Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.mft
File: q2hOUOM_OgAVyPiZyIvLE3vPtfk.mft (raw, json)
Hash identifier: QvpIEkiMjA2r1lAVbKIo6RJhVj7g4YL9/JYtfiHZWsY=
Subject key identifier: A1:26:3C:3C:B7:3D:0D:C4:ED:E4:45:D6:03:E4:3F:8C:C3:35:2B:91
Authority key identifier: AB:68:4E:50:E3:3F:3A:00:15:C8:F8:99:C8:8B:CB:13:7B:CF:B5:F9
Certificate issuer: /CN=ab684e50e33f3a0015c8f899c88bcb137bcfb5f9
Certificate serial: 019F935AF33EE586F50FD1866DD4468C5A68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q2hOUOM_OgAVyPiZyIvLE3vPtfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.mft
Manifest number: 11BB
Signing time: Fri 24 Jul 2026 09:00:38 +0000
Manifest this update: Fri 24 Jul 2026 09:00:38 +0000
Manifest next update: Sat 25 Jul 2026 09:00:38 +0000
Files and hashes: 1: eutBwstQCFRzhm35XTnNphMWByQ.roa (hash: RdOW4ekiWsJoF7BZmUsggiXem+HWt5D8Hbfh8/B+px8=)
2: q2hOUOM_OgAVyPiZyIvLE3vPtfk.crl (hash: Zvuub5P44a20PJJR6JxtLk/8bKiqdoD5J1qfITWxk/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/q2hOUOM_OgAVyPiZyIvLE3vPtfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:f3:3e:e5:86:f5:0f:d1:86:6d:d4:46:8c:5a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab684e50e33f3a0015c8f899c88bcb137bcfb5f9
Validity
Not Before: Jul 24 09:00:38 2026 GMT
Not After : Jul 25 09:00:38 2026 GMT
Subject: CN=a1263c3cb73d0dc4ede445d603e43f8cc3352b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a0:1e:a0:fd:41:a8:53:c1:be:95:96:52:35:
0b:59:fd:14:c9:c5:9a:de:41:49:be:b0:80:4b:b0:
99:d2:ff:e5:9c:10:af:0f:fc:16:25:41:f6:a1:2d:
e0:99:d3:c1:a3:8a:a3:f0:1e:4c:27:06:f7:61:41:
5f:3a:97:f9:13:16:6c:ca:41:52:07:48:3c:0c:39:
12:3e:3b:4d:34:19:e1:99:d1:04:6d:2f:fc:ac:3f:
93:37:12:87:2e:32:15:e2:66:0c:fe:d8:00:8d:88:
66:8a:10:ab:f6:47:42:bf:a3:01:34:49:00:43:4b:
ba:22:db:d5:e4:4c:5e:aa:81:03:0a:e3:9d:35:f7:
9d:2a:ed:05:60:37:42:f1:43:e9:e9:db:7e:e2:ed:
04:c4:0b:ee:92:9a:43:b6:80:a7:62:3b:86:2f:0b:
2a:a3:59:2e:a8:6b:26:f2:1d:d2:44:57:c0:f6:57:
04:b9:01:e0:e3:f7:e0:20:ca:10:9b:17:03:c9:e8:
74:89:c8:c8:6a:7c:06:1e:f6:b9:08:cc:5c:8c:91:
98:2e:0a:11:72:53:d7:04:28:d1:db:8f:0f:57:10:
2d:0c:b6:b7:d7:bb:1e:d1:58:40:7d:89:1b:5e:ae:
d9:a0:9d:ec:e9:ca:da:47:be:7b:b8:fe:64:f9:64:
f2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:26:3C:3C:B7:3D:0D:C4:ED:E4:45:D6:03:E4:3F:8C:C3:35:2B:91
X509v3 Authority Key Identifier:
keyid:AB:68:4E:50:E3:3F:3A:00:15:C8:F8:99:C8:8B:CB:13:7B:CF:B5:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q2hOUOM_OgAVyPiZyIvLE3vPtfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:aa:4a:e3:3b:23:14:16:7b:10:73:a3:13:18:3e:3e:48:5f:
0d:61:1f:5e:fe:bb:6f:41:59:81:0e:68:75:e1:83:fc:9c:05:
a2:30:2c:2a:96:0a:51:d4:d0:6a:2e:39:3a:e2:72:93:ac:02:
bc:a9:1d:59:aa:2f:8a:92:df:50:ad:12:24:36:db:c8:9f:e6:
11:9d:98:16:71:53:6a:9b:f3:6e:38:80:d0:9b:49:ec:6f:08:
50:15:82:ab:f2:98:89:2b:e4:da:12:16:a2:c5:e3:d8:00:5f:
1a:00:86:ad:37:59:ed:d5:eb:8c:e0:ad:1b:61:d9:ed:7a:3c:
11:e3:af:cb:a8:b7:0f:19:cc:05:d0:ab:8f:f2:6d:e5:a2:bc:
cc:75:e6:84:3a:ce:f2:ed:d2:83:25:d3:a5:93:43:74:47:5d:
a2:bd:59:45:7f:fb:19:91:a5:a3:d2:c5:90:5b:cc:c0:6b:97:
d9:0f:ab:49:4a:81:ef:32:d2:6b:4f:6d:93:3b:ab:97:c4:e7:
42:78:63:4f:41:0c:02:e8:1c:f0:92:fe:c9:75:07:de:f0:59:
b7:34:1c:e9:43:99:0d:7d:47:61:f5:99:75:67:fc:e2:61:ed:
3e:de:75:53:f5:a3:7d:c8:86:ab:0f:ab:1c:dc:83:32:48:60:
77:c3:3d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:52:53 2026 by rpki-client