Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
File: qDOwgB1A0FhJBy4vyBITsCXSorw.mft (raw, json)
Hash identifier: EtOjQq/RxBLte+u1kyLy3Zf7ZtvHzdnyoOC19VmvWkE=
Subject key identifier: 41:E3:38:70:51:A2:14:38:68:28:49:E5:9F:87:8B:15:5E:24:79:C8
Authority key identifier: A8:33:B0:80:1D:40:D0:58:49:07:2E:2F:C8:12:13:B0:25:D2:A2:BC
Certificate issuer: /CN=a833b0801d40d05849072e2fc81213b025d2a2bc
Certificate serial: 019F935BAA9BA406C1514073755E6271F776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
Manifest number: 037B
Signing time: Fri 24 Jul 2026 09:01:25 +0000
Manifest this update: Fri 24 Jul 2026 09:01:25 +0000
Manifest next update: Sat 25 Jul 2026 09:01:25 +0000
Files and hashes: 1: 8dx6CDeeDv1yQZPzxZW_CCsiWuI.roa (hash: d7H5FvAS5k9Xu18WJ58VOwYw00U/ixBu9RyNPrcPus0=)
2: qDOwgB1A0FhJBy4vyBITsCXSorw.crl (hash: vGs6rDBuFup1YXvdup9H8JGKDuJjZ9/1wSSEeFfAd2s=)
3: vZtaog6rpuNltteEkdUJlHMVrcw.roa (hash: 7RtaWZDq5AUONnDyPCbjKsuXwOlICNTJNhflkjZkwLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:aa:9b:a4:06:c1:51:40:73:75:5e:62:71:f7:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a833b0801d40d05849072e2fc81213b025d2a2bc
Validity
Not Before: Jul 24 09:01:25 2026 GMT
Not After : Jul 25 09:01:25 2026 GMT
Subject: CN=41e3387051a21438682849e59f878b155e2479c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ed:a9:12:9c:b9:f4:36:6e:86:d9:6c:69:e2:
e4:14:3a:22:3f:1b:d2:a1:ae:f3:c9:f0:82:a3:01:
36:4b:c3:db:60:96:c8:fc:a1:9e:10:65:4b:af:16:
12:95:0e:a2:54:eb:38:29:ea:4b:28:4a:fc:c6:1f:
2e:d0:37:3e:9f:c3:17:43:e4:5c:e2:79:9d:95:0f:
3c:81:79:9d:06:10:88:04:74:0d:3f:f4:d3:7f:ca:
1d:1a:f1:8d:bb:c9:96:13:62:64:bb:53:2d:37:0c:
82:27:3c:a4:e2:75:dd:94:85:d6:f8:ea:0f:49:4b:
e7:da:e0:c8:cd:63:b8:75:af:2e:1c:6b:3b:11:2a:
b8:10:98:46:0c:bd:61:b4:7e:d6:4d:81:eb:e4:57:
fd:58:9a:b6:79:9e:a2:66:c9:19:c8:d2:87:3f:32:
db:2b:1d:c7:70:7d:57:be:2f:83:a2:d7:a0:ce:a6:
da:61:78:fe:ed:7d:e7:73:63:17:11:a3:4c:04:1c:
b8:e7:f1:54:18:5f:39:bd:a2:16:ed:27:20:51:fa:
42:ba:f7:a7:20:52:2a:3b:90:66:80:34:0a:08:bb:
5b:a2:a7:ff:6c:b2:c0:41:8d:57:d0:35:27:7f:3c:
4e:f6:b4:c7:02:91:ab:66:34:43:1e:ea:fc:29:60:
6d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E3:38:70:51:A2:14:38:68:28:49:E5:9F:87:8B:15:5E:24:79:C8
X509v3 Authority Key Identifier:
keyid:A8:33:B0:80:1D:40:D0:58:49:07:2E:2F:C8:12:13:B0:25:D2:A2:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d3:59:95:e0:20:3b:e6:5e:25:f2:62:e0:db:f2:89:ef:23:
ad:dc:bf:c9:5e:d2:7f:77:b1:d6:c6:65:dd:7d:32:d7:42:7f:
b8:6e:ca:f7:42:fe:5e:9c:0d:dd:45:52:b3:9c:d4:5a:9b:ac:
38:dd:b5:ad:e8:2c:c2:d8:67:07:04:fd:c2:b4:23:e2:bb:42:
24:2e:44:b9:3e:9a:dc:32:36:ab:66:33:f3:db:a0:cd:ae:c5:
35:e1:a8:c0:28:26:e9:c2:bd:a2:fd:44:a7:64:5f:c3:de:87:
be:af:b1:25:7c:84:e2:e7:a7:bb:7c:9b:31:86:40:fb:61:9e:
77:a4:87:99:fe:e6:e4:41:be:db:b7:ee:22:3d:ea:fd:9c:d4:
fd:e9:59:30:1b:cd:1d:34:8e:8a:0f:aa:f4:b3:27:b8:9d:a2:
45:2a:52:d9:7e:3e:3a:1e:57:06:d1:65:ba:6c:50:5b:23:fd:
9f:4a:e3:71:55:f3:44:49:3b:33:05:66:65:6f:64:25:13:9e:
ae:c6:18:c9:52:99:0b:bb:dc:c8:6f:3d:90:5b:e0:77:2c:6f:
00:9e:a8:c6:87:2e:b6:0f:ab:e4:92:6e:70:66:63:2a:88:0c:
d5:13:36:a4:76:10:a0:f8:3a:3f:4a:3b:30:62:a8:85:08:7d:
65:81:af:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:40:44 2026 by rpki-client