Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
File: qGBDVsdQGuIQSyzO087cXb3BFjs.mft (raw, json)
Hash identifier: 2t/Z4Fq8AnxiEyZGwLgDgDlkYrNU+6WsgB1YYDvZZhA=
Subject key identifier: F5:2B:21:D6:D1:89:A6:A4:50:88:DE:A1:AF:62:01:9D:66:91:D3:62
Authority key identifier: A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
Certificate issuer: /CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Certificate serial: 019F916D94EEA915E6439CC236174DA8579D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
Manifest number: 0A88
Signing time: Fri 24 Jul 2026 00:01:45 +0000
Manifest this update: Fri 24 Jul 2026 00:01:45 +0000
Manifest next update: Sat 25 Jul 2026 00:01:45 +0000
Files and hashes: 1: 7bHKsta4Dp1Yop5z_TE4GuyF-pw.roa (hash: D3+G4Ub921rB7gMLWBKfq6fOLKtP+5fJMq67UB4TEGk=)
2: E6joSh_KCsRZIeJuWns6mUSAvaQ.roa (hash: /pkjUktJxl5tikLBDBKNXbabaHGDBXecObDRlAAJ4OY=)
3: qGBDVsdQGuIQSyzO087cXb3BFjs.crl (hash: LUHwqgJvAyLNNTQHMhcdIeEn/bxJ/SgPTtuC3byRwxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:94:ee:a9:15:e6:43:9c:c2:36:17:4d:a8:57:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Validity
Not Before: Jul 24 00:01:45 2026 GMT
Not After : Jul 25 00:01:45 2026 GMT
Subject: CN=f52b21d6d189a6a45088dea1af62019d6691d362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5f:37:06:de:28:a0:9f:94:c4:b9:12:17:7c:
6b:9c:da:e9:42:31:6c:86:21:f0:3d:63:28:3f:7e:
1e:fb:ec:8b:e8:24:73:55:00:92:c9:3f:eb:18:50:
79:d4:47:9a:93:68:11:76:ac:1e:4e:d8:93:9e:58:
d3:a0:ac:99:4e:d2:89:d3:95:5f:ca:dc:c0:2c:07:
7c:65:06:40:2d:bf:6d:ce:e4:54:d8:33:90:fd:1f:
9a:d4:6d:4b:b8:02:f6:8e:8c:73:8c:e1:9c:72:93:
c9:98:fc:15:f3:ff:e1:8f:17:87:ec:00:02:63:10:
f8:5f:49:00:54:30:ea:dd:95:32:9b:bd:bd:07:00:
23:94:9d:58:5c:73:48:e5:01:30:70:87:da:18:f7:
a9:ff:65:bd:ce:07:49:5b:1f:20:14:07:d6:0b:63:
fa:c3:e4:da:24:8a:e3:44:a2:e6:19:c6:6d:95:ee:
97:ff:a8:24:de:e6:fa:ee:c7:fd:60:34:a0:8b:69:
e3:7f:5a:cb:50:cf:aa:05:9f:f6:b2:66:6f:9f:73:
01:0f:d2:fa:e7:35:ad:19:5b:7b:dc:1c:1c:67:66:
d0:6e:91:5a:9a:8a:17:80:65:28:ca:a9:0d:5f:fc:
cd:1c:5c:2c:72:0e:ee:a4:94:57:96:a0:8e:c5:25:
4b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2B:21:D6:D1:89:A6:A4:50:88:DE:A1:AF:62:01:9D:66:91:D3:62
X509v3 Authority Key Identifier:
keyid:A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:62:81:64:7f:ef:2a:c9:2c:96:86:ad:58:85:89:64:c2:c7:
a2:e1:4d:46:c3:ba:21:6e:ae:c1:3c:98:7d:2e:9f:50:ad:16:
8e:b4:88:7e:41:b2:9f:78:5f:d8:8f:fb:64:81:d2:95:38:82:
66:8e:61:7b:c3:59:51:49:bc:9f:fc:dc:19:9b:5a:14:dd:d1:
f9:c7:6c:a9:22:e0:bc:e0:e3:14:a8:ab:a5:2f:1a:f9:db:83:
28:0e:1a:94:78:15:82:a6:f2:5f:f7:96:dc:ec:ff:d5:1f:c7:
0d:93:0f:a2:2f:d9:6c:1b:60:14:87:f3:e8:6a:58:e2:d8:01:
aa:5a:c2:e1:f9:fd:32:4e:45:90:92:91:0b:90:b0:e7:bc:5c:
d5:d4:4c:8d:ce:ab:7a:45:fc:9d:ba:66:54:5c:3d:bb:90:81:
71:30:02:d1:1d:61:21:0c:66:19:50:e3:2a:96:4b:5f:1c:75:
b1:c7:b6:78:ce:54:55:15:18:fd:4a:d7:2e:ae:b8:65:c9:7b:
bf:4a:37:31:9e:ba:d1:7c:8d:f0:e4:a5:69:81:f9:bb:20:d0:
ff:5c:27:8d:16:75:5c:20:66:9f:13:a3:78:22:e7:33:88:09:
c2:85:f2:2f:34:0d:0a:b9:8d:81:1a:6d:93:ea:2d:d1:1e:a7:
36:b9:31:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:34:47 2026 by rpki-client