Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
File: qDOwgB1A0FhJBy4vyBITsCXSorw.mft (raw, json)
Hash identifier: EFqyG1FzpIy18GASgpYzU9SfFvFoQjvwNgoirntEnO8=
Subject key identifier: BD:B2:49:74:9A:98:F3:E6:70:7B:DA:02:AE:B3:90:6D:45:CF:C1:C6
Authority key identifier: A8:33:B0:80:1D:40:D0:58:49:07:2E:2F:C8:12:13:B0:25:D2:A2:BC
Certificate issuer: /CN=a833b0801d40d05849072e2fc81213b025d2a2bc
Certificate serial: 019F83E7B91AA66AB5CCA854F604CE4B8E4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
Manifest number: 0373
Signing time: Tue 21 Jul 2026 09:00:29 +0000
Manifest this update: Tue 21 Jul 2026 09:00:29 +0000
Manifest next update: Wed 22 Jul 2026 09:00:29 +0000
Files and hashes: 1: 8dx6CDeeDv1yQZPzxZW_CCsiWuI.roa (hash: d7H5FvAS5k9Xu18WJ58VOwYw00U/ixBu9RyNPrcPus0=)
2: qDOwgB1A0FhJBy4vyBITsCXSorw.crl (hash: EQereIAzeQHsg8SPEx/0lWT2JkLNga/gZe/ePvq5wZg=)
3: vZtaog6rpuNltteEkdUJlHMVrcw.roa (hash: 7RtaWZDq5AUONnDyPCbjKsuXwOlICNTJNhflkjZkwLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:e7:b9:1a:a6:6a:b5:cc:a8:54:f6:04:ce:4b:8e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a833b0801d40d05849072e2fc81213b025d2a2bc
Validity
Not Before: Jul 21 09:00:29 2026 GMT
Not After : Jul 22 09:00:29 2026 GMT
Subject: CN=bdb249749a98f3e6707bda02aeb3906d45cfc1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:63:69:74:e4:02:89:02:ab:33:6b:01:90:54:
93:c9:88:1e:71:a6:e1:db:38:d1:b8:48:5d:04:36:
29:9c:ed:82:d5:fb:97:b6:6b:91:b0:3f:a8:a7:70:
7d:88:0e:b0:cb:61:cc:e4:f8:96:b7:ad:bc:35:6c:
23:3f:7b:63:42:19:14:bd:51:d2:40:5a:43:9a:df:
f3:82:01:5d:fd:a0:35:3f:c1:7e:60:e2:89:04:a0:
54:0e:a9:bc:21:2a:08:8e:16:96:6b:05:d7:f1:da:
99:f6:d7:ee:78:99:3b:9d:c2:24:94:5c:61:e8:81:
04:fa:45:ea:cc:27:8c:62:b5:a8:a1:91:6d:35:ad:
cb:d0:6c:ac:75:66:ae:f6:da:bc:4b:23:d1:44:2f:
12:f9:64:44:96:24:90:3a:52:0a:c4:d5:33:29:65:
b9:41:d7:c4:46:aa:ea:d5:e8:67:7a:0e:65:1d:25:
34:fd:07:63:75:b3:04:d3:9f:5e:bd:a9:3a:9b:f6:
3c:63:96:e7:1e:ef:6d:4e:65:84:c0:a3:e1:dc:25:
64:39:92:8c:ff:d7:5c:18:f0:3d:57:eb:3a:02:55:
70:4c:1b:e1:2a:da:61:b6:f8:c5:f9:ed:70:ad:8c:
4d:27:0a:5b:53:37:31:e0:13:93:4e:47:fb:1f:69:
f1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B2:49:74:9A:98:F3:E6:70:7B:DA:02:AE:B3:90:6D:45:CF:C1:C6
X509v3 Authority Key Identifier:
keyid:A8:33:B0:80:1D:40:D0:58:49:07:2E:2F:C8:12:13:B0:25:D2:A2:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:9c:3e:3a:9a:0c:b5:14:17:27:a6:af:8d:c4:1d:ed:28:1b:
cb:0f:5d:b1:50:18:2d:74:2e:5b:c3:a8:0b:f1:05:03:86:41:
43:09:d9:f7:2d:33:3c:6b:92:71:00:b8:0d:86:9d:56:f6:6b:
c7:87:99:b8:1d:90:16:fb:84:93:a2:a6:92:66:88:32:ef:a8:
35:79:c8:6f:cf:a1:50:4f:2e:89:19:8f:b2:8b:b0:f9:a2:89:
b2:52:94:fc:14:0c:69:37:60:bb:92:a9:42:af:d8:f7:f6:86:
dd:6b:1a:e0:3b:05:3e:d3:3f:74:80:4b:e0:1e:a5:c6:e9:e8:
b9:cb:1e:33:6b:16:8a:49:95:ec:57:83:2d:95:c0:ef:15:38:
ab:aa:b3:6d:d6:38:cf:3f:66:9d:85:c4:93:2f:04:96:f1:36:
24:47:de:0c:8c:2c:23:8a:09:75:48:94:dc:a9:cc:57:0a:3d:
18:a3:bc:08:a1:7e:60:54:32:1a:b1:95:e5:46:03:41:6a:bf:
40:db:ea:1a:62:39:b2:92:6a:70:e7:4a:83:df:70:77:77:95:
22:e8:79:4b:d2:6e:28:4c:d7:27:5f:85:3c:d0:cb:68:14:c7:
17:a2:5a:1b:7d:b8:97:df:bf:21:0c:63:24:4d:46:94:4e:54:
20:d5:9f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:15:07 2026 by rpki-client