifier: AE:16:7E:45:0F:24:D0:BF:32:A2:C8:2B:1F:B1:B0:ED:CC:C2:F3:91
Authority key identifier: 42:1E:49:E1:C7:55:FD:E0:38:BD:18:75:C7:F3:97:A5:68:64:60:14
Certificate issuer: /CN=421e49e1c755fde038bd1875c7f397a568646014
Certificate serial: 019FADBF84D7EDEE49AECAF0C6CC880A2B8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
Manifest number: 0BE8
Signing time: Wed 29 Jul 2026 12:00:37 +0000
Manifest this update: Wed 29 Jul 2026 12:00:37 +0000
Manifest next update: Thu 30 Jul 2026 12:00:37 +0000
Files and hashes: 1: Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl (hash: El2snviEdDRrv6ny1oePevw6FKzB0M+pZA8nyvLunJg=)
2: tzxRcibemA94VnMAm0dv4MlqbUA.roa (hash: VBIKKEa5Iy0UgSH1dlBF7tfkGRCcGJgtuhRAaqjOCP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:bf:84:d7:ed:ee:49:ae:ca:f0:c6:cc:88:0a:2b:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421e49e1c755fde038bd1875c7f397a568646014
Validity
Not Before: Jul 29 12:00:37 2026 GMT
Not After : Jul 30 12:00:37 2026 GMT
Subject: CN=ae167e450f24d0bf32a2c82b1fb1b0edccc2f391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:21:ee:3a:d0:5d:05:59:67:29:90:d9:08:af:
2d:87:4d:f2:a3:69:12:0c:92:13:28:17:f2:59:7c:
da:b4:80:d0:5d:f3:b3:2f:9f:60:8f:4b:62:69:e1:
f0:64:fd:25:7d:90:b3:c9:3f:58:d1:89:2b:00:de:
59:f6:22:b3:bd:a6:8c:65:8f:55:58:af:9d:c8:de:
7f:58:44:0b:a8:51:dd:59:05:26:3a:1f:be:6d:96:
85:14:3f:79:2c:14:38:dc:d7:fc:af:ae:77:ad:31:
a2:a1:e0:cb:8c:77:c3:96:a4:dd:d6:cb:16:27:3d:
3a:cc:d1:1e:f5:4f:5c:bc:ea:1d:b6:1c:e0:b0:19:
b5:0a:1b:b9:78:9c:d6:ab:35:39:ea:78:67:a9:9f:
b3:94:28:19:5e:fc:6f:07:ef:5f:cd:fe:44:69:0f:
5f:dd:24:82:64:3d:b3:ae:f0:e0:19:87:cf:58:f6:
33:c6:ca:6e:48:56:6c:6a:02:2a:0e:85:09:68:e5:
60:1e:b5:6e:f7:26:99:41:8c:10:f8:c3:c0:cb:6a:
57:98:63:68:f0:c4:fe:79:fb:52:a1:2b:9f:6b:d5:
5a:49:3e:ea:ac:a5:73:7f:cf:a4:a4:f7:77:eb:93:
09:96:f4:d0:59:af:dd:de:81:c3:f0:11:2c:06:27:
46:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:16:7E:45:0F:24:D0:BF:32:A2:C8:2B:1F:B1:B0:ED:CC:C2:F3:91
X509v3 Authority Key Identifier:
keyid:42:1E:49:E1:C7:55:FD:E0:38:BD:18:75:C7:F3:97:A5:68:64:60:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:31:06:19:da:45:48:e7:1f:f3:11:b5:1a:18:93:54:1d:f2:
2f:02:7b:07:83:b5:98:8e:22:69:0b:70:da:64:69:f9:99:d5:
e3:b7:e4:9f:41:39:47:ca:bf:bd:bf:90:86:d0:a1:54:0f:88:
07:8b:54:31:b1:42:d7:3c:0e:4a:cb:70:e3:02:b7:65:8e:ed:
9e:19:a7:09:bb:64:5c:4a:a8:16:7e:6b:c0:4f:ea:dc:b4:24:
36:31:8e:f9:ad:79:e4:ea:9b:17:a5:b5:2c:5b:9b:54:88:8f:
76:46:27:32:27:9d:90:01:32:cb:9a:15:60:a5:dd:9e:c4:59:
60:00:a5:cc:e7:ab:06:2c:89:74:dc:93:bb:f7:1c:92:0d:5c:
20:25:b7:27:c9:cc:ff:06:0d:29:25:5c:9f:4a:98:a8:ad:ad:
7e:72:b8:44:8b:b1:bc:92:1d:bd:d7:6f:33:e0:e3:25:7a:71:
ca:e8:b2:e2:43:b9:23:74:81:df:cf:c2:94:b3:7b:6b:bb:bb:
69:5f:c7:fa:1e:81:d1:42:37:f0:6b:20:37:ab:c9:5d:1a:f6:
c5:c6:6a:99:12:6f:77:99:b5:0a:4e:6a:12:b4:98:0e:f0:89:
08:d2:54:bd:44:5e:24:dd:89:49:e6:4d:03:e6:7c:70:84:08:
de:d7:0f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 19:38:18 2026 by rpki-client