Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.mft
File: qp8GoFvDKfAAVRK56LgYUDtKlwI.mft (raw, json)
Hash identifier: q2438ijHwVk7e5APXwHNYdoVQZZ+iEXiw4zVKf03yqs=
Subject key identifier: 45:49:64:28:6B:D5:A9:FE:E2:69:58:93:74:E7:56:84:A9:71:50:9B
Authority key identifier: AA:9F:06:A0:5B:C3:29:F0:00:55:12:B9:E8:B8:18:50:3B:4A:97:02
Certificate issuer: /CN=aa9f06a05bc329f0005512b9e8b818503b4a9702
Certificate serial: 019FAA8796A37B8703B155ABBB5EF7062151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qp8GoFvDKfAAVRK56LgYUDtKlwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.mft
Manifest number: 01EB
Signing time: Tue 28 Jul 2026 21:00:40 +0000
Manifest this update: Tue 28 Jul 2026 21:00:40 +0000
Manifest next update: Wed 29 Jul 2026 21:00:40 +0000
Files and hashes: 1: _4VYQRquhP3n7V0ZIUcFIYF3tcc.roa (hash: E+o4HFAoGMbScOOdpRNVFuEWt1wZ9tuocl+KZhVyuoo=)
2: qp8GoFvDKfAAVRK56LgYUDtKlwI.crl (hash: KX+dm84OTEZ/cDokWJ094lUdcKv5tPpviiG46QwBjeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qp8GoFvDKfAAVRK56LgYUDtKlwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:96:a3:7b:87:03:b1:55:ab:bb:5e:f7:06:21:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9f06a05bc329f0005512b9e8b818503b4a9702
Validity
Not Before: Jul 28 21:00:40 2026 GMT
Not After : Jul 29 21:00:40 2026 GMT
Subject: CN=454964286bd5a9fee269589374e75684a971509b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b6:aa:65:4b:fc:be:ce:12:78:18:79:a6:89:
40:c8:91:ef:d1:93:a2:f7:2b:2f:d1:d7:c0:1d:4d:
0b:64:4d:f7:50:e7:21:1a:6c:92:af:12:e2:1f:87:
d8:6d:19:42:57:d8:b8:72:a6:ac:8e:9f:f1:6f:63:
50:43:42:41:41:e6:05:9a:03:f7:16:93:3f:56:8b:
29:66:61:bd:29:66:d4:c0:59:45:c5:5e:22:2a:9a:
e1:28:f2:f3:0a:f6:88:7c:b3:f3:6b:96:2b:ff:52:
ce:ce:47:09:8d:1c:ff:54:d0:53:76:39:b0:fb:2d:
aa:b9:eb:33:f3:c2:a8:3f:ee:6c:fa:de:48:1c:f1:
41:4d:97:19:ad:6a:41:ae:fe:ae:8c:56:a8:c0:05:
d7:a7:c4:83:59:95:8f:52:5f:f2:e5:42:40:dd:12:
c5:83:84:b1:cd:1b:9b:85:62:1c:f4:b7:1a:2c:21:
a5:d3:41:9a:fd:2f:67:8d:18:44:2a:eb:e1:0d:bd:
0e:6d:13:7d:ce:0b:e0:20:97:67:bf:91:a8:38:58:
9f:3d:33:42:f3:07:a0:e5:a1:ca:6e:46:e8:02:48:
61:f7:1a:36:74:d2:ec:48:03:8e:85:59:f9:0d:02:
d5:97:03:36:e7:14:c1:7a:62:90:b3:1f:64:68:ef:
3e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:49:64:28:6B:D5:A9:FE:E2:69:58:93:74:E7:56:84:A9:71:50:9B
X509v3 Authority Key Identifier:
keyid:AA:9F:06:A0:5B:C3:29:F0:00:55:12:B9:E8:B8:18:50:3B:4A:97:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qp8GoFvDKfAAVRK56LgYUDtKlwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:15:fe:93:97:a1:84:57:76:2c:d4:8e:bd:27:b5:df:7b:15:
fd:11:25:15:ba:74:c3:3b:c8:09:ad:c4:e6:b4:fb:b3:ff:b3:
7c:2c:cc:47:0a:f8:75:11:35:ca:51:12:61:83:2f:e1:6e:25:
82:8e:49:96:96:ab:25:a6:59:fa:2f:72:17:7b:5d:97:69:0d:
e3:b9:dd:a7:8f:ee:3b:61:93:85:4c:e2:8e:96:62:04:28:3d:
31:a9:3d:df:66:88:2d:89:30:4c:72:53:64:05:a6:96:bd:fd:
76:07:a6:f1:b9:7d:2a:7a:03:93:41:0c:b8:d2:3d:da:74:c9:
b8:c1:57:bc:97:dd:95:3a:dd:10:42:db:16:b6:4f:29:12:f8:
87:f0:ac:c6:6a:f9:cf:7b:3d:da:d5:d5:75:b5:eb:de:d2:e4:
63:20:16:fc:c8:cc:bb:c9:8d:94:ea:a5:2e:b5:97:ea:2f:bd:
6f:6e:fe:73:3a:20:b5:73:a5:11:5d:2a:54:71:f7:d1:6e:cb:
23:fa:7d:61:00:90:58:74:cf:04:4a:5d:ad:e7:f6:aa:33:a8:
7a:5f:0c:ae:d6:f0:f1:df:72:ea:42:a8:df:e9:5a:eb:3a:76:
9f:57:f8:2b:6d:62:14:70:76:53:5e:31:a6:58:cd:bc:4d:dc:
91:4a:57:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:11:07 2026 by rpki-client