Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/baf879-67c0-4785-b870-ae3b9e34d27f/1/qI2nDOKKiJJzJtuLYipmwp-sUjw.mft
File: qI2nDOKKiJJzJtuLYipmwp-sUjw.mft (raw, json)
Hash identifier: 0K6bVwOh8470Y2IVG1fi/VttbVwJsn6ogbKAl5+lzA0=
Subject key identifier: 64:DE:15:47:D8:8F:7E:80:64:12:CA:D0:84:B9:9B:6A:D0:6C:73:F9
Authority key identifier: A8:8D:A7:0C:E2:8A:88:92:73:26:DB:8B:62:2A:66:C2:9F:AC:52:3C
Certificate issuer: /CN=a88da70ce28a88927326db8b622a66c29fac523c
Certificate serial: 019FAA19CB6C758D8AE865C35B27F38E7F27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qI2nDOKKiJJzJtuLYipmwp-sUjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/baf879-67c0-4785-b870-ae3b9e34d27f/1/qI2nDOKKiJJzJtuLYipmwp-sUjw.mft
Manifest number: CE
Signing time: Tue 28 Jul 2026 19:00:44 +0000
Manifest this update: Tue 28 Jul 2026 19:00:44 +0000
Manifest next update: Wed 29 Jul 2026 19:00:44 +0000
Files and hashes: 1: Agdkr7pow-AzSTl7UhxIjtbuif8.roa (hash: XwEU2q/BPbK/EoWe/rSsRkIbMCNqHp48BI3sTIZFcTs=)
2: qI2nDOKKiJJzJtuLYipmwp-sUjw.crl (hash: 2bK+zLLHUl/dGzbdjtdFEXEsgASFJ1lnqFjpVifFJmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/baf879-67c0-4785-b870-ae3b9e34d27f/1/qI2nDOKKiJJzJtuLYipmwp-sUjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/baf879-67c0-4785-b870-ae3b9e34d27f/1/qI2nDOKKiJJzJtuLYipmwp-sUjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qI2nDOKKiJJzJtuLYipmwp-sUjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:cb:6c:75:8d:8a:e8:65:c3:5b:27:f3:8e:7f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a88da70ce28a88927326db8b622a66c29fac523c
Validity
Not Before: Jul 28 19:00:44 2026 GMT
Not After : Jul 29 19:00:44 2026 GMT
Subject: CN=64de1547d88f7e806412cad084b99b6ad06c73f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ce:5b:4d:1d:3d:68:69:a4:c3:2f:55:df:9a:
6d:5f:28:11:70:ea:45:c7:8f:8b:0a:54:2d:ee:e0:
cf:e9:20:4d:d0:60:5d:bc:00:c6:bc:cc:96:2a:3c:
54:5c:88:0c:49:0e:80:d2:a9:1b:4e:36:dc:ca:69:
7a:19:e5:7e:bd:b6:f5:e8:51:cd:d6:02:e3:05:ec:
d3:bb:fd:ce:ed:e2:d9:d1:fd:d2:b7:2f:fe:53:0b:
5b:a9:9e:e1:f4:fd:23:3d:f1:6f:ef:31:25:d9:3c:
85:18:ef:98:84:4d:c5:77:1f:4c:54:5b:ba:bb:30:
7f:0c:3b:d7:59:25:e9:02:70:04:19:2b:6d:f2:78:
ad:8b:fb:b1:c9:4c:0b:c1:97:63:65:7c:0d:d8:c2:
de:95:d6:fc:49:67:74:0c:5d:a9:da:b4:11:44:02:
6a:61:a8:73:2f:ee:b5:44:49:ef:73:c7:9d:f7:b7:
0b:a5:d1:e7:f5:d8:61:41:e6:c8:96:4e:45:63:44:
b1:d3:b1:9c:0b:d2:a6:6d:92:a4:35:1b:47:32:07:
97:40:ed:07:37:a9:0f:42:9d:80:e6:f3:1c:40:96:
91:16:2c:67:65:2b:d0:ff:d0:14:37:d0:2a:1b:c4:
fa:67:b9:fa:18:32:e9:85:0c:a3:ba:26:c9:83:80:
b2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:DE:15:47:D8:8F:7E:80:64:12:CA:D0:84:B9:9B:6A:D0:6C:73:F9
X509v3 Authority Key Identifier:
keyid:A8:8D:A7:0C:E2:8A:88:92:73:26:DB:8B:62:2A:66:C2:9F:AC:52:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qI2nDOKKiJJzJtuLYipmwp-sUjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf879-67c0-4785-b870-ae3b9e34d27f/1/qI2nDOKKiJJzJtuLYipmwp-sUjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf879-67c0-4785-b870-ae3b9e34d27f/1/qI2nDOKKiJJzJtuLYipmwp-sUjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:57:9c:19:6c:3e:2b:80:18:8d:fa:7b:37:03:b7:0b:dc:cc:
ab:07:d7:38:6b:f5:ec:00:0b:9e:5f:3d:24:ee:17:ff:14:8d:
e8:ab:9d:9a:e9:f2:1e:44:99:d4:37:c5:69:bd:7f:fc:20:20:
c6:2c:f7:bb:15:13:80:e4:ad:e6:ba:b2:a9:0d:f4:28:27:9f:
4e:28:87:2c:30:07:87:d1:76:a7:97:fb:26:88:7d:ae:3c:e2:
54:77:bb:bc:80:fb:4b:4e:ac:91:ae:1c:2f:3a:22:8f:bf:5a:
7e:57:5e:52:16:49:13:0e:51:01:1f:3a:6e:fc:3a:65:e3:1a:
a9:ec:a3:c3:eb:8f:b8:01:de:26:09:57:7b:cb:bb:e5:b0:bb:
1f:11:24:75:45:cd:33:9d:98:a1:16:47:85:81:20:4c:65:42:
94:68:d3:6b:6a:12:47:78:58:0a:23:2b:6b:ff:e7:d1:cf:a3:
8e:06:a4:4c:35:e3:3c:83:e1:66:6f:8b:cb:38:6a:69:44:5d:
3e:e3:45:51:1c:c2:2a:f6:d3:59:2b:9a:08:84:51:00:92:ed:
94:f8:a2:8d:ea:47:82:14:bb:c8:b9:5f:b3:13:f2:ae:e4:87:
47:5b:e6:eb:bb:c3:73:f7:a7:cb:68:da:e0:a9:6c:84:64:49:
7d:42:6e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:36:14 2026 by rpki-client