Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
File: v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft (raw, json)
Hash identifier: VF8K3J3n92dGHSHX17AYPq16JnVcx5dr9mwnJmqlK2o=
Subject key identifier: 06:EE:DD:92:8E:A3:43:11:59:95:2C:73:A1:04:92:06:C3:52:F9:0C
Authority key identifier: BF:F7:6A:06:EA:A2:A0:3C:79:91:34:75:09:B8:60:8F:4A:71:07:1F
Certificate issuer: /CN=bff76a06eaa2a03c7991347509b8608f4a71071f
Certificate serial: 019F8ED97DB6995386E993C0B668A23C9822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_dqBuqioDx5kTR1Cbhgj0pxBx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
Manifest number: 02C8
Signing time: Thu 23 Jul 2026 12:00:45 +0000
Manifest this update: Thu 23 Jul 2026 12:00:45 +0000
Manifest next update: Fri 24 Jul 2026 12:00:45 +0000
Files and hashes: 1: 1Zl-IUirtFi4sZnWNhZ6XX4eC48.roa (hash: vrKUDuWKYhc1NZIetKI50go1lW0cijo+2gHcyXj0OzQ=)
2: jsXKldUP6xb6KQhmvufaY8HlIYU.roa (hash: o0QQc0vgOjau+xWYxGMgFh+K0UaqG+UGqUdPlhwyR0Q=)
3: v_dqBuqioDx5kTR1Cbhgj0pxBx8.crl (hash: cODgtlPKp5gE4gVUoue2oS/f5moBZ7reyNBbuosMMcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_dqBuqioDx5kTR1Cbhgj0pxBx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:d9:7d:b6:99:53:86:e9:93:c0:b6:68:a2:3c:98:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bff76a06eaa2a03c7991347509b8608f4a71071f
Validity
Not Before: Jul 23 12:00:45 2026 GMT
Not After : Jul 24 12:00:45 2026 GMT
Subject: CN=06eedd928ea3431159952c73a1049206c352f90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:75:a3:b5:ca:00:05:fe:4d:90:bc:21:76:0a:
38:29:33:6d:21:b8:e5:8c:e2:37:af:96:a0:ae:c5:
58:cb:a3:3b:cb:6c:d3:58:a7:a1:97:77:db:19:9e:
66:28:c9:dc:e5:44:fb:3b:c8:cc:cb:e9:7e:5e:83:
f0:66:59:d0:b9:69:ff:ad:14:10:9c:ff:2d:1d:19:
44:7d:e5:e2:db:4b:28:3e:3c:51:f3:68:e8:2c:04:
1e:3c:34:82:0c:22:68:98:07:8b:16:44:9a:3f:75:
e3:d1:b3:be:86:36:c4:48:83:f8:a1:82:77:31:97:
d9:34:49:36:5a:5d:d1:28:fd:d1:3c:b8:db:88:04:
aa:dc:dd:2d:eb:77:fb:85:6c:ec:f0:43:40:f6:5f:
a1:da:1a:47:50:8c:f4:a8:9e:9d:c1:fc:1d:10:fe:
09:81:00:56:2b:f0:46:bc:16:4c:ca:57:99:e0:8e:
29:ac:23:35:01:75:a7:e3:04:aa:f8:81:c3:e5:c7:
1f:52:c1:6e:fb:2a:df:08:bd:f2:54:68:26:58:ad:
17:4e:bd:1a:58:fa:a6:cf:ae:9a:bc:88:55:46:8c:
66:81:73:56:35:e3:89:32:e2:49:e8:07:64:25:77:
49:0f:13:90:c8:35:94:57:9d:29:f2:19:f1:77:96:
2d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:EE:DD:92:8E:A3:43:11:59:95:2C:73:A1:04:92:06:C3:52:F9:0C
X509v3 Authority Key Identifier:
keyid:BF:F7:6A:06:EA:A2:A0:3C:79:91:34:75:09:B8:60:8F:4A:71:07:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_dqBuqioDx5kTR1Cbhgj0pxBx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f1:ab:b1:e9:00:d0:b0:7b:cf:d2:4f:9b:be:dc:a5:fe:2f:
bb:d9:a3:dd:35:93:4c:e1:56:b1:60:dd:46:17:f5:65:0d:1b:
ff:6a:ec:f7:3e:fc:cd:4c:2d:e9:5e:c0:3c:a0:e4:c2:57:39:
c9:42:2b:a2:b3:07:fb:22:63:4c:55:dc:f7:2a:a8:70:4c:55:
8f:87:33:34:c2:ce:f6:fb:c0:d0:81:fd:4d:79:f0:79:51:8c:
8c:56:03:4f:c6:33:98:b9:51:7e:46:3f:29:d1:7a:e5:02:d0:
87:fe:7b:da:42:eb:3c:5b:71:5e:f9:30:8a:ef:16:5f:3f:e5:
00:e4:82:81:d3:c8:61:1e:98:14:9d:f1:3e:a9:18:e3:db:4f:
02:86:c4:6e:57:4c:e1:4d:e3:66:91:24:91:5f:68:39:8e:27:
34:5f:87:75:2c:fd:04:a7:79:04:ee:1a:e2:80:1d:f9:c4:4a:
65:d3:14:c7:5c:b1:4f:b1:15:0a:59:1e:e9:54:66:ce:3d:d6:
23:a0:c2:7d:1a:8b:16:d8:50:17:32:3c:ed:ad:10:51:a5:35:
77:84:dc:da:4a:f1:f6:fb:29:20:8e:1d:9e:a5:59:da:7b:4b:
4f:87:f2:56:a6:8b:7e:3e:f3:74:52:07:cf:e2:5d:9f:c4:0a:
e8:c4:61:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+O2X22mVOG6ZPAtmiiPJgiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZjc2YTA2ZWFhMmEwM2M3OTkxMzQ3NTA5Yjg2MDhmNGE3
MTA3MWYwHhcNMjYwNzIzMTIwMDQ1WhcNMjYwNzI0MTIwMDQ1WjAzMTEwLwYDVQQD
EygwNmVlZGQ5MjhlYTM0MzExNTk5NTJjNzNhMTA0OTIwNmMzNTJmOTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3WjtcoABf5NkLwhdgo4KTNtIbjl
jOI3r5agrsVYy6M7y2zTWKehl3fbGZ5mKMnc5UT7O8jMy+l+XoPwZlnQuWn/rRQQ
nP8tHRlEfeXi20soPjxR82joLAQePDSCDCJomAeLFkSaP3Xj0bO+hjbESIP4oYJ3
MZfZNEk2Wl3RKP3RPLjbiASq3N0t63f7hWzs8ENA9l+h2hpHUIz0qJ6dwfwdEP4J
gQBWK/BGvBZMyleZ4I4prCM1AXWn4wSq+IHD5ccfUsFu+yrfCL3yVGgmWK0XTr0a
WPqmz66avIhVRoxmgXNWNeOJMuJJ6AdkJXdJDxOQyDWUV50p8hnxd5YtFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbu3ZKOo0MRWZUsc6EEkgbDUvkMMB8GA1UdIwQY
MBaAFL/3agbqoqA8eZE0dQm4YI9KcQcfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdl9kcUJ1cWlvRHg1a1RSMUNiaGdqMHB4Qng4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8xNDU5NDMtNjUxZi00NmZmLTkzYjIt
OTQ5NjYyYjI3MWIyLzEvdl9kcUJ1cWlvRHg1a1RSMUNiaGdqMHB4Qng4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8xNDU5NDMtNjUxZi00NmZmLTkzYjItOTQ5NjYyYjI3MWIy
LzEvdl9kcUJ1cWlvRHg1a1RSMUNiaGdqMHB4Qng4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZfGrsekA
0LB7z9JPm77cpf4vu9mj3TWTTOFWsWDdRhf1ZQ0b/2rs9z78zUwt6V7APKDkwlc5
yUIrorMH+yJjTFXc9yqocExVj4czNMLO9vvA0IH9TXnweVGMjFYDT8YzmLlRfkY/
KdF65QLQh/572kLrPFtxXvkwiu8WXz/lAOSCgdPIYR6YFJ3xPqkY49tPAobEbldM
4U3jZpEkkV9oOY4nNF+HdSz9BKd5BO4a4oAd+cRKZdMUx1yxT7EVClke6VRmzj3W
I6DCfRqLFthQFzI87a0QUaU1d4Tc2krx9vspII4dnqVZ2ntLT4fyVqaLfj7zdFIH
z+Jdn8QK6MRhTA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:28:01 2026 by rpki-client