Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
File: qx0OfoGLr5p6-5hmEkKSphqvuMo.mft (raw, json)
Hash identifier: 4gzNHwH2WYYm84NgeLQWlb3xp8uGIULe/yMYUllBzzE=
Subject key identifier: 24:BC:2A:0A:00:52:B5:18:C8:7D:AA:25:2B:AE:7F:B1:BA:C1:FC:53
Authority key identifier: AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
Certificate issuer: /CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Certificate serial: 019F93245A666A133C7872BB0394A0E70F1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
Manifest number: 19D0
Signing time: Fri 24 Jul 2026 08:01:00 +0000
Manifest this update: Fri 24 Jul 2026 08:01:00 +0000
Manifest next update: Sat 25 Jul 2026 08:01:00 +0000
Files and hashes: 1: E_pvlXfH-_8Fl9xtt4-r8I-I2Wk.roa (hash: CAT6hhcy6gNQOJHA0DTluxIpTJS1s6DqnJJcDnZ2tTQ=)
2: HrIDUx_18W3aDcgzp0a-tZsGpP8.roa (hash: cPyVftTbNGSIIN5cX0+FBbwXCXBqNj2p4PsBxHd4Gn0=)
3: qx0OfoGLr5p6-5hmEkKSphqvuMo.crl (hash: z3eNeWAee0GKHzWvbFRVZpsFyFG7xp8QcN5s+vh74PM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:5a:66:6a:13:3c:78:72:bb:03:94:a0:e7:0f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Validity
Not Before: Jul 24 08:01:00 2026 GMT
Not After : Jul 25 08:01:00 2026 GMT
Subject: CN=24bc2a0a0052b518c87daa252bae7fb1bac1fc53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:68:19:c4:05:22:71:40:36:c6:e3:15:d9:a7:
7d:27:0e:d9:e2:df:01:fe:3b:6d:c3:55:40:b4:23:
03:c9:df:8d:df:a2:e5:47:3a:60:5d:d9:57:3e:f3:
a2:b6:50:21:16:65:2e:60:db:0b:48:29:e0:62:c7:
85:7c:15:5b:f3:b4:ea:9a:67:ec:b9:2b:01:38:98:
b7:54:ee:05:89:36:f1:85:da:34:a1:5b:39:25:06:
34:fc:ae:ee:d4:a9:f7:fb:3a:0e:5c:19:f0:26:3c:
c9:5d:ec:4f:7e:6d:e8:08:3f:ba:f1:cd:ac:87:68:
d7:ca:15:3b:3b:a4:3b:4a:5d:21:8c:a5:cb:d1:7a:
03:f2:9b:d3:46:76:b9:ab:2e:36:75:8a:2a:b1:3e:
dc:88:c0:f4:bf:24:2c:4b:80:ea:7c:76:ce:d0:73:
55:68:8c:eb:ca:ad:c1:f5:15:03:17:5a:5e:7e:a0:
72:df:0f:55:45:89:b3:1f:52:c2:2d:df:ea:94:19:
d8:a0:2c:95:d2:ba:9b:66:d9:4a:56:c3:df:b9:a5:
99:dd:7f:df:7c:cd:ee:cc:3a:76:fa:81:20:06:7d:
be:34:ce:c6:e3:7e:b5:b9:cc:ea:bf:85:8e:d3:74:
8c:76:bc:1e:6f:3f:c7:2e:9f:fa:1a:9f:8b:70:9e:
a5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BC:2A:0A:00:52:B5:18:C8:7D:AA:25:2B:AE:7F:B1:BA:C1:FC:53
X509v3 Authority Key Identifier:
keyid:AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:bb:61:bb:a8:e5:cd:11:9d:9c:55:ed:19:28:60:67:05:52:
80:e9:34:2e:a4:00:2c:52:8d:0c:c1:ef:be:c0:c8:46:54:d9:
9a:59:3e:29:e0:a6:96:99:45:ec:07:a8:01:82:73:f5:5b:6d:
0e:32:b6:fb:f3:16:d6:45:07:f2:2f:de:d2:d3:0a:4c:0a:06:
23:a5:e1:65:24:a0:ae:70:f4:ee:34:87:78:1c:c0:59:99:ea:
ec:d4:76:33:99:87:e7:4f:fc:da:07:34:21:66:77:01:d0:49:
9a:bb:18:40:ee:9e:b8:66:01:18:06:3f:de:4e:61:47:d4:21:
d1:61:58:87:fd:a8:e1:12:96:b5:e6:d5:95:e6:bd:ff:da:46:
d0:1a:d9:f6:74:b0:ca:ca:c1:d4:6d:64:ff:58:60:38:52:a5:
da:6f:5d:b7:7c:53:ce:10:08:3e:bd:d8:c5:a6:ac:3b:13:cd:
35:34:7d:64:1c:d1:96:2a:4d:df:7c:55:b1:a9:79:b1:4e:65:
43:0b:f0:f3:2e:22:07:ed:17:43:c7:06:71:86:93:e8:76:48:
d0:65:6b:29:57:bf:7b:5e:6e:d7:82:b6:d2:6a:86:06:3f:54:
f2:2d:93:6c:0d:dd:ab:8b:6b:08:45:96:9c:71:b2:10:37:a2:
94:0f:cc:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TJFpmahM8eHK7A5Sg5w8fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMWQwZTdlODE4YmFmOWE3YWZiOTg2NjEyNDI5MmE2MWFh
ZmI4Y2EwHhcNMjYwNzI0MDgwMTAwWhcNMjYwNzI1MDgwMTAwWjAzMTEwLwYDVQQD
EygyNGJjMmEwYTAwNTJiNTE4Yzg3ZGFhMjUyYmFlN2ZiMWJhYzFmYzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGgZxAUicUA2xuMV2ad9Jw7Z4t8B
/jttw1VAtCMDyd+N36LlRzpgXdlXPvOitlAhFmUuYNsLSCngYseFfBVb87Tqmmfs
uSsBOJi3VO4FiTbxhdo0oVs5JQY0/K7u1Kn3+zoOXBnwJjzJXexPfm3oCD+68c2s
h2jXyhU7O6Q7Sl0hjKXL0XoD8pvTRna5qy42dYoqsT7ciMD0vyQsS4DqfHbO0HNV
aIzryq3B9RUDF1pefqBy3w9VRYmzH1LCLd/qlBnYoCyV0rqbZtlKVsPfuaWZ3X/f
fM3uzDp2+oEgBn2+NM7G4361uczqv4WO03SMdrwebz/HLp/6Gp+LcJ6lrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCS8KgoAUrUYyH2qJSuuf7G6wfxTMB8GA1UdIwQY
MBaAFKsdDn6Bi6+aevuYZhJCkqYar7jKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXgwT2ZvR0xyNXA2LTVobUVrS1NwaHF2dU1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8xMjRjMzUtOTUyMy00M2I3LWI3ZWIt
ZWE1OTI2NGY5MDgzLzEvcXgwT2ZvR0xyNXA2LTVobUVrS1NwaHF2dU1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8xMjRjMzUtOTUyMy00M2I3LWI3ZWItZWE1OTI2NGY5MDgz
LzEvcXgwT2ZvR0xyNXA2LTVobUVrS1NwaHF2dU1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAELthu6jl
zRGdnFXtGShgZwVSgOk0LqQALFKNDMHvvsDIRlTZmlk+KeCmlplF7AeoAYJz9Vtt
DjK2+/MW1kUH8i/e0tMKTAoGI6XhZSSgrnD07jSHeBzAWZnq7NR2M5mH50/82gc0
IWZ3AdBJmrsYQO6euGYBGAY/3k5hR9Qh0WFYh/2o4RKWtebVlea9/9pG0BrZ9nSw
ysrB1G1k/1hgOFKl2m9dt3xTzhAIPr3YxaasOxPNNTR9ZBzRlipN33xVsal5sU5l
Qwvw8y4iB+0XQ8cGcYaT6HZI0GVrKVe/e15u14K20mqGBj9U8i2TbA3dq4trCEWW
nHGyEDeilA/M5Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:54:06 2026 by rpki-client