Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
File: qx0OfoGLr5p6-5hmEkKSphqvuMo.mft (raw, json)
Hash identifier: 43u0XO3vim9+0c4xmMKC6PW+39KoW/I7lSNh5P9lo+8=
Subject key identifier: F1:37:32:3F:9A:5C:78:5D:5F:AE:13:F1:5A:B7:F5:44:49:6F:72:28
Authority key identifier: AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
Certificate issuer: /CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Certificate serial: 019EC0A3F2F3035B9A0A376E71FEDF39AF3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
Manifest number: 1963
Signing time: Sat 13 Jun 2026 11:00:30 +0000
Manifest this update: Sat 13 Jun 2026 11:00:30 +0000
Manifest next update: Sun 14 Jun 2026 11:00:30 +0000
Files and hashes: 1: E_pvlXfH-_8Fl9xtt4-r8I-I2Wk.roa (hash: CAT6hhcy6gNQOJHA0DTluxIpTJS1s6DqnJJcDnZ2tTQ=)
2: HrIDUx_18W3aDcgzp0a-tZsGpP8.roa (hash: cPyVftTbNGSIIN5cX0+FBbwXCXBqNj2p4PsBxHd4Gn0=)
3: qx0OfoGLr5p6-5hmEkKSphqvuMo.crl (hash: eDGKehj8yOW7xpxPhCOG2ySOUbSc7DhSRwWyjwiU6QY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a3:f2:f3:03:5b:9a:0a:37:6e:71:fe:df:39:af:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Validity
Not Before: Jun 13 11:00:30 2026 GMT
Not After : Jun 14 11:00:30 2026 GMT
Subject: CN=f137323f9a5c785d5fae13f15ab7f544496f7228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:72:b2:6a:59:cb:66:f4:38:25:25:21:ce:91:
ab:d1:aa:03:de:a9:17:be:04:e6:ec:81:25:ac:ae:
14:59:c3:fb:0c:4c:03:65:29:0b:fb:db:76:2f:c4:
fc:44:bc:5c:42:b4:7f:a3:2b:35:3f:fe:07:15:0d:
db:9b:25:5b:8b:b2:0c:7d:c6:e3:e7:bc:77:36:99:
5c:92:e4:c9:b4:8a:c9:51:ba:93:5a:76:37:87:22:
18:9e:fc:1e:67:27:92:c6:ce:d5:a9:b8:09:1b:c3:
e1:14:75:16:12:19:20:40:c8:a4:43:07:26:41:78:
b2:2c:d4:57:3a:2f:17:7b:f0:85:9d:8c:ed:64:ea:
f4:f8:e3:4e:70:9a:fb:c5:2b:9f:d3:18:4b:66:f9:
21:79:1e:8b:c2:c5:f4:d2:6f:88:c1:16:eb:96:31:
1f:1e:8e:13:eb:fd:67:8d:03:81:a6:69:60:5e:20:
01:20:19:39:0a:9c:ad:aa:9d:16:f2:46:0a:30:23:
f7:f1:f7:bb:0b:5f:9e:ee:2f:2a:23:a6:28:c9:0b:
3b:dd:2d:e7:2f:82:15:70:b5:22:41:49:84:21:f2:
60:e8:7f:16:53:65:e8:be:05:51:4b:a3:fb:a0:eb:
07:9b:d8:da:74:37:26:6a:74:c5:57:24:68:3c:f2:
f6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:37:32:3F:9A:5C:78:5D:5F:AE:13:F1:5A:B7:F5:44:49:6F:72:28
X509v3 Authority Key Identifier:
keyid:AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ab:88:01:cf:46:76:7a:e8:56:be:55:2e:07:1d:13:09:c8:
33:6c:0e:59:12:90:53:c2:94:d2:1a:d4:bf:76:f5:a5:d8:3b:
33:af:9f:e6:05:b4:e1:24:f6:46:7e:87:0e:e7:4f:a1:a4:50:
75:ff:9d:dd:c8:90:a2:5b:ee:2c:25:e2:61:6e:14:01:bf:a3:
0d:b4:02:eb:77:a5:11:35:e4:14:99:8a:9d:43:e5:dc:35:aa:
ac:a9:23:bb:87:c0:21:cb:eb:87:9f:95:f2:6b:4a:b9:d5:86:
b3:20:20:b4:bf:8d:5a:2a:13:0b:5b:ea:86:48:c3:dd:66:bd:
bd:68:80:0d:9b:7c:e3:b9:15:00:08:98:87:3d:ee:99:67:df:
cd:c0:46:d4:c0:d5:31:a0:56:5b:34:e9:31:f7:cf:f5:6a:09:
d3:6f:68:c3:37:65:c8:80:a2:d8:f7:99:a9:86:b9:af:e4:0e:
32:c3:ea:8c:bb:de:78:b1:e7:c4:21:32:03:b7:dd:38:48:25:
34:6f:11:cb:a2:62:33:76:67:5d:63:e4:6e:e6:75:45:59:c9:
5a:9f:14:87:f0:59:d3:a8:32:50:91:0e:4c:50:0a:b2:75:20:
ec:f7:e7:19:2f:5d:d0:75:aa:c1:15:d7:a5:62:fa:2c:e7:11:
2e:70:e0:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Ao/LzA1uaCjducf7fOa8/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMWQwZTdlODE4YmFmOWE3YWZiOTg2NjEyNDI5MmE2MWFh
ZmI4Y2EwHhcNMjYwNjEzMTEwMDMwWhcNMjYwNjE0MTEwMDMwWjAzMTEwLwYDVQQD
EyhmMTM3MzIzZjlhNWM3ODVkNWZhZTEzZjE1YWI3ZjU0NDQ5NmY3MjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznKyalnLZvQ4JSUhzpGr0aoD3qkX
vgTm7IElrK4UWcP7DEwDZSkL+9t2L8T8RLxcQrR/oys1P/4HFQ3bmyVbi7IMfcbj
57x3NplckuTJtIrJUbqTWnY3hyIYnvweZyeSxs7VqbgJG8PhFHUWEhkgQMikQwcm
QXiyLNRXOi8Xe/CFnYztZOr0+ONOcJr7xSuf0xhLZvkheR6LwsX00m+IwRbrljEf
Ho4T6/1njQOBpmlgXiABIBk5Cpytqp0W8kYKMCP38fe7C1+e7i8qI6YoyQs73S3n
L4IVcLUiQUmEIfJg6H8WU2XovgVRS6P7oOsHm9jadDcmanTFVyRoPPL25wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPE3Mj+aXHhdX64T8Vq39URJb3IoMB8GA1UdIwQY
MBaAFKsdDn6Bi6+aevuYZhJCkqYar7jKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXgwT2ZvR0xyNXA2LTVobUVrS1NwaHF2dU1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8xMjRjMzUtOTUyMy00M2I3LWI3ZWIt
ZWE1OTI2NGY5MDgzLzEvcXgwT2ZvR0xyNXA2LTVobUVrS1NwaHF2dU1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8xMjRjMzUtOTUyMy00M2I3LWI3ZWItZWE1OTI2NGY5MDgz
LzEvcXgwT2ZvR0xyNXA2LTVobUVrS1NwaHF2dU1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQauIAc9G
dnroVr5VLgcdEwnIM2wOWRKQU8KU0hrUv3b1pdg7M6+f5gW04ST2Rn6HDudPoaRQ
df+d3ciQolvuLCXiYW4UAb+jDbQC63elETXkFJmKnUPl3DWqrKkju4fAIcvrh5+V
8mtKudWGsyAgtL+NWioTC1vqhkjD3Wa9vWiADZt847kVAAiYhz3umWffzcBG1MDV
MaBWWzTpMffP9WoJ029owzdlyICi2PeZqYa5r+QOMsPqjLveeLHnxCEyA7fdOEgl
NG8Ry6JiM3ZnXWPkbuZ1RVnJWp8Uh/BZ06gyUJEOTFAKsnUg7PfnGS9d0HWqwRXX
pWL6LOcRLnDgyg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:24:19 2026 by rpki-client