Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
File: qx0OfoGLr5p6-5hmEkKSphqvuMo.mft (raw, json)
Hash identifier: YzYPMvaSVWr2UuL50yRVzTQyYPiBm8r+yTg12e0S3cI=
Subject key identifier: F3:72:E7:B8:2D:4E:E2:B7:1A:0F:05:28:59:5D:DB:B1:87:89:C2:D0
Authority key identifier: AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
Certificate issuer: /CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Certificate serial: 019FAA50C742F9693929164F0C87E69C43F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
Manifest number: 19DC
Signing time: Tue 28 Jul 2026 20:00:48 +0000
Manifest this update: Tue 28 Jul 2026 20:00:48 +0000
Manifest next update: Wed 29 Jul 2026 20:00:48 +0000
Files and hashes: 1: E_pvlXfH-_8Fl9xtt4-r8I-I2Wk.roa (hash: CAT6hhcy6gNQOJHA0DTluxIpTJS1s6DqnJJcDnZ2tTQ=)
2: HrIDUx_18W3aDcgzp0a-tZsGpP8.roa (hash: cPyVftTbNGSIIN5cX0+FBbwXCXBqNj2p4PsBxHd4Gn0=)
3: qx0OfoGLr5p6-5hmEkKSphqvuMo.crl (hash: OSUadekCjg2LoLFjCjJ/l5EEp1eSdjh2202p4oP7rvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:c7:42:f9:69:39:29:16:4f:0c:87:e6:9c:43:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Validity
Not Before: Jul 28 20:00:48 2026 GMT
Not After : Jul 29 20:00:48 2026 GMT
Subject: CN=f372e7b82d4ee2b71a0f0528595ddbb18789c2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:04:97:0e:af:13:05:4b:f0:92:9c:2e:23:e2:
ba:89:9b:89:8b:8d:dc:cf:08:31:c1:d9:47:fa:f4:
65:05:38:a7:aa:d8:9a:e3:ee:fa:bc:cc:fe:a9:c9:
62:53:10:e8:35:54:db:f4:cc:ed:e7:92:ca:42:8f:
8a:d4:32:d3:5e:ae:1a:9d:6d:c3:3d:72:ea:d2:8d:
42:ee:d6:12:72:e1:3b:83:e9:ec:e4:d8:ee:95:32:
d8:15:7b:4b:81:c1:b1:e7:e8:fa:a7:3a:76:9e:7b:
3c:bf:a5:52:23:93:15:9b:2e:28:c7:28:94:f6:e2:
e1:4c:45:02:71:69:29:90:42:49:76:ad:f0:ca:23:
7d:18:d4:6d:e2:e5:43:02:49:c4:b5:e9:7e:b9:29:
3c:6c:9d:e2:12:c4:5f:1a:3d:09:ba:d0:20:be:db:
1b:6c:87:d9:99:35:0f:4d:1f:93:84:07:27:cc:25:
94:2a:89:c8:83:4c:e4:65:4d:a1:32:1b:52:58:89:
8d:09:c0:bd:0a:db:77:8a:ab:e5:31:e3:ac:4d:fd:
ef:1d:2a:ee:ca:3c:e9:eb:1a:db:05:46:2a:dd:ca:
d4:e5:b3:80:a5:b6:df:02:39:cf:f3:00:8f:b1:b8:
4b:1f:44:8b:e8:3b:40:de:c6:d9:81:4f:62:70:a5:
22:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:72:E7:B8:2D:4E:E2:B7:1A:0F:05:28:59:5D:DB:B1:87:89:C2:D0
X509v3 Authority Key Identifier:
keyid:AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e9:de:cf:7a:bb:23:bb:b9:56:4f:fc:e3:ca:a1:c8:e7:09:
eb:25:e7:d1:9f:d5:d5:1a:3c:8f:f3:e7:19:57:64:0d:59:7c:
ac:10:97:ec:25:6b:76:17:ba:86:7c:64:d9:80:c1:a3:8d:d3:
58:1d:30:90:ad:db:20:ef:d2:43:82:5f:9e:1a:e8:8b:38:81:
99:89:f1:5b:4c:81:0b:f4:38:9f:d1:5d:b6:1b:50:7d:b2:39:
13:37:b6:76:2b:dd:e9:6e:9b:24:cb:2a:13:7b:b0:da:91:1f:
19:ae:ab:4a:8f:3f:05:da:5c:7a:db:d7:21:ab:22:90:f4:1e:
56:8f:68:37:f2:02:8f:b3:20:c9:c6:8a:5f:8c:74:68:81:0a:
3b:1c:23:c1:02:67:20:34:70:a9:97:75:12:a3:ee:dd:52:52:
15:9d:65:44:7f:f4:77:e8:3e:95:36:34:76:5d:d6:d4:a0:07:
a1:49:b7:4b:8c:b5:48:22:fc:61:73:77:3e:f2:98:c7:b5:90:
e9:e1:ef:40:9c:a1:d2:6a:c9:3c:5a:c8:cc:c5:e1:36:a1:f9:
3e:1a:24:74:f1:4b:2d:e4:06:d8:06:88:58:5b:47:8a:f2:60:
45:c2:2d:95:54:94:03:26:c6:66:92:c5:93:c4:77:bb:c4:35:
5b:57:ca:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:03:32 2026 by rpki-client