Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
File: qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft (raw, json)
Hash identifier: VY9HfRUEb4XCzYKUVbLrNpYHlOZaMBlCchOe/vucbKI=
Subject key identifier: 4F:B5:CA:B4:A8:41:2C:D9:B8:75:E0:AB:D1:AE:5D:63:F8:6A:DB:7C
Authority key identifier: AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
Certificate issuer: /CN=aa8551e851e69db165c6c632af45f21715512939
Certificate serial: 019F90C83A29CD27C7281BDB206919787D8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
Manifest number: 1796
Signing time: Thu 23 Jul 2026 21:01:08 +0000
Manifest this update: Thu 23 Jul 2026 21:01:08 +0000
Manifest next update: Fri 24 Jul 2026 21:01:08 +0000
Files and hashes: 1: qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl (hash: O1sigDbhuE+dXPsvtOLj1wJTsVu6GrOznPtf/XABiCA=)
2: vN94HUAPgmvQh3qxUmTqfU_xu68.roa (hash: 9/wGgd57yRAqhby3LLSAoNbCoPVWoNBJaPZEuWx53As=)
3: xBgy_H62jp_peWFVNL2jCljFBzw.roa (hash: FsGIuRvPcEfadNKC9UqpUs/32O7Qa+ZVXh6PzF+igCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:3a:29:cd:27:c7:28:1b:db:20:69:19:78:7d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8551e851e69db165c6c632af45f21715512939
Validity
Not Before: Jul 23 21:01:08 2026 GMT
Not After : Jul 24 21:01:08 2026 GMT
Subject: CN=4fb5cab4a8412cd9b875e0abd1ae5d63f86adb7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:71:75:22:16:71:ce:28:5e:70:25:0f:ba:38:
be:97:c6:5a:bc:31:a7:9e:d5:ac:33:4a:7b:95:a2:
35:4d:8c:83:c5:4c:76:46:f2:57:61:6d:3d:6c:bb:
df:51:05:ff:36:b2:1b:ae:ce:ab:bf:54:1c:d7:f0:
e5:63:92:76:09:f7:50:5d:c0:be:dd:72:d5:66:68:
d3:99:ae:73:93:42:c9:2b:4d:6b:2e:cb:48:be:e0:
4a:a8:89:05:82:3d:39:c3:01:cc:c3:3a:7e:09:66:
0d:7e:13:97:11:2b:a0:88:95:b4:4e:fe:93:56:e6:
3e:d6:78:60:d1:9f:63:52:66:28:01:bc:fd:90:2b:
7c:27:b8:c0:21:5c:53:67:55:f9:c3:e6:c9:4b:a6:
be:a4:ce:f8:53:6d:17:f5:91:be:7b:12:45:02:91:
39:ab:42:fd:f2:8c:f0:c9:0a:73:ee:e9:cd:45:d3:
a0:19:60:f2:40:70:4d:84:41:4e:ee:e5:70:9c:4e:
d0:ed:ee:de:85:2e:74:33:51:e6:2f:01:70:8b:40:
96:70:b1:fc:32:69:3a:da:06:24:81:a7:62:dd:51:
e8:f2:92:00:b3:1c:fc:4f:4c:e8:77:23:48:47:b3:
e0:5f:08:d1:6d:96:69:df:33:51:ea:81:41:ae:20:
18:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B5:CA:B4:A8:41:2C:D9:B8:75:E0:AB:D1:AE:5D:63:F8:6A:DB:7C
X509v3 Authority Key Identifier:
keyid:AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:30:80:1c:89:ec:c9:90:1e:ba:9a:bc:35:d9:6d:a7:aa:f5:
c3:97:3c:e8:73:3f:57:9c:6b:43:f3:46:69:a2:4b:d5:98:9e:
4f:4a:9b:13:b3:6b:fa:50:75:3c:87:e2:fc:c6:59:64:28:68:
93:e1:c2:e8:45:ec:3f:b9:95:4e:8d:ef:66:a9:73:78:89:68:
c7:31:47:c3:e1:72:f4:5c:35:99:b3:a5:9e:9a:d7:ba:38:c3:
65:61:7a:c4:68:e8:82:3d:70:75:ef:4d:53:73:a8:f6:6f:33:
43:32:8d:a6:f6:7e:65:23:0f:c6:b5:8c:d7:aa:14:6c:36:a7:
24:df:fa:85:9b:c4:12:b8:2f:5d:cc:56:2f:9f:16:a2:08:42:
37:fb:68:02:b7:14:0b:e0:a5:9b:4a:b5:f8:dd:22:f6:a2:e0:
53:20:97:67:7f:56:2d:37:44:66:b3:37:91:92:95:a0:41:9b:
73:ea:b6:6a:6e:44:30:67:dc:e4:e4:56:84:cb:31:03:11:62:
b9:d7:ce:65:f4:b2:20:2e:10:df:02:12:91:7a:f7:b4:7d:9d:
94:c4:52:79:47:43:62:3d:42:00:ea:cf:53:1a:7a:c0:76:39:
cf:f4:70:00:f4:dc:38:1b:45:9a:9a:9e:0f:bf:84:3c:d9:5e:
26:9f:dc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:27:45 2026 by rpki-client