Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
File: q838GnxSDPjRdykgjoXosZfErf8.mft (raw, json)
Hash identifier: hYlsdMofAZnWWsuLP8ov/0MzoPN1HMiHJRZPLm3Yy20=
Subject key identifier: F5:58:FE:4B:0F:89:E8:22:8A:19:88:BC:D3:A2:66:FE:83:A7:71:78
Authority key identifier: AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
Certificate issuer: /CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Certificate serial: 019FAA504FDB092431BE8F7E9F757EF66A5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
Manifest number: 1006
Signing time: Tue 28 Jul 2026 20:00:17 +0000
Manifest this update: Tue 28 Jul 2026 20:00:17 +0000
Manifest next update: Wed 29 Jul 2026 20:00:17 +0000
Files and hashes: 1: Oyzshlci-9jPVV78Pg3C9EqgWpQ.roa (hash: bjeZr+jgrrjOajuuWHyD7Sxiyz43CZIWH0Yks80/PvM=)
2: ZGp0FDP8qvB8cgr-1S3_xdm1jys.roa (hash: 9rCAt6z+0Tts+8L8PuhpJuck/ju+E8/tnJZUEMT7+6Y=)
3: q838GnxSDPjRdykgjoXosZfErf8.crl (hash: HS+QvLSaxuxLCnFjOk/LmQoLr8KRgFvQHr48WPtDKIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:4f:db:09:24:31:be:8f:7e:9f:75:7e:f6:6a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Validity
Not Before: Jul 28 20:00:17 2026 GMT
Not After : Jul 29 20:00:17 2026 GMT
Subject: CN=f558fe4b0f89e8228a1988bcd3a266fe83a77178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f6:99:a2:8e:c5:d6:ae:cc:ad:75:db:c3:cb:
b2:06:b0:22:be:a5:d8:9b:89:db:9b:8e:59:dc:b4:
ea:97:c8:8d:7e:1b:79:a9:d2:47:16:48:7e:96:af:
f3:26:07:5d:cf:f6:73:b6:e9:ef:fa:de:47:b0:ee:
2a:36:d0:04:ba:d2:2c:34:12:78:16:79:e5:4e:33:
d7:e5:76:a3:dc:3d:e9:ef:b7:dd:b2:00:0c:46:c6:
2a:b2:be:97:cd:8b:2d:59:40:1a:67:17:bf:da:58:
82:30:2b:f1:5f:66:6d:07:fc:2f:e9:99:1c:c8:28:
6c:70:bf:ca:61:27:65:36:82:41:c9:ea:73:7e:bc:
89:26:98:f5:7b:87:c0:05:79:15:91:04:12:ba:b6:
2e:8c:14:ce:1c:cb:db:59:f4:6a:0c:2c:83:c0:3a:
f2:03:3c:b2:04:1c:ad:33:e1:fd:50:b9:58:81:ba:
05:ce:8f:af:05:06:ae:3e:27:16:e3:5c:d6:94:1e:
09:ee:53:24:7a:44:cb:80:89:1d:a1:fe:3e:02:b6:
22:a6:39:7d:e1:0e:0d:d6:fe:81:1b:aa:a8:91:a3:
95:52:c4:60:45:bc:83:f9:b1:c3:b0:c0:4d:59:12:
15:67:b3:ac:80:a1:b6:b0:1c:fb:3b:b9:2a:13:42:
fa:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:58:FE:4B:0F:89:E8:22:8A:19:88:BC:D3:A2:66:FE:83:A7:71:78
X509v3 Authority Key Identifier:
keyid:AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:20:1a:55:c6:be:d4:1b:90:62:5f:ab:b0:04:1d:ed:13:68:
eb:1f:e9:8d:0f:0e:bc:85:96:26:dc:8a:91:5a:58:4e:8e:b0:
16:5f:15:b6:d7:05:d6:ef:73:4d:6f:d7:5a:12:3f:79:f8:80:
3a:30:9d:df:e4:08:23:ac:5d:59:8f:c4:79:76:82:17:d9:68:
29:a5:03:e5:84:27:78:3d:17:8c:e2:1d:58:da:55:63:66:e5:
fd:f9:5d:a3:82:f7:39:31:95:d5:be:a4:e0:eb:60:24:d5:fe:
56:d8:dc:d1:84:eb:c0:8b:93:ab:de:fe:d7:32:f8:c2:c7:2b:
84:10:a2:e5:a2:0d:ad:36:bc:7a:aa:20:7a:db:ec:c2:38:c8:
37:0b:7b:d8:c2:e5:39:be:34:2c:2b:44:00:c4:2c:9b:71:83:
03:18:32:3d:93:33:64:2b:15:99:50:e9:60:fc:98:34:73:5b:
b5:fc:03:2f:a7:83:fa:1d:be:77:c2:04:80:0c:da:5b:95:3a:
e7:88:64:82:29:b4:c4:a0:45:a3:78:b1:f2:8f:35:6f:19:da:
ae:16:77:d8:8b:91:80:8e:79:19:05:d4:ec:d5:64:23:06:8d:
b9:38:d5:f6:23:b4:ae:5f:85:06:c6:8a:81:aa:24:8b:b2:9c:
05:d9:7f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:08:26 2026 by rpki-client