Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
File: qOdYAufvuGU-OvWcvxvAZTi8pnE.mft (raw, json)
Hash identifier: kZYdg8T4uF9bEnaAbh8o1loTOtWcnKGVhzW5+iHDSgM=
Subject key identifier: F1:28:7C:C3:69:1C:E4:F5:DC:6B:BD:6B:03:3E:79:CD:3D:0A:DA:60
Authority key identifier: A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71
Certificate issuer: /CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
Certificate serial: 019F939216558893CA07DFDC71DE38096E62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
Manifest number: 17FD
Signing time: Fri 24 Jul 2026 10:00:52 +0000
Manifest this update: Fri 24 Jul 2026 10:00:52 +0000
Manifest next update: Sat 25 Jul 2026 10:00:52 +0000
Files and hashes: 1: H2T8PA1785l6gX-iVp9IuPaA4Nc.roa (hash: 6faWeYIv5Ai9qI/fX55pW1xZn22WZewYCnXhS25+v6I=)
2: Xz4dqhqCzoZvF10IK-TkgPiAc5Q.roa (hash: ZFUgfRsBRCs1X5BDvrArX90/CdgfBgfrW7Rw9sq2N84=)
3: lyOH-P2_hH5Ugem7r8kpnkt99SI.roa (hash: GiPFjQfoJkQaMedHXbS4M3+BR9UAmP0J6PtJlsbWkGg=)
4: qOdYAufvuGU-OvWcvxvAZTi8pnE.crl (hash: ipnJAvCQ7f+Cy1Xj4YoUV2JWbvI/8zGkCkFTGcJaqRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:16:55:88:93:ca:07:df:dc:71:de:38:09:6e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
Validity
Not Before: Jul 24 10:00:52 2026 GMT
Not After : Jul 25 10:00:52 2026 GMT
Subject: CN=f1287cc3691ce4f5dc6bbd6b033e79cd3d0ada60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:69:32:0f:2f:18:c0:73:08:bc:0f:1f:7a:89:
e9:8c:f4:59:7b:43:a7:a9:09:03:48:84:53:29:fb:
5c:2f:58:f4:31:6f:f6:a6:2f:79:4a:74:71:88:a6:
c3:fb:f5:10:bd:9a:04:2b:ff:36:06:4e:3d:c6:b7:
c2:02:c9:2d:7a:69:90:ff:aa:ac:a1:83:f1:b8:db:
a0:52:5a:cd:5f:37:80:bc:6e:3b:50:ab:b9:96:55:
18:0b:66:ee:90:fa:e3:89:b4:c4:aa:b7:24:74:ca:
75:55:35:fd:1e:d8:d0:51:f2:bb:32:07:c0:c3:28:
66:d2:dc:a2:0f:ae:90:ec:5f:0f:d0:d4:2a:5b:53:
12:3f:3e:8a:71:24:23:cc:15:e9:ef:b5:f4:bd:7a:
31:f0:c2:cb:82:e4:21:ad:a6:58:8f:7f:b2:2a:ee:
fd:4b:69:dc:bd:ad:e8:f1:07:e0:d3:72:9c:90:82:
4e:cd:36:e6:38:32:28:20:ef:5b:c5:d9:29:0a:20:
37:0f:98:5e:c9:d0:ec:ab:e5:c3:c1:9a:47:6d:6b:
34:b9:9c:d0:1e:0b:bf:df:db:fd:ab:07:f9:8f:9f:
03:1f:b0:70:49:7d:1e:06:e9:52:bd:f8:d8:8c:3a:
99:b7:6e:ec:a6:e8:c0:2d:28:27:ec:37:84:ae:ce:
37:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:28:7C:C3:69:1C:E4:F5:DC:6B:BD:6B:03:3E:79:CD:3D:0A:DA:60
X509v3 Authority Key Identifier:
keyid:A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:0d:05:12:e8:02:60:e0:af:bd:d2:2c:5f:17:d9:70:3d:02:
63:66:3b:2f:2a:dd:a1:01:8b:01:2b:91:4c:a6:1d:a4:eb:c7:
26:f3:f6:18:16:ce:73:3b:83:27:b3:79:d6:1a:4d:77:4a:6d:
b7:92:1c:0e:9a:25:73:65:09:68:89:22:a2:c9:25:7e:d4:61:
2f:6d:73:db:6f:da:1c:17:9b:1d:77:11:de:bb:67:8d:f7:de:
af:94:75:f9:8e:d5:56:be:9a:a2:cc:57:1e:c1:4b:21:f3:4b:
dd:e3:4d:e3:ec:76:d0:10:c1:cf:a3:ac:65:04:ee:0e:13:52:
cd:81:c0:8b:99:16:bb:38:61:1a:92:9d:cf:07:2f:22:6a:13:
c8:e5:00:f8:41:e3:49:5a:ad:79:6f:74:15:d2:83:97:b7:c4:
00:fb:71:61:b0:70:37:ae:f7:9d:df:5d:ec:f6:3e:3a:bb:d4:
51:9c:ad:bc:56:3e:99:d5:5f:d3:16:97:39:9d:cb:6c:51:da:
96:b7:e2:6b:4e:97:c4:dc:2f:c4:6b:82:80:bb:35:53:ad:a6:
14:78:a6:bf:72:63:24:d4:1c:7f:24:f7:ce:47:5f:78:d1:b0:
45:59:42:ff:6e:16:db:f0:23:41:25:70:04:41:f4:c6:e2:70:
5f:f4:23:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:27:16 2026 by rpki-client