
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
File: qy5bZ_JcvYgspNAj0h75jUg3Nds.mft (raw, json)
Hash identifier: Wriw+ab9M/z4QbwcHgmlSHQioMHhZ6LQGR6eQR4BwfA=
Subject key identifier: 2D:F1:61:71:EA:A2:6B:DB:8F:F4:12:33:4E:2C:9C:CF:AD:B0:7D:11
Authority key identifier: AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB
Certificate issuer: /CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db
Certificate serial: 019F916DA3F53A3DD2973E4D0ED7673ECB3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 00:01:49 +0000
Manifest this update: Fri 24 Jul 2026 00:01:49 +0000
Manifest next update: Sat 25 Jul 2026 00:01:49 +0000
Files and hashes: 1: 1Gy5y0l2Z3RJbwpIdwQeXu-S_os.roa (hash: A0SPA20n6txHOLSFN/vzsdzLr5oEp33Xca7U8bJmR+A=)
2: qPlIJlUmNKbCCbrg6KCpFdUY8N8.roa (hash: OvZ+jG+TA2c8r8TRVg+Z8VbBKScMi5fnRQ6Z1I4vZyA=)
3: qy5bZ_JcvYgspNAj0h75jUg3Nds.crl (hash: b12LyPm8De5Wz61y9vOloOtv2PQeHWNTSJ2ezuYjFgs=)
4: vPp50IKlFxgQgBOicGnqoqn1x7A.roa (hash: IdCf0l+lQqi5OboKhySYCzxcGPbYokM1HRRt3wwbKLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:a3:f5:3a:3d:d2:97:3e:4d:0e:d7:67:3e:cb:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db
Validity
Not Before: Jul 24 00:01:49 2026 GMT
Not After : Jul 25 00:01:49 2026 GMT
Subject: CN=2df16171eaa26bdb8ff412334e2c9ccfadb07d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9a:42:1a:86:5b:5d:d0:dc:1f:d7:2d:90:0e:
70:8d:4c:69:ef:83:3c:f9:c7:b5:f7:6c:f5:54:94:
d0:3b:c7:b5:f8:c2:68:75:b1:f5:1c:d1:55:dd:b9:
de:41:16:80:67:c2:60:92:cc:60:e5:19:1d:73:d7:
62:7c:8c:11:c0:65:e2:1f:86:5e:7b:09:e1:13:3d:
69:2c:11:b5:6b:8a:b2:82:58:3b:2b:65:b1:eb:7c:
a6:0d:7f:b8:52:24:35:b6:3e:19:d1:c5:6d:23:13:
b2:a3:07:a4:83:05:5d:34:ab:b7:52:9e:84:3f:52:
a9:7d:f0:f7:45:0d:7b:ad:d6:84:31:46:85:56:ce:
40:42:61:69:e7:ed:13:6b:dd:28:0f:d4:8b:9f:d5:
fd:eb:98:0c:52:d3:72:cc:f7:cc:d3:9f:68:59:90:
44:64:1a:ae:6f:8d:26:f0:04:af:5d:60:da:ac:17:
70:8e:37:52:40:e5:12:82:97:7d:b9:5d:c5:05:e2:
cd:aa:e2:a3:e0:89:48:9e:d6:20:c0:60:05:29:95:
a9:25:01:30:1b:aa:79:d4:5f:0f:04:07:92:67:ef:
51:a6:47:ed:2a:a1:fc:cc:2f:16:bb:d4:3a:cc:a5:
d1:e0:c3:97:7b:c1:95:b6:ff:c9:d2:17:44:da:26:
8b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F1:61:71:EA:A2:6B:DB:8F:F4:12:33:4E:2C:9C:CF:AD:B0:7D:11
X509v3 Authority Key Identifier:
keyid:AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:07:77:61:ef:a1:5c:ca:a1:73:b6:ab:be:6d:5b:e2:60:fe:
72:1f:09:a4:98:6d:cf:62:b9:a5:52:5f:95:ba:0e:11:f6:58:
1c:52:5d:d5:5b:8e:2e:cb:7b:be:ad:64:7c:29:de:6a:43:02:
a0:50:20:59:34:37:a4:70:33:36:76:72:56:12:67:cc:6f:6a:
4c:7c:68:6d:b8:e3:cb:97:fb:f6:a4:37:2e:91:7a:27:cf:ee:
dd:d9:65:a8:c5:a2:15:e0:ed:6c:26:d6:f2:82:23:f0:ca:ba:
79:0a:e7:19:3f:46:d1:9a:09:5a:c9:17:7a:f3:21:ea:09:fb:
a4:7d:35:59:c7:55:a2:c1:43:f7:d9:df:c8:fc:ea:b9:eb:fb:
26:48:dd:c4:7d:74:6a:50:97:e6:75:41:cf:f4:e7:d7:a0:5d:
95:a3:ad:d9:66:4c:e8:bf:ed:74:84:73:2d:72:e7:84:e2:f2:
54:dc:2c:57:f8:e0:d2:5b:43:6b:13:52:11:8d:ab:57:66:86:
6c:a2:0b:08:9b:f3:f8:4f:20:11:95:f8:ae:dc:fa:d5:a5:2c:
ec:b1:d8:b7:2d:5a:7b:16:21:01:f4:b7:5b:11:5c:68:8a:c6:
16:d1:fb:62:e2:47:52:74:0b:4a:de:52:cb:95:25:f9:50:31:
79:db:56:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:41:27 2026 by rpki-client