
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft
File: qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft (raw, json)
Hash identifier: Et1gCClBh32owa/VIOuyjHACL1pv95eV51yhUf/jIW8=
Subject key identifier: 24:A1:83:5C:C0:BD:D7:48:D6:34:12:C4:3A:3E:C3:E3:74:EC:A2:12
Authority key identifier: A8:45:70:85:4F:E8:86:B9:4A:E6:25:36:3C:62:5D:DA:60:BB:3E:FC
Certificate issuer: /CN=a84570854fe886b94ae625363c625dda60bb3efc
Certificate serial: 019F91DA4AF038F6F35F49A3974F4B9D474B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft
Manifest number: 1959
Signing time: Fri 24 Jul 2026 02:00:30 +0000
Manifest this update: Fri 24 Jul 2026 02:00:30 +0000
Manifest next update: Sat 25 Jul 2026 02:00:30 +0000
Files and hashes: 1: PI8Cnztdcg0Orhj3hNj0SOev2FA.roa (hash: F0vD9Ue05tdjzmjFbmnRff+jKy6sKGlrmWL0EX8ad5o=)
2: qEVwhU_ohrlK5iU2PGJd2mC7Pvw.crl (hash: W/wXLg8n5r9MujcpHobvIbV6ZSqhNRIVWuvT9B+0mpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:4a:f0:38:f6:f3:5f:49:a3:97:4f:4b:9d:47:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84570854fe886b94ae625363c625dda60bb3efc
Validity
Not Before: Jul 24 02:00:30 2026 GMT
Not After : Jul 25 02:00:30 2026 GMT
Subject: CN=24a1835cc0bdd748d63412c43a3ec3e374eca212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3a:0a:22:5f:a3:95:20:ae:fb:43:fc:10:7e:
8e:a9:4d:4e:62:49:98:d6:3c:c3:35:49:7b:a5:3b:
04:ed:fb:c2:aa:22:e0:48:69:21:b9:54:ff:24:f1:
87:e7:d1:34:30:d6:98:31:64:4c:4c:91:23:4a:75:
94:c7:00:8f:4d:b5:ba:61:e1:74:b4:79:db:fa:3c:
fa:f1:d6:b2:17:2a:1b:45:be:6b:36:c9:7e:21:9c:
de:d5:b1:ca:5c:0e:00:6f:6d:e0:e9:59:74:1e:be:
92:ad:bb:99:51:84:36:90:16:a8:f6:37:5f:8a:52:
16:34:7c:e3:b4:4a:33:7c:03:ac:ea:49:c8:5e:14:
ce:f1:cf:54:bc:13:dd:fe:b6:58:99:78:65:73:78:
6b:20:a3:32:f6:23:1a:69:3f:2a:d5:c6:7c:48:ed:
db:1c:be:88:0b:23:7f:7f:9f:30:e7:69:22:96:d6:
ac:87:2d:5d:1a:b0:78:01:96:b2:15:90:e5:46:53:
5f:cd:90:cd:83:7d:bf:50:d1:79:19:c9:28:75:68:
3c:de:e6:e5:bd:18:bb:c8:b0:85:fc:f5:4a:ad:4a:
63:2a:3e:bc:37:fc:3f:0d:1f:1f:c3:38:7c:4f:54:
05:e9:b7:8f:2e:8f:bf:96:77:3c:d7:ae:25:b4:61:
2f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A1:83:5C:C0:BD:D7:48:D6:34:12:C4:3A:3E:C3:E3:74:EC:A2:12
X509v3 Authority Key Identifier:
keyid:A8:45:70:85:4F:E8:86:B9:4A:E6:25:36:3C:62:5D:DA:60:BB:3E:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:75:a9:36:a2:06:2b:d4:fd:3d:e8:cb:53:36:1e:0d:d1:4a:
88:45:1e:72:26:9c:c2:ef:64:8a:cc:1b:e7:9a:24:c7:91:1e:
37:4c:c3:57:65:ef:01:86:db:b4:91:0b:2f:26:4a:95:71:21:
69:ed:98:99:df:fe:bc:0c:33:b6:5a:ac:fc:69:b0:e5:46:a6:
1f:b4:94:9e:85:21:ba:6f:fb:b4:19:53:b6:0d:0d:a2:2e:ce:
46:b6:70:0f:43:8d:14:be:8e:3f:10:47:c8:43:51:4a:d1:ec:
5f:ba:e6:76:6e:9e:9c:eb:72:f0:e3:f5:cd:3a:94:cc:48:15:
1a:bd:b4:73:04:97:f2:10:f5:d2:73:e9:30:87:a9:80:01:7d:
79:6b:c9:14:10:81:df:2f:d3:c4:ca:bd:30:98:9c:2e:54:cc:
c7:2d:c5:5b:7e:0a:43:11:3c:a0:c2:73:88:95:c1:a1:fe:cf:
e1:07:07:5a:3d:e2:35:bb:5d:77:07:d9:4f:ec:c3:5c:95:f8:
c8:b5:59:fb:58:7d:84:8f:eb:f6:65:bb:0e:7e:c6:35:60:b2:
00:c4:96:2f:16:8e:29:38:d7:b7:8a:3f:7e:f7:0c:6b:53:4d:
05:05:f1:9a:df:e4:3a:54:8b:65:98:14:d8:9d:c5:63:54:b2:
21:bd:be:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:26:07 2026 by rpki-client