Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
File: q838GnxSDPjRdykgjoXosZfErf8.mft (raw, json)
Hash identifier: hKclgFeow6VvaGX1G3X4+tD6dbpPl6km0Fxhu09hESU=
Subject key identifier: C3:56:E4:4D:08:17:51:C5:D9:3C:56:03:91:41:B8:B8:CE:D5:4D:E4
Authority key identifier: AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
Certificate issuer: /CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Certificate serial: 019F932489038640FA9630F7F0899DA34B7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
Manifest number: 0FFA
Signing time: Fri 24 Jul 2026 08:01:12 +0000
Manifest this update: Fri 24 Jul 2026 08:01:12 +0000
Manifest next update: Sat 25 Jul 2026 08:01:12 +0000
Files and hashes: 1: Oyzshlci-9jPVV78Pg3C9EqgWpQ.roa (hash: bjeZr+jgrrjOajuuWHyD7Sxiyz43CZIWH0Yks80/PvM=)
2: ZGp0FDP8qvB8cgr-1S3_xdm1jys.roa (hash: 9rCAt6z+0Tts+8L8PuhpJuck/ju+E8/tnJZUEMT7+6Y=)
3: q838GnxSDPjRdykgjoXosZfErf8.crl (hash: Vsyh4CveAWENvdiS3HcBgyhlVuBb6OQTIpVObCFas8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:89:03:86:40:fa:96:30:f7:f0:89:9d:a3:4b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Validity
Not Before: Jul 24 08:01:12 2026 GMT
Not After : Jul 25 08:01:12 2026 GMT
Subject: CN=c356e44d081751c5d93c56039141b8b8ced54de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6d:b8:60:c1:ad:c5:32:fc:6d:f7:04:8a:d9:
62:f7:2f:ee:d4:4e:08:5e:f5:d9:98:05:f0:5c:c1:
17:91:84:00:c6:d4:58:6d:5d:0b:2a:c0:7f:83:4f:
7e:d4:b6:41:8d:90:6a:79:33:19:11:c4:c2:26:b7:
f9:a1:e6:0c:a0:d8:fd:b6:88:b6:bd:58:0d:53:49:
58:da:00:4a:d2:6d:57:30:dc:8b:0c:2a:fb:ee:c0:
76:ae:de:5e:ad:b3:cf:20:bb:37:d5:3a:83:db:99:
e1:d6:60:4e:85:63:db:46:cc:79:df:6c:fa:61:62:
11:08:97:5a:92:b1:21:26:8f:ca:dd:18:e4:07:5b:
e8:e5:3e:de:c4:26:a6:9d:0c:74:2b:c2:88:40:fc:
81:ba:89:6c:44:97:92:be:e5:cb:d8:33:0e:f6:7c:
ea:bb:d9:44:11:22:15:a5:18:ce:a4:a8:cd:e2:82:
8f:88:26:9f:8c:eb:a3:bb:28:fb:83:1d:27:43:50:
18:6d:ec:77:30:30:0b:73:52:10:22:1e:ce:14:ac:
c4:72:3c:70:a7:ee:be:35:06:46:0c:b0:6d:37:52:
1d:97:7e:e5:31:17:db:d0:8a:84:a8:cf:72:b4:ae:
d9:3a:d7:02:49:85:fa:94:25:76:66:17:d1:26:8d:
8e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:56:E4:4D:08:17:51:C5:D9:3C:56:03:91:41:B8:B8:CE:D5:4D:E4
X509v3 Authority Key Identifier:
keyid:AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:9c:8c:5a:28:67:65:b5:b7:f1:fe:aa:2c:5f:ab:50:86:3d:
0f:48:50:87:8e:4b:32:0b:93:f9:d8:ea:d8:61:25:aa:6c:30:
49:6a:72:c1:fc:29:4d:e1:6e:4e:be:71:8b:bc:a1:0f:98:e4:
4a:06:95:8e:0a:40:d5:83:31:5f:a0:44:8c:dc:b7:80:1c:4c:
f8:ab:3b:71:1c:df:37:5c:76:02:ff:9f:40:47:94:f0:7f:dd:
8c:a9:b9:e3:83:5a:cf:2a:42:79:91:16:6f:08:11:e8:c1:24:
30:aa:c5:b7:2b:14:05:c5:48:3f:99:dd:4b:ed:b9:c4:df:05:
b6:69:85:c7:a7:19:6b:dd:a4:13:93:a9:90:b0:44:d6:b5:ac:
cb:7c:aa:00:51:41:c4:02:f9:cd:5c:ad:f4:11:61:5f:20:53:
b0:91:8f:a2:47:32:e3:0f:d0:89:de:89:3b:77:9c:40:2f:b3:
39:f7:3c:c4:09:f0:04:a1:e2:a5:23:cc:6c:3b:1d:b4:5a:2b:
dc:4d:5a:bf:e7:ba:32:a5:7f:ec:0b:dc:33:41:77:ae:1e:96:
7c:8e:28:0c:a2:6b:68:39:47:b6:96:4a:86:0a:c9:de:97:e4:
a9:68:63:48:03:2c:c2:dc:86:df:ad:c0:c7:d2:7b:a1:27:75:
6f:92:38:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:40:06 2026 by rpki-client