Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
File: t0QwmQgmnlOLK0-pYzcMnsIHeng.mft (raw, json)
Hash identifier: oyALnUN7G/bqxQdpHx46gzN1bYYZ134utU5EU4gDizY=
Subject key identifier: B8:8C:26:1B:AF:44:DF:83:BE:D7:C9:14:6E:95:B2:12:58:92:AC:14
Authority key identifier: B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78
Certificate issuer: /CN=b744309908269e538b2b4fa963370c9ec2077a78
Certificate serial: 019F8EA2D3F7F57A5EE9C4033B5309A27859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
Manifest number: 1417
Signing time: Thu 23 Jul 2026 11:01:03 +0000
Manifest this update: Thu 23 Jul 2026 11:01:03 +0000
Manifest next update: Fri 24 Jul 2026 11:01:03 +0000
Files and hashes: 1: 6Ftx8Zws0EArRVC2i8S0_U_teiE.roa (hash: 7fbXsad6LDVhAfWE8WJEJDQ3QGP+dEI28LUew1x9B8A=)
2: AZAVETW5nGbM4Ib7koJRmOOqy04.asa (hash: iabYHg5cc7CrHac7c0hzecT2lUuKxBFUzv+J4PC7fgk=)
3: t0QwmQgmnlOLK0-pYzcMnsIHeng.crl (hash: HBshcFWzAwZ2bdvs1Do15UoHGWfqTURvXqbIpgXZzm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:d3:f7:f5:7a:5e:e9:c4:03:3b:53:09:a2:78:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b744309908269e538b2b4fa963370c9ec2077a78
Validity
Not Before: Jul 23 11:01:03 2026 GMT
Not After : Jul 24 11:01:03 2026 GMT
Subject: CN=b88c261baf44df83bed7c9146e95b2125892ac14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d0:25:eb:63:f4:7b:f1:d3:e3:97:b9:f4:68:
0c:20:55:92:32:95:60:02:e4:60:ca:2b:80:d5:a6:
17:ef:6d:08:ae:c0:d5:fd:4c:61:7c:1b:80:66:e2:
f5:97:a2:8e:93:66:34:65:a1:97:5d:a8:dd:3e:09:
54:20:8f:b8:ca:be:76:3a:36:a6:84:5f:cf:7c:09:
68:72:62:d3:44:0a:70:b6:eb:f6:59:ee:94:97:5a:
02:ea:df:6c:b6:05:b3:58:4a:41:4b:25:cf:d0:00:
59:e6:eb:7e:a2:cc:41:b3:15:f6:94:ed:30:7f:b3:
f4:7a:66:31:b0:27:df:5c:53:fa:8f:a8:58:3f:97:
31:94:12:66:4f:b8:75:bf:89:f5:61:67:5e:17:cc:
20:dc:29:69:cd:a0:75:ca:ac:9f:4f:22:7e:e9:e8:
52:ea:6d:06:e8:c8:c1:95:f9:fd:57:c3:90:d7:2f:
43:57:42:5c:80:d3:5d:1e:2b:15:5e:fc:04:7e:8b:
93:c2:03:1f:48:f0:36:c8:c7:68:4a:82:07:ea:83:
42:cc:e1:74:08:61:29:c7:f1:9e:a4:43:13:ac:fa:
d3:e6:e7:75:84:0b:7e:30:67:37:0e:6c:8d:c9:6d:
c9:b0:20:4b:95:23:df:00:14:78:76:9e:b8:03:11:
9d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8C:26:1B:AF:44:DF:83:BE:D7:C9:14:6E:95:B2:12:58:92:AC:14
X509v3 Authority Key Identifier:
keyid:B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:26:14:4e:f9:45:e3:6d:4e:9f:a9:30:f9:e7:60:96:8a:8d:
bd:6a:a1:09:04:0d:d8:91:ff:ae:9d:27:e4:f1:b3:df:ce:f9:
d2:ef:45:33:6e:e0:41:40:01:f5:11:d4:fc:a9:97:a2:8d:a7:
a3:73:ce:32:5d:9a:30:40:f9:6d:77:2d:96:0e:c8:bc:ed:4c:
f9:44:d3:67:2e:6d:a7:8b:5f:4d:9a:6e:50:2f:b5:9a:e7:2d:
aa:ba:0f:76:82:83:79:73:fc:fb:ff:7d:3b:e8:11:a1:30:7e:
23:50:eb:59:f8:50:ae:d5:36:6e:9b:d9:02:17:15:7f:e2:e9:
7a:e5:ba:c9:e0:50:28:0c:3c:65:9f:98:7f:8b:b2:59:05:ac:
84:40:ab:0b:99:8c:96:bb:08:32:79:d0:cd:82:68:90:5e:e4:
65:d7:39:0a:b7:0e:3a:81:27:e4:e8:9f:5e:89:2c:c2:92:9b:
26:26:87:35:73:04:7a:ec:c3:fa:4d:6f:6e:9d:6d:3d:94:2e:
a1:91:c9:66:48:3b:89:b1:cb:29:95:38:b7:e3:72:14:83:b5:
94:3f:ac:78:ab:e1:8d:8e:58:cb:b1:65:cd:e1:ba:ff:d9:cf:
2e:62:6d:0a:1c:27:23:c8:8a:f8:90:f3:9e:c2:57:e5:28:28:
de:83:46:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+OotP39Xpe6cQDO1MJonhZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NDQzMDk5MDgyNjllNTM4YjJiNGZhOTYzMzcwYzllYzIw
NzdhNzgwHhcNMjYwNzIzMTEwMTAzWhcNMjYwNzI0MTEwMTAzWjAzMTEwLwYDVQQD
EyhiODhjMjYxYmFmNDRkZjgzYmVkN2M5MTQ2ZTk1YjIxMjU4OTJhYzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndAl62P0e/HT45e59GgMIFWSMpVg
AuRgyiuA1aYX720IrsDV/UxhfBuAZuL1l6KOk2Y0ZaGXXajdPglUII+4yr52Ojam
hF/PfAlocmLTRApwtuv2We6Ul1oC6t9stgWzWEpBSyXP0ABZ5ut+osxBsxX2lO0w
f7P0emYxsCffXFP6j6hYP5cxlBJmT7h1v4n1YWdeF8wg3ClpzaB1yqyfTyJ+6ehS
6m0G6MjBlfn9V8OQ1y9DV0JcgNNdHisVXvwEfouTwgMfSPA2yMdoSoIH6oNCzOF0
CGEpx/GepEMTrPrT5ud1hAt+MGc3DmyNyW3JsCBLlSPfABR4dp64AxGdHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLiMJhuvRN+DvtfJFG6VshJYkqwUMB8GA1UdIwQY
MBaAFLdEMJkIJp5TiytPqWM3DJ7CB3p4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDBRd21RZ21ubE9MSzAtcFl6Y01uc0lIZW5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80NjUyZTgtNWQyMC00MmY2LWE3Mzkt
ZDU0OTIxNjA0ZWNkLzEvdDBRd21RZ21ubE9MSzAtcFl6Y01uc0lIZW5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS80NjUyZTgtNWQyMC00MmY2LWE3MzktZDU0OTIxNjA0ZWNk
LzEvdDBRd21RZ21ubE9MSzAtcFl6Y01uc0lIZW5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANSYUTvlF
421On6kw+edgloqNvWqhCQQN2JH/rp0n5PGz38750u9FM27gQUAB9RHU/KmXoo2n
o3POMl2aMED5bXctlg7IvO1M+UTTZy5tp4tfTZpuUC+1muctqroPdoKDeXP8+/99
O+gRoTB+I1DrWfhQrtU2bpvZAhcVf+LpeuW6yeBQKAw8ZZ+Yf4uyWQWshECrC5mM
lrsIMnnQzYJokF7kZdc5CrcOOoEn5OifXokswpKbJiaHNXMEeuzD+k1vbp1tPZQu
oZHJZkg7ibHLKZU4t+NyFIO1lD+seKvhjY5Yy7FlzeG6/9nPLmJtChwnI8iK+JDz
nsJX5Sgo3oNGAw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:24:47 2026 by rpki-client