Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
File: QRoqlAW9oWccEHdvRCYnPJBOStA.mft (raw, json)
Hash identifier: RlZCywGvk8yvsibi4wuSd70JGVIu1oiH3a3EwyWTK2w=
Subject key identifier: 97:A9:72:A1:CC:B7:86:30:B5:3E:F0:BD:D9:F0:38:4A:B1:88:D7:C7
Authority key identifier: 41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
Certificate issuer: /CN=411a2a9405bda1671c10776f4426273c904e4ad0
Certificate serial: 019F8FEC9C2BF5EEF9FCDDECB9BE5D730C06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
Manifest number: 19CA
Signing time: Thu 23 Jul 2026 17:01:15 +0000
Manifest this update: Thu 23 Jul 2026 17:01:15 +0000
Manifest next update: Fri 24 Jul 2026 17:01:15 +0000
Files and hashes: 1: JhKTt4vHe2Da6Kx5S6KE0aGaD54.roa (hash: nw0ozHE1LZlyAK+hkXXsJOHymcfFOhmuSyMz6eBbqyE=)
2: O5zwSwZaq-PnYfyFgUGaYTtXVCc.roa (hash: EcphMyhwWu+HB1619MCd3HbMcseN3a1eZUs2rmX7LwY=)
3: QRoqlAW9oWccEHdvRCYnPJBOStA.crl (hash: PZTQQtEG0XSco1eVwPBQJ6rVehOaEewqWJon5PgQ7H4=)
4: mV0XT4eYWUzPfujoqVHWBgPdVhw.asa (hash: SxQBgXkzl2s7ZSzL5zFHD8gDFNbcwGk2HGZOyqJzEQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:9c:2b:f5:ee:f9:fc:dd:ec:b9:be:5d:73:0c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411a2a9405bda1671c10776f4426273c904e4ad0
Validity
Not Before: Jul 23 17:01:15 2026 GMT
Not After : Jul 24 17:01:15 2026 GMT
Subject: CN=97a972a1ccb78630b53ef0bdd9f0384ab188d7c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ae:3b:be:66:b7:16:04:f9:ea:e4:46:f5:0a:
59:1c:83:6d:10:36:7d:76:5b:ac:fb:27:36:13:75:
64:7d:ab:4f:42:45:a7:7f:fd:5e:c7:bb:a6:ec:4d:
7b:6c:85:d1:f1:56:a6:00:e6:ed:a7:c1:4b:cf:13:
aa:ac:cb:7c:79:61:05:d1:9a:53:82:04:5e:27:4d:
d4:ec:9c:3c:5a:ed:50:48:c4:38:33:ea:76:53:60:
fe:78:61:22:c3:1d:38:bb:76:fd:05:6e:02:a5:7e:
19:40:1b:1d:33:ba:6e:c4:73:e6:d0:43:5e:68:d8:
98:d6:3d:92:f1:d0:e0:86:72:a9:73:d1:63:f9:ec:
33:f5:ef:e1:54:40:b4:e9:29:f4:9d:53:e8:2c:69:
45:d6:a1:36:99:6f:24:82:a5:c9:a3:6a:fe:00:f9:
3d:23:69:16:62:a8:70:21:07:a7:bd:19:e8:c8:bf:
72:d7:cb:c2:8d:c2:70:db:d2:a4:84:6f:d3:93:e6:
d1:b3:b7:9f:56:42:7b:cd:7b:39:f5:9b:ba:52:eb:
a8:4f:7c:cd:ae:e1:25:58:39:30:79:e1:f3:57:22:
76:d2:d2:40:88:82:35:92:2e:63:a6:1c:bf:22:53:
f0:95:cd:07:3f:33:0d:4f:01:b6:33:42:da:80:c0:
30:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A9:72:A1:CC:B7:86:30:B5:3E:F0:BD:D9:F0:38:4A:B1:88:D7:C7
X509v3 Authority Key Identifier:
keyid:41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:fe:0f:11:a8:a3:84:70:67:2f:98:32:d8:60:0c:26:bf:5f:
0c:30:a3:bb:0f:3e:2c:13:db:62:4c:bf:ac:b1:65:f6:bb:02:
c5:73:60:d6:41:20:80:d0:55:79:7b:2d:df:06:50:52:d3:14:
70:8e:05:bb:0b:c7:89:98:51:e5:fa:d0:03:bc:f3:de:0d:70:
98:66:56:b2:6c:f0:d5:02:20:8b:c6:cb:2b:35:c6:38:cd:06:
74:aa:f4:81:3d:21:58:d5:47:f1:d6:1b:de:d6:f7:c9:61:0d:
92:82:57:ad:80:28:de:b1:59:a8:05:c3:aa:27:44:b4:ce:6c:
2e:bb:37:d1:49:c2:e0:ba:11:de:a2:16:83:88:79:90:c3:48:
b0:13:46:f2:3e:57:60:59:9d:b1:22:50:ae:4d:2b:1e:af:98:
8c:c3:4e:d9:b8:9a:3c:2f:f5:7f:8f:e2:34:ac:3c:5a:36:f1:
8a:8d:fc:90:47:aa:1c:d4:72:14:f8:a3:f0:6b:4b:1a:ee:3b:
72:8c:3c:31:54:be:67:6e:c0:69:45:ac:30:55:10:c5:0c:3b:
d7:60:4b:07:06:cf:b5:46:19:68:3a:56:10:e2:f4:41:ea:6f:
15:ae:c2:d8:c5:40:e0:9b:34:37:34:cb:6b:ff:49:98:22:38:
72:1a:cb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:07:53 2026 by rpki-client