Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a2b150-c611-4d80-a0cc-981150a18a2b/1/qnXo86HZziwBs21atvwvdScw6-o.mft
File: qnXo86HZziwBs21atvwvdScw6-o.mft (raw, json)
Hash identifier: wQS7zHGjWbOA1QBdSltpterTL2GoPmFjwyXuysfAAWI=
Subject key identifier: F0:F3:4B:B1:D7:DE:1B:8A:AB:87:AF:48:6A:AD:F7:1E:42:5B:42:FD
Authority key identifier: AA:75:E8:F3:A1:D9:CE:2C:01:B3:6D:5A:B6:FC:2F:75:27:30:EB:EA
Certificate issuer: /CN=aa75e8f3a1d9ce2c01b36d5ab6fc2f752730ebea
Certificate serial: 019F95B817DCD3D965DA83ED05E9FB9A9333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnXo86HZziwBs21atvwvdScw6-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a2b150-c611-4d80-a0cc-981150a18a2b/1/qnXo86HZziwBs21atvwvdScw6-o.mft
Manifest number: 1B
Signing time: Fri 24 Jul 2026 20:01:37 +0000
Manifest this update: Fri 24 Jul 2026 20:01:37 +0000
Manifest next update: Sat 25 Jul 2026 20:01:37 +0000
Files and hashes: 1: DkCaL9a1Sg50I9MaKEAqz29JDnk.roa (hash: qqlwSj00a4I3ubvQqPqYQdyEb8mMWzbShja2vID4TMA=)
2: qnXo86HZziwBs21atvwvdScw6-o.crl (hash: lY5eY0Un1Aav4OP+TaNw+kfTP9ak+zVGEnHzZLx+TzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a2b150-c611-4d80-a0cc-981150a18a2b/1/qnXo86HZziwBs21atvwvdScw6-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a2b150-c611-4d80-a0cc-981150a18a2b/1/qnXo86HZziwBs21atvwvdScw6-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnXo86HZziwBs21atvwvdScw6-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b8:17:dc:d3:d9:65:da:83:ed:05:e9:fb:9a:93:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa75e8f3a1d9ce2c01b36d5ab6fc2f752730ebea
Validity
Not Before: Jul 24 20:01:37 2026 GMT
Not After : Jul 25 20:01:37 2026 GMT
Subject: CN=f0f34bb1d7de1b8aab87af486aadf71e425b42fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9d:c7:63:25:2f:8b:f4:38:8d:11:43:7e:87:
36:79:6d:cb:b3:20:67:1f:cd:73:33:8a:a3:14:d6:
aa:01:ff:e9:ce:3f:1b:54:77:0e:0b:8c:d5:eb:d9:
09:35:8e:e6:84:50:e2:23:db:b3:cb:e4:1d:04:52:
0d:cb:ca:14:d1:ca:4b:3d:14:66:91:cf:d2:cc:bb:
2e:f6:62:2d:e7:9d:1e:55:dc:61:d1:e8:9c:4e:a4:
cb:a9:aa:5f:9e:82:da:91:ea:88:1d:c4:4d:68:a7:
a0:68:5b:e9:e7:81:ee:16:33:87:33:7a:6e:82:8c:
9e:92:50:02:e4:5e:1b:9b:db:ff:8a:44:4c:1b:3a:
d0:29:34:aa:d7:3c:4f:48:71:72:aa:25:c7:47:dd:
e4:33:10:97:9e:c0:06:3b:47:d7:5a:e8:0a:71:2f:
f2:94:52:80:f3:78:c7:f4:e2:40:6e:6f:f4:c7:17:
3a:cf:a4:90:b9:3c:48:7b:10:4e:55:09:ba:8f:1b:
3a:bc:47:a2:32:62:9a:16:01:80:88:14:b0:0f:f8:
63:fa:e7:45:64:e1:76:5f:7c:c8:a5:f8:86:72:bd:
14:74:c2:97:52:81:87:d9:26:b7:e2:bb:95:88:61:
f9:4c:17:f3:6d:fc:a5:ae:48:ba:b6:a2:c4:3d:11:
d9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F3:4B:B1:D7:DE:1B:8A:AB:87:AF:48:6A:AD:F7:1E:42:5B:42:FD
X509v3 Authority Key Identifier:
keyid:AA:75:E8:F3:A1:D9:CE:2C:01:B3:6D:5A:B6:FC:2F:75:27:30:EB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnXo86HZziwBs21atvwvdScw6-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a2b150-c611-4d80-a0cc-981150a18a2b/1/qnXo86HZziwBs21atvwvdScw6-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a2b150-c611-4d80-a0cc-981150a18a2b/1/qnXo86HZziwBs21atvwvdScw6-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:88:23:d5:c4:46:b2:93:f6:d9:b4:95:3e:c7:7a:bf:c2:60:
d6:63:a1:22:a8:93:97:28:0c:43:92:ab:a1:fb:d1:a9:b3:b7:
9f:9c:96:f7:26:58:53:ab:72:07:47:1e:1b:a7:4c:7b:02:33:
14:cc:23:81:a8:12:93:be:c2:fa:15:c9:b7:fa:52:bf:f4:1f:
9d:c6:f5:2f:d6:20:79:a3:d1:b1:48:f2:c7:69:a5:dd:25:63:
f8:f1:4f:0c:24:24:df:8f:0e:6d:ad:3c:cc:e5:be:4d:18:91:
f3:95:79:c9:87:10:4e:d1:30:77:79:8a:de:42:23:8d:81:fa:
69:9c:0a:5b:bb:34:e2:68:1c:6a:be:5b:df:19:0b:33:6b:d9:
c7:1b:f9:d5:5c:fa:ec:f1:f6:a3:6a:9b:8c:08:6a:5b:fd:d5:
87:56:c9:91:26:6e:23:53:0c:4b:28:e0:a1:b6:1b:e4:48:41:
3e:67:67:3c:39:79:0f:4f:6e:84:04:0c:04:32:1d:de:2f:87:
e7:3c:b6:f2:71:ac:4c:83:0f:85:fa:06:d2:9f:94:ff:68:2c:
87:53:3b:3b:b8:3b:d0:e6:94:d5:c5:3d:e3:d2:a7:b4:f6:f2:
94:76:e4:6d:f4:8b:fd:1e:a8:c5:b4:7e:3a:8e:f5:94:8c:f9:
f6:d5:d2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:07:13 2026 by rpki-client