Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
File: qoXGfyIwng2EwwtUJSlyUyhgUVE.mft (raw, json)
Hash identifier: +vO8fuB97Krm0Ls/nnWpy7XgHMmeMXTg3b4F6WPfYtE=
Subject key identifier: 71:13:42:DA:D1:B0:98:A5:CE:F5:98:3B:38:16:50:8C:D0:B5:B3:71
Authority key identifier: AA:85:C6:7F:22:30:9E:0D:84:C3:0B:54:25:29:72:53:28:60:51:51
Certificate issuer: /CN=aa85c67f22309e0d84c30b542529725328605151
Certificate serial: 019E7C31C00AF3181ED3AD4F7D9929BDCC0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
Manifest number: 0FB8
Signing time: Sun 31 May 2026 04:01:35 +0000
Manifest this update: Sun 31 May 2026 04:01:35 +0000
Manifest next update: Mon 01 Jun 2026 04:01:35 +0000
Files and hashes: 1: qoXGfyIwng2EwwtUJSlyUyhgUVE.crl (hash: K6XrNM9eN0lXShwjMuJZkQ4xE67L92Lvjfx3kUq05jM=)
2: skeAadI4AP4ZvpAKWtTlCV07X48.roa (hash: teA/npSH8zrPPm6lOFHsXXFeJadHqVvDUxx+vJRFlGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jun 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7c:31:c0:0a:f3:18:1e:d3:ad:4f:7d:99:29:bd:cc:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa85c67f22309e0d84c30b542529725328605151
Validity
Not Before: May 31 04:01:35 2026 GMT
Not After : Jun 1 04:01:35 2026 GMT
Subject: CN=711342dad1b098a5cef5983b3816508cd0b5b371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0a:21:8f:9f:ad:be:25:47:83:8b:b7:f0:00:
e6:3f:3c:97:7c:c6:40:45:86:2d:43:f2:79:ec:4c:
e0:a3:f6:48:3e:df:4e:64:b5:2c:b7:5f:1b:34:08:
77:3b:b8:41:d2:1b:e2:6d:17:fe:18:78:5f:0e:b5:
7f:a3:db:d5:25:3a:3a:8e:4b:67:54:57:f7:d7:ce:
bd:67:a1:79:ec:cb:a3:52:8d:ef:2a:4b:e6:25:8e:
a1:1b:6e:f7:86:db:21:23:8d:74:8c:2c:f9:a8:f1:
45:d7:a6:36:f2:26:3a:37:c0:4c:68:fc:7d:5e:70:
39:8e:7a:b3:0e:31:75:ed:7f:39:0f:6e:8b:fb:5b:
86:78:5d:c1:99:80:c9:91:ae:8a:ae:85:19:f1:a2:
49:e5:f8:79:83:e0:86:bb:ca:43:e3:63:ad:2f:b7:
e4:79:e5:a3:bc:93:e3:4c:8c:0b:b1:f9:24:35:63:
fd:d0:dc:7c:e0:bc:4b:91:64:e7:b4:5c:1f:03:15:
83:29:d0:64:eb:bd:2a:ad:cf:3a:66:0e:3c:bd:ec:
be:7e:09:15:2c:f2:f2:87:b6:0f:0b:e8:c4:5b:fc:
b0:5a:62:21:c3:c1:12:aa:0d:11:e7:b6:6f:cc:5a:
13:9a:16:a2:23:cc:20:67:50:2d:6c:35:06:ad:18:
05:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:13:42:DA:D1:B0:98:A5:CE:F5:98:3B:38:16:50:8C:D0:B5:B3:71
X509v3 Authority Key Identifier:
keyid:AA:85:C6:7F:22:30:9E:0D:84:C3:0B:54:25:29:72:53:28:60:51:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c2:32:49:b8:b6:e8:02:99:42:ae:e1:1b:98:7a:2e:18:cb:
5a:63:78:fd:df:12:52:32:48:f3:ad:53:fe:5a:b2:50:03:39:
77:f1:5f:af:a0:ed:ea:9a:93:53:24:a8:e5:20:7b:d8:6f:4f:
76:ee:7f:5b:d4:c6:37:23:27:90:88:a2:28:2d:23:0b:02:b9:
9c:b5:1d:c1:b3:29:a3:07:2f:38:ab:94:18:8f:8f:21:aa:a3:
5f:8c:04:43:51:57:2f:19:18:71:a7:8f:8a:4d:3d:23:2d:53:
b4:97:19:ca:7c:24:4a:2d:f6:e1:57:32:3b:ab:f9:60:a7:29:
4c:0d:40:3e:f3:8d:0d:f4:ca:f5:52:31:45:e4:42:ef:ee:2a:
59:bb:2c:4f:dc:d8:b7:c0:1c:ef:d0:e7:92:5a:66:e4:94:de:
2b:ce:0a:ea:c3:74:e9:96:b7:e4:62:6a:5f:03:c8:d6:24:af:
9f:27:df:16:e7:71:cd:ca:47:fe:50:3b:59:e0:17:51:8a:f0:
b4:24:8b:00:b6:9d:72:25:03:24:03:c5:d5:d6:32:2d:c2:c2:
ca:88:01:b9:eb:29:66:3b:f7:84:5d:2d:7d:29:61:26:72:38:
3e:ed:c3:51:0e:fc:1c:08:17:b4:fd:43:d7:45:2a:e8:77:d8:
bf:01:f5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 10:48:29 2026 by rpki-client