Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
File: qoXp2iInNFwYq9fnUnL4HCmzDRs.mft (raw, json)
Hash identifier: ndH2XpiezIEY4TFZSbgkYULRcStzq+X8qrs+UrjHSzY=
Subject key identifier: 9C:18:D6:85:A9:B2:E5:BE:61:DC:97:5E:65:A1:8A:8F:C2:AC:01:F7
Authority key identifier: AA:85:E9:DA:22:27:34:5C:18:AB:D7:E7:52:72:F8:1C:29:B3:0D:1B
Certificate issuer: /CN=aa85e9da2227345c18abd7e75272f81c29b30d1b
Certificate serial: 019F927F2ADB9436CAAEF5CDEAE2E8872F49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
Manifest number: 1959
Signing time: Fri 24 Jul 2026 05:00:35 +0000
Manifest this update: Fri 24 Jul 2026 05:00:35 +0000
Manifest next update: Sat 25 Jul 2026 05:00:35 +0000
Files and hashes: 1: 9iFl9E0VgWNO_Nn27bQay-c817U.roa (hash: La1IKKEmOqIsMgjt9EJI2o3J371vdfvoBpTTdCWHcKQ=)
2: qoXp2iInNFwYq9fnUnL4HCmzDRs.crl (hash: ET1nb/phUlkR0VraLklvTb22IiYPqL5H0NIbWkQo2uI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:2a:db:94:36:ca:ae:f5:cd:ea:e2:e8:87:2f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa85e9da2227345c18abd7e75272f81c29b30d1b
Validity
Not Before: Jul 24 05:00:35 2026 GMT
Not After : Jul 25 05:00:35 2026 GMT
Subject: CN=9c18d685a9b2e5be61dc975e65a18a8fc2ac01f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c6:cd:70:b4:59:92:27:78:55:a5:af:e5:91:
a3:76:4f:fb:e0:f2:7a:f7:0e:c3:7a:40:d0:a8:76:
26:0e:c7:23:b0:65:4d:18:30:b7:80:67:ab:2a:ff:
f6:7e:84:4c:ca:76:89:ec:13:f7:97:20:67:31:59:
e0:83:b1:78:22:17:b5:84:f2:33:5b:cb:a4:51:43:
26:27:c1:8e:3c:1d:a9:f7:be:20:24:33:cb:7a:ba:
9c:38:83:1b:ef:83:3d:89:30:c6:39:0f:22:e4:4e:
d4:4f:20:87:bc:a3:9b:6c:51:6a:4b:95:8d:19:82:
fb:9c:6f:b3:4b:fe:a0:5b:49:01:ac:e2:77:71:21:
12:35:d1:3d:d0:7b:fa:92:2b:7e:2a:31:b5:1e:b0:
65:70:a2:8a:c8:1a:66:71:3d:8e:c7:4d:22:40:ea:
b0:b7:1d:a3:f3:e7:80:9e:73:72:ab:ca:3c:48:b2:
f6:12:ea:ed:8f:f2:02:4e:f6:8b:59:d9:c5:1d:d3:
fc:3d:34:0f:87:18:01:9f:e7:92:70:bf:d8:a7:06:
b2:30:a4:4e:dc:c0:b0:4d:d7:ce:b1:1a:d2:f8:74:
ab:a4:d4:2f:84:dd:1e:ce:01:6f:02:51:94:63:50:
cd:02:4e:f7:61:95:82:2b:43:ff:04:44:c3:93:d2:
1b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:18:D6:85:A9:B2:E5:BE:61:DC:97:5E:65:A1:8A:8F:C2:AC:01:F7
X509v3 Authority Key Identifier:
keyid:AA:85:E9:DA:22:27:34:5C:18:AB:D7:E7:52:72:F8:1C:29:B3:0D:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:5e:16:34:7e:60:bf:ea:32:b4:77:0d:8d:a3:55:17:20:eb:
b8:41:4b:b9:12:2f:a7:70:90:6d:f4:b3:02:ed:15:36:2d:63:
d3:71:c5:7d:ae:c6:eb:73:a9:f4:c2:e8:ab:f0:09:72:af:b4:
f6:c0:b9:51:a2:b9:57:70:97:b8:34:28:c9:e4:b6:9a:5a:0a:
bb:b4:76:8b:1c:df:5f:25:6a:89:dc:70:d2:f3:ac:e3:e2:ea:
45:ac:d1:10:fd:1d:35:a0:b5:98:0a:ba:cc:ec:cb:a5:cd:ab:
19:af:3f:25:34:15:86:3e:3f:34:4a:89:fe:07:23:9e:14:75:
0a:c1:7d:4a:d7:96:3e:0d:16:fb:32:63:56:4f:cc:a6:4f:a2:
6a:cf:fe:a6:f6:95:7a:46:82:cb:76:65:e9:30:da:60:45:32:
b4:57:a8:4d:69:36:88:df:f2:78:e0:12:80:d4:07:e6:5d:d4:
3c:aa:23:21:1b:af:10:b0:3c:bb:b6:a2:75:c7:ba:26:4c:5f:
4d:3e:36:d7:30:1d:43:f3:73:12:4e:cf:ab:e9:48:72:bc:b1:
43:fb:45:2e:21:99:a8:f5:42:f0:47:13:1f:f6:39:ff:ba:d7:
36:c8:69:53:37:06:65:74:dc:43:6e:79:a1:09:dc:53:2c:5b:
9b:1e:06:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SfyrblDbKrvXN6uLohy9JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhODVlOWRhMjIyNzM0NWMxOGFiZDdlNzUyNzJmODFjMjli
MzBkMWIwHhcNMjYwNzI0MDUwMDM1WhcNMjYwNzI1MDUwMDM1WjAzMTEwLwYDVQQD
Eyg5YzE4ZDY4NWE5YjJlNWJlNjFkYzk3NWU2NWExOGE4ZmMyYWMwMWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMbNcLRZkid4VaWv5ZGjdk/74PJ6
9w7DekDQqHYmDscjsGVNGDC3gGerKv/2foRMynaJ7BP3lyBnMVngg7F4Ihe1hPIz
W8ukUUMmJ8GOPB2p974gJDPLerqcOIMb74M9iTDGOQ8i5E7UTyCHvKObbFFqS5WN
GYL7nG+zS/6gW0kBrOJ3cSESNdE90Hv6kit+KjG1HrBlcKKKyBpmcT2Ox00iQOqw
tx2j8+eAnnNyq8o8SLL2Eurtj/ICTvaLWdnFHdP8PTQPhxgBn+eScL/YpwayMKRO
3MCwTdfOsRrS+HSrpNQvhN0ezgFvAlGUY1DNAk73YZWCK0P/BETDk9IbwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJwY1oWpsuW+YdyXXmWhio/CrAH3MB8GA1UdIwQY
MBaAFKqF6doiJzRcGKvX51Jy+Bwpsw0bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW9YcDJpSW5ORndZcTlmblVuTDRIQ216RFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mMmZjMGUtYmJiOS00OTI0LWE4OWMt
NzYyMGRiMjc5OTYyLzEvcW9YcDJpSW5ORndZcTlmblVuTDRIQ216RFJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9mMmZjMGUtYmJiOS00OTI0LWE4OWMtNzYyMGRiMjc5OTYy
LzEvcW9YcDJpSW5ORndZcTlmblVuTDRIQ216RFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZV4WNH5g
v+oytHcNjaNVFyDruEFLuRIvp3CQbfSzAu0VNi1j03HFfa7G63Op9MLoq/AJcq+0
9sC5UaK5V3CXuDQoyeS2mloKu7R2ixzfXyVqidxw0vOs4+LqRazREP0dNaC1mAq6
zOzLpc2rGa8/JTQVhj4/NEqJ/gcjnhR1CsF9SteWPg0W+zJjVk/Mpk+ias/+pvaV
ekaCy3Zl6TDaYEUytFeoTWk2iN/yeOASgNQH5l3UPKojIRuvELA8u7aidce6Jkxf
TT421zAdQ/NzEk7Pq+lIcryxQ/tFLiGZqPVC8EcTH/Y5/7rXNshpUzcGZXTcQ255
oQncUyxbmx4G3Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:27:43 2026 by rpki-client