Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
File: qyftHOpDIcScPKEPOv-v29rVMsI.mft (raw, json)
Hash identifier: fxS43KePQUuS1Z3n0k4RYON0vhiSAd0sP5DYh4rXI6g=
Subject key identifier: D7:88:85:AD:48:9E:77:B7:5C:29:9D:48:72:27:FB:83:57:2F:31:2C
Authority key identifier: AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
Certificate issuer: /CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Certificate serial: 019F141CD9B59D90B5C411241DB9D842BB2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
Manifest number: 198D
Signing time: Mon 29 Jun 2026 16:01:02 +0000
Manifest this update: Mon 29 Jun 2026 16:01:02 +0000
Manifest next update: Tue 30 Jun 2026 16:01:02 +0000
Files and hashes: 1: PdSSD1pY2R8sHhODVspC8pD1XNg.roa (hash: Hdy0mlxbyoY3S5V4w6LQ+HVJLICaMsGMYmJLwRUw9C8=)
2: gQS_1Ytr-O-IsbRGOtGTDvNNYeY.roa (hash: s9JwwcRfagDOyb+VnD4SIPFLvOjPpaDEvmlIEjUU6Jk=)
3: qyftHOpDIcScPKEPOv-v29rVMsI.crl (hash: ZnmTb3o9W/1lbtROU5TVhxgoDgZV09v5xlBfYXR/Sb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 14:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:1c:d9:b5:9d:90:b5:c4:11:24:1d:b9:d8:42:bb:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Validity
Not Before: Jun 29 16:01:02 2026 GMT
Not After : Jun 30 16:01:02 2026 GMT
Subject: CN=d78885ad489e77b75c299d487227fb83572f312c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6d:aa:e1:03:c3:f5:3b:18:3f:e9:7c:68:8e:
29:d9:d1:e1:42:a2:ac:77:39:d4:b8:66:e5:e6:80:
8e:90:f1:af:3a:09:ba:56:a1:0c:44:a3:e2:aa:47:
d8:51:a4:fa:9b:1d:37:cf:d6:80:62:b8:f7:c9:0d:
d2:80:5e:87:9e:79:e3:31:40:06:7d:8a:25:68:e3:
a6:93:87:bb:00:71:08:e3:50:03:89:2c:f5:51:68:
1a:d8:16:cb:29:da:1d:9e:9d:0b:97:53:28:74:16:
a3:90:e0:34:3d:35:83:1a:5b:91:80:0e:19:fa:6a:
e1:57:50:61:30:07:e8:94:51:a5:78:9d:a9:b8:b6:
db:d9:cc:ed:9f:f2:9c:02:ec:b8:e7:d1:32:8c:25:
1d:8b:d6:51:ed:50:b1:75:1e:e4:df:e1:1a:d9:0e:
d8:c4:1e:4a:02:01:25:af:d7:38:03:85:93:75:f1:
e0:03:80:4c:94:84:b7:a1:c8:ce:59:db:c0:b4:e4:
69:f9:5e:20:aa:7f:f8:81:70:ad:4c:63:ee:5c:b2:
84:08:09:ab:de:a6:96:68:4a:2d:05:d5:ad:3e:5a:
26:f5:be:5e:69:66:56:33:01:46:a3:8a:28:68:fd:
05:66:04:c0:7e:ee:09:a6:ea:af:a1:26:17:cb:a2:
dd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:88:85:AD:48:9E:77:B7:5C:29:9D:48:72:27:FB:83:57:2F:31:2C
X509v3 Authority Key Identifier:
keyid:AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a0:9f:2c:93:c7:01:6e:98:37:1e:b0:58:ea:c2:dc:f8:74:
21:65:b0:7b:8e:07:1c:55:0b:d5:a2:9e:7b:f3:f9:c4:92:eb:
af:52:a6:dd:2e:34:1f:4c:a4:c7:2a:09:d9:93:96:81:61:4d:
9f:23:47:d4:48:88:e5:75:fe:43:43:25:74:24:3f:45:2c:8e:
53:9a:54:e6:7b:e7:eb:08:e0:44:f4:3c:5d:16:44:f3:9b:b3:
09:0d:8a:2a:c1:4b:c6:4d:50:dc:74:6c:5f:5a:b0:f0:34:3c:
05:eb:9b:13:38:d9:e4:5d:8a:34:b8:0c:7b:04:ef:34:35:ff:
eb:31:1d:9f:6c:04:76:9a:6e:7c:80:a2:8a:f5:f2:82:dd:a1:
1f:d4:62:a4:fb:3f:ce:de:6d:9a:6a:2a:fc:30:99:ff:27:17:
ca:75:55:c9:4d:36:22:1b:3c:36:13:7e:b0:b1:b9:7e:e0:ae:
f8:75:1d:ce:de:4b:34:12:95:4c:d2:ce:54:48:37:70:85:cd:
c7:af:b8:fc:b4:59:15:32:01:17:c0:19:9e:87:79:09:8f:60:
58:05:81:1c:c0:ef:8f:70:64:1e:69:75:3c:80:c7:5d:0e:ca:
3d:93:37:04:08:89:d7:08:76:ba:1c:b0:35:95:dd:c3:71:a7:
12:c5:ae:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 23:11:48 2026 by rpki-client