Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
File: QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft (raw, json)
Hash identifier: /VDKfhckncyqRAKcRcnLpuaUf1wGuSGMzHIZLZ8iZno=
Subject key identifier: 09:63:31:43:E1:76:30:7A:3D:6C:12:B3:F8:C2:44:9D:30:44:D1:A7
Authority key identifier: 42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
Certificate issuer: /CN=427a2670508b945123beecbf13145ffbd7bfcde4
Certificate serial: 019F935C25585882BC0B0C3411A0DCD27974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
Manifest number: 0BB5
Signing time: Fri 24 Jul 2026 09:01:57 +0000
Manifest this update: Fri 24 Jul 2026 09:01:57 +0000
Manifest next update: Sat 25 Jul 2026 09:01:57 +0000
Files and hashes: 1: 2j_D2kuSa562Zx4XnJ12w00oiMA.roa (hash: axWB++PeEKcojO8mVkayfPDvB+OsvgmhWTzXNDpM5Gk=)
2: 7Un3ch6sdTltAsulfRI9pykeqS0.roa (hash: qClWxzfRNb7UAsReGRMx4ioTUH4td3oi9VjiWf2rMZk=)
3: QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl (hash: +HvpSit4/Ks99r7zqA5JfNesuIprn7Jyp1KNE64VaCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:25:58:58:82:bc:0b:0c:34:11:a0:dc:d2:79:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427a2670508b945123beecbf13145ffbd7bfcde4
Validity
Not Before: Jul 24 09:01:57 2026 GMT
Not After : Jul 25 09:01:57 2026 GMT
Subject: CN=09633143e176307a3d6c12b3f8c2449d3044d1a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9c:72:30:9d:56:78:16:46:cf:5c:67:eb:20:
01:e8:19:f5:b3:a7:d7:fc:ef:b1:91:14:58:75:31:
70:78:ca:d6:55:b9:17:3b:f0:70:1d:8c:01:2c:3f:
c9:4e:3c:a9:74:d2:8a:0a:af:a1:ab:64:31:da:18:
01:b1:e9:81:15:e7:e0:1c:44:b3:de:d7:b8:1a:1e:
a8:f8:a7:66:a4:47:ed:f1:29:bd:8b:7f:15:7e:54:
9b:c4:71:6a:00:3b:d4:b0:fd:45:7f:df:69:1e:53:
c7:e6:b1:1d:fd:70:63:e4:84:04:b8:a7:9f:8a:ba:
2d:2a:92:a2:26:58:26:f2:e9:29:0e:dd:be:a2:50:
5e:26:26:dc:db:f7:f1:85:e1:ee:3f:a0:7d:cd:53:
3e:55:7c:8b:b8:aa:03:a7:b8:73:9c:99:8c:5e:52:
85:9f:24:18:67:b4:d7:b0:1a:17:a0:38:97:f8:15:
c4:ac:f8:aa:5f:e4:f1:e7:fb:fc:d2:1f:48:6d:9d:
a5:0b:f5:82:5b:59:6b:95:50:1a:e0:2e:3e:7b:3d:
c7:3a:28:4b:be:bc:52:3e:33:f3:dd:aa:8b:83:a6:
8b:72:a3:c4:13:75:8d:88:4b:a6:b6:09:5f:90:a3:
0a:d2:2f:3f:fd:c9:8b:d0:fd:31:14:b3:1b:ce:1b:
fd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:63:31:43:E1:76:30:7A:3D:6C:12:B3:F8:C2:44:9D:30:44:D1:A7
X509v3 Authority Key Identifier:
keyid:42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:99:0e:36:21:bc:00:e7:72:44:a6:57:c6:b4:fe:2a:44:43:
f5:75:4a:ca:5b:b9:b0:25:97:79:71:01:69:01:32:70:d3:8f:
ab:a3:78:c1:00:13:0e:56:a8:1c:23:4b:d5:d9:22:96:f6:1b:
33:5c:fc:dc:84:c6:22:d7:d6:32:2b:c7:27:b5:17:83:28:41:
7a:b5:b4:a3:47:67:07:37:9f:12:16:a5:41:3c:be:f5:93:1e:
ea:a9:65:ba:3e:96:4b:84:72:bd:d9:2b:6b:87:cf:11:de:7f:
25:ca:e7:de:48:23:5a:75:eb:e0:95:76:f9:b4:47:a6:a2:d6:
f1:c5:36:4a:03:d7:a4:2d:ca:8a:9f:8b:b7:d6:cb:96:bb:8b:
95:ca:0c:6d:64:19:5e:3e:9e:41:f3:c8:aa:6d:cb:dd:c8:44:
ab:92:b6:89:70:8a:6b:09:cb:7a:07:df:b4:95:7f:cf:90:ae:
d1:e2:7f:36:af:59:c7:68:d0:fb:f5:58:76:d0:ac:f7:d1:00:
3b:52:ae:ec:81:f5:70:32:9a:1e:0b:57:69:0a:c5:12:59:ed:
ef:19:42:c2:d0:cc:f2:c6:1f:9d:e7:ef:f7:69:17:ce:d7:c0:
04:ea:65:f4:78:d5:8f:99:9b:67:8b:46:33:9c:0a:e8:01:45:
3c:fd:74:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:05:14 2026 by rpki-client