Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/679033-5b74-48b1-8d7f-cc153468e198/1/qwGK2gxETq14L6SLw3_Q-I__pXY.mft
File: qwGK2gxETq14L6SLw3_Q-I__pXY.mft (raw, json)
Hash identifier: A2IH1a3MFHjD3ZINvSPauwfwSZNHk/FjtsBENFyL/0o=
Subject key identifier: 9B:0D:18:D1:E3:2B:68:F9:FB:74:97:0F:E5:86:9A:13:45:75:C2:B8
Authority key identifier: AB:01:8A:DA:0C:44:4E:AD:78:2F:A4:8B:C3:7F:D0:F8:8F:FF:A5:76
Certificate issuer: /CN=ab018ada0c444ead782fa48bc37fd0f88fffa576
Certificate serial: 019F8F1070E59D457773D11642C63E51C590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwGK2gxETq14L6SLw3_Q-I__pXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/679033-5b74-48b1-8d7f-cc153468e198/1/qwGK2gxETq14L6SLw3_Q-I__pXY.mft
Manifest number: 2E
Signing time: Thu 23 Jul 2026 13:00:46 +0000
Manifest this update: Thu 23 Jul 2026 13:00:46 +0000
Manifest next update: Fri 24 Jul 2026 13:00:46 +0000
Files and hashes: 1: CsfJ4beBzCwJq0xUUEN3KAIAoOg.roa (hash: H8thqU9uIxmfJJLIfwRRTbW1/O7obGLOypWNiqyA/nk=)
2: jfC085keId6PPgSN100bJz3yx4g.asa (hash: D12cwI3Gjb7k60jjJhIM7YbS9niQbydMpfO41Z+Y6mg=)
3: qwGK2gxETq14L6SLw3_Q-I__pXY.crl (hash: qle7dSLbGj99OQboYpVqwh3BLBWAANLrudFMmkXeKU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/679033-5b74-48b1-8d7f-cc153468e198/1/qwGK2gxETq14L6SLw3_Q-I__pXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/679033-5b74-48b1-8d7f-cc153468e198/1/qwGK2gxETq14L6SLw3_Q-I__pXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwGK2gxETq14L6SLw3_Q-I__pXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:70:e5:9d:45:77:73:d1:16:42:c6:3e:51:c5:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab018ada0c444ead782fa48bc37fd0f88fffa576
Validity
Not Before: Jul 23 13:00:46 2026 GMT
Not After : Jul 24 13:00:46 2026 GMT
Subject: CN=9b0d18d1e32b68f9fb74970fe5869a134575c2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c8:29:1e:57:7d:64:45:cc:02:94:b8:dc:48:
2e:c4:4f:78:db:18:8a:d0:e1:df:78:35:90:11:41:
07:8f:77:a3:7b:69:e1:2a:b6:cd:2d:52:ff:5f:94:
09:c5:19:e3:51:f8:5b:3b:e6:9b:77:93:c8:06:51:
45:3e:ac:c1:94:0f:9e:55:95:07:7d:84:66:ee:70:
57:d8:ab:04:23:94:45:9a:7a:c0:3f:c5:a9:fc:0a:
ee:9e:f9:5c:62:0a:25:16:51:f1:bf:3a:72:98:42:
15:ab:8f:f4:50:b1:c6:02:85:4a:c5:a3:24:e7:26:
4b:eb:89:2b:fe:6e:09:3e:4f:f5:26:fd:78:75:2a:
51:66:4e:7a:26:0b:77:31:42:b6:a1:33:4b:a3:d3:
5e:11:ab:79:05:08:af:60:7c:22:a3:dc:d7:53:3e:
0c:12:21:81:67:60:2a:26:2a:68:57:e4:a5:ba:a3:
54:09:b0:75:bf:0e:0f:20:41:79:24:d8:25:69:3e:
59:77:34:ba:22:4a:57:8e:90:25:ec:01:e6:4c:86:
8a:44:13:f5:31:01:58:8f:89:f0:3c:31:8d:e9:d3:
2b:eb:7e:69:89:07:5c:6b:71:7f:b8:a5:de:86:dc:
e2:65:4c:8a:d9:b9:d8:d7:83:e8:6a:ea:d1:2a:29:
cf:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:0D:18:D1:E3:2B:68:F9:FB:74:97:0F:E5:86:9A:13:45:75:C2:B8
X509v3 Authority Key Identifier:
keyid:AB:01:8A:DA:0C:44:4E:AD:78:2F:A4:8B:C3:7F:D0:F8:8F:FF:A5:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwGK2gxETq14L6SLw3_Q-I__pXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/679033-5b74-48b1-8d7f-cc153468e198/1/qwGK2gxETq14L6SLw3_Q-I__pXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/679033-5b74-48b1-8d7f-cc153468e198/1/qwGK2gxETq14L6SLw3_Q-I__pXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:9b:5b:98:0d:71:56:a3:a1:e2:1d:40:ed:91:fd:3d:bd:e8:
c0:18:6e:0b:24:f3:f9:68:44:d0:79:7e:23:65:83:64:30:ff:
b1:ee:58:4e:47:a3:78:d8:a3:de:9e:73:b1:82:a2:dd:5b:ae:
01:d6:db:3b:d5:f5:84:40:f1:81:45:cc:aa:e7:0d:b5:e8:42:
f9:75:ec:bf:df:8f:14:f8:12:1c:60:98:ef:91:c6:07:7f:2d:
01:b0:8f:2c:a9:ae:df:9f:c9:83:d1:6a:18:80:c7:c2:96:dc:
e3:bb:85:9a:21:f4:a1:a8:85:bb:a2:4a:86:16:8d:24:98:b8:
51:f5:34:8e:68:04:50:5f:7f:5c:99:4d:5e:d7:fc:f3:02:cb:
62:34:4d:09:a4:c4:22:05:66:fe:5d:60:20:9f:e5:92:bf:b9:
a5:3d:53:4d:1f:47:97:56:0d:7c:0a:5c:0e:60:4d:7c:76:9a:
26:f8:25:c4:98:1f:06:35:b6:0f:00:2a:d1:f9:62:df:1d:55:
0c:72:58:e0:30:a5:ec:33:f5:84:23:a1:11:4d:3d:a6:7c:fa:
32:10:16:32:d3:74:94:f2:71:23:98:35:73:ce:34:e6:19:b0:
74:a3:52:5f:01:16:fe:59:24:75:3d:9f:8e:90:de:62:f3:a7:
a4:69:af:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:57:23 2026 by rpki-client