
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/039057-f1ca-46e4-8237-a764ada8b95e/1/qHvIMvQSt59zAWbsV-s2waNbBok.mft
File: qHvIMvQSt59zAWbsV-s2waNbBok.mft (raw, json)
Hash identifier: arzDTea3R2J/4dXc/Rh6B6vtwo+al48ljPJFfzJygzE=
Subject key identifier: F4:3D:AC:3C:B9:D6:DC:7E:D2:06:85:43:B6:13:C8:F2:74:33:F1:B9
Authority key identifier: A8:7B:C8:32:F4:12:B7:9F:73:01:66:EC:57:EB:36:C1:A3:5B:06:89
Certificate issuer: /CN=a87bc832f412b79f730166ec57eb36c1a35b0689
Certificate serial: 019FAA879884081593A0AA9E00A59B1A70BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHvIMvQSt59zAWbsV-s2waNbBok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/039057-f1ca-46e4-8237-a764ada8b95e/1/qHvIMvQSt59zAWbsV-s2waNbBok.mft
Manifest number: 88
Signing time: Tue 28 Jul 2026 21:00:40 +0000
Manifest this update: Tue 28 Jul 2026 21:00:40 +0000
Manifest next update: Wed 29 Jul 2026 21:00:40 +0000
Files and hashes: 1: 3TZvjEfkPGnfb-tMF5tui2UzMj0.roa (hash: QOEhgl7wja/sJ10iRCnuW/2g1XbkedQKiYSWjxKqvZE=)
2: qHvIMvQSt59zAWbsV-s2waNbBok.crl (hash: 42LiB81vr/w/pU4gHAyAGA5qmhaMyGWIBtlNbXO8pdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/039057-f1ca-46e4-8237-a764ada8b95e/1/qHvIMvQSt59zAWbsV-s2waNbBok.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/039057-f1ca-46e4-8237-a764ada8b95e/1/qHvIMvQSt59zAWbsV-s2waNbBok.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHvIMvQSt59zAWbsV-s2waNbBok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:98:84:08:15:93:a0:aa:9e:00:a5:9b:1a:70:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87bc832f412b79f730166ec57eb36c1a35b0689
Validity
Not Before: Jul 28 21:00:40 2026 GMT
Not After : Jul 29 21:00:40 2026 GMT
Subject: CN=f43dac3cb9d6dc7ed2068543b613c8f27433f1b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:95:df:d5:89:5a:0d:d5:04:82:f2:fc:b1:2b:
28:89:20:d0:c1:c1:22:45:47:69:b4:c5:19:d9:9d:
17:4f:8e:9a:28:9f:df:78:f7:87:c3:f2:c9:79:f8:
89:3e:76:d6:da:8d:1b:9e:09:98:48:e5:01:ae:35:
d3:8d:bc:9b:58:30:54:09:ea:d3:67:94:ce:1a:86:
8c:ce:4f:cd:19:28:dd:a3:89:58:8e:59:a5:f1:38:
8e:e9:40:1b:44:2b:31:b6:b5:e1:8e:22:3b:f6:db:
ac:18:de:c8:1a:17:fc:8c:d2:11:a4:e5:8a:db:43:
0a:95:1e:20:de:0e:85:50:77:2d:f7:3c:c1:f8:9e:
01:96:0a:3e:b5:34:b5:25:bb:79:73:32:78:45:a4:
03:e8:0f:41:90:41:10:0b:b0:de:1b:64:f2:f4:9f:
ac:82:a8:ce:47:be:82:3e:27:79:69:df:92:1b:e8:
63:47:aa:30:03:d8:1a:54:a3:bb:c2:0b:aa:f3:cb:
74:6c:ff:ac:b6:62:8f:a8:38:76:b9:f7:a5:20:5d:
1f:e8:98:58:ef:44:f4:24:2a:c1:62:80:00:89:76:
d9:37:52:9b:e5:e8:c4:f1:21:83:07:f1:00:a8:f2:
18:5b:4b:86:1d:ce:68:2c:e8:d4:15:0b:ad:3c:9b:
35:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3D:AC:3C:B9:D6:DC:7E:D2:06:85:43:B6:13:C8:F2:74:33:F1:B9
X509v3 Authority Key Identifier:
keyid:A8:7B:C8:32:F4:12:B7:9F:73:01:66:EC:57:EB:36:C1:A3:5B:06:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHvIMvQSt59zAWbsV-s2waNbBok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/039057-f1ca-46e4-8237-a764ada8b95e/1/qHvIMvQSt59zAWbsV-s2waNbBok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/039057-f1ca-46e4-8237-a764ada8b95e/1/qHvIMvQSt59zAWbsV-s2waNbBok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:cc:14:a7:14:41:d8:1c:d5:fb:2b:89:1d:9a:7e:90:74:95:
34:44:48:8b:ab:f1:4a:8c:20:c0:0d:b5:20:e6:4e:ae:5f:e2:
a1:1b:e2:f9:51:10:9b:ff:d9:bd:4d:ce:2d:7a:60:ca:da:b2:
17:bc:f7:5f:9f:0d:ce:22:03:a9:f5:c2:bb:03:96:8d:58:12:
33:a0:7f:4a:e8:93:56:ef:89:a3:48:6e:2c:47:a9:fd:7a:f5:
a7:99:7e:08:6b:0e:c5:a9:ae:dd:02:11:5f:69:94:73:dc:c4:
e5:a7:e4:5f:53:0d:3f:a1:b4:22:f3:0d:47:74:27:44:e0:66:
e3:d3:1a:23:2c:8b:e0:ce:e2:7c:64:04:f5:7e:b6:b6:22:70:
9c:40:18:81:29:2c:3f:42:c8:b6:96:44:61:0a:d0:5f:a7:c8:
1c:75:66:f4:16:02:2a:92:33:ab:61:ce:fc:76:40:52:1c:94:
b2:ac:34:dc:09:ec:ff:99:b7:42:47:6d:06:32:7a:27:4a:d3:
99:21:c4:47:48:2f:0b:8f:69:e4:57:8a:7b:a2:01:e9:8a:a7:
d6:60:40:6e:e5:9c:b6:b0:8c:5f:28:2b:2d:aa:30:e0:ec:83:
31:ef:79:43:d7:7a:21:16:46:e8:22:85:7a:c2:a6:69:09:d7:
8b:d4:82:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:53:17 2026 by rpki-client