Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.mft
File: q2hOUOM_OgAVyPiZyIvLE3vPtfk.mft (raw, json)
Hash identifier: b9U6/MWTh/g467FytBxbruTpm1I0qMpfwudHPAEfHI0=
Subject key identifier: 96:00:C3:78:CA:05:8A:97:CD:DF:45:2D:BC:60:1C:FA:4F:5E:9D:D3
Authority key identifier: AB:68:4E:50:E3:3F:3A:00:15:C8:F8:99:C8:8B:CB:13:7B:CF:B5:F9
Certificate issuer: /CN=ab684e50e33f3a0015c8f899c88bcb137bcfb5f9
Certificate serial: 019FA0E00B53B0E8C16C7B16B2177E37840D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q2hOUOM_OgAVyPiZyIvLE3vPtfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.mft
Manifest number: 11C2
Signing time: Mon 27 Jul 2026 00:01:04 +0000
Manifest this update: Mon 27 Jul 2026 00:01:04 +0000
Manifest next update: Tue 28 Jul 2026 00:01:04 +0000
Files and hashes: 1: eutBwstQCFRzhm35XTnNphMWByQ.roa (hash: RdOW4ekiWsJoF7BZmUsggiXem+HWt5D8Hbfh8/B+px8=)
2: q2hOUOM_OgAVyPiZyIvLE3vPtfk.crl (hash: SD5+UejqF5DsTqlRMxKaOqwrhlFU9qw1nvDrjZ1HOhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/q2hOUOM_OgAVyPiZyIvLE3vPtfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:0b:53:b0:e8:c1:6c:7b:16:b2:17:7e:37:84:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab684e50e33f3a0015c8f899c88bcb137bcfb5f9
Validity
Not Before: Jul 27 00:01:04 2026 GMT
Not After : Jul 28 00:01:04 2026 GMT
Subject: CN=9600c378ca058a97cddf452dbc601cfa4f5e9dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:30:b8:a5:67:78:ab:84:dd:e6:d9:11:57:9f:
35:9f:8d:77:bc:09:93:e7:20:5a:72:44:bb:6e:7b:
70:d3:46:bf:9e:5e:a1:dd:70:49:3c:f3:95:a6:56:
85:f7:6f:13:a7:84:e5:1d:06:9a:ef:dd:ac:0f:6c:
0f:fe:70:8d:54:23:43:fe:cc:38:94:6e:a1:32:19:
75:5b:e8:0d:f4:09:d8:9c:1d:0b:df:51:e5:25:5b:
c9:82:0c:a8:60:b7:94:eb:f5:eb:2b:d0:be:8c:49:
a5:8f:a0:d8:24:4a:4f:c7:3b:38:7b:cd:e1:34:c1:
35:f8:f3:88:47:b8:88:2d:be:48:65:66:53:3e:b6:
40:03:8a:1d:aa:fb:4c:64:f6:2a:1c:53:68:dc:bc:
f3:06:7e:c7:be:8a:8b:b9:c0:01:a2:da:94:03:1f:
98:6b:09:06:88:da:b6:bb:bc:7b:3c:1c:86:e2:d7:
d1:81:d1:6a:a5:fe:2d:b0:57:77:e1:4d:ec:9b:30:
ff:20:72:a5:be:21:07:f4:3e:22:a8:ee:04:26:0b:
68:10:97:25:81:67:6a:41:ac:fe:a8:63:62:66:89:
c0:92:1c:3c:87:6b:49:32:83:e2:6a:cc:a0:3a:fc:
7c:dc:3a:4b:aa:14:33:a0:25:cd:28:22:30:b3:2f:
b3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:00:C3:78:CA:05:8A:97:CD:DF:45:2D:BC:60:1C:FA:4F:5E:9D:D3
X509v3 Authority Key Identifier:
keyid:AB:68:4E:50:E3:3F:3A:00:15:C8:F8:99:C8:8B:CB:13:7B:CF:B5:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q2hOUOM_OgAVyPiZyIvLE3vPtfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:12:34:41:78:6b:b4:f1:4d:46:e0:f5:00:4e:7d:28:61:6f:
09:7a:87:be:dd:e3:31:59:70:ec:60:ec:c6:e2:ee:ea:e3:69:
a8:3b:e8:03:38:aa:9a:bc:61:14:b9:00:6a:c0:f7:7f:b9:2a:
43:5f:8b:ce:d0:f6:c2:a2:08:8f:d3:45:c2:0c:fb:43:f5:86:
4c:03:2f:e3:1f:86:48:20:23:18:8c:1c:33:8f:2c:ba:44:39:
a6:55:30:f3:97:d4:5d:03:13:d3:bc:31:d0:3d:f9:f3:73:44:
41:d7:15:a6:f4:a7:8c:29:06:27:14:d0:3d:4e:e5:e5:fd:26:
37:5c:c4:bb:5b:4a:a2:f8:83:af:c1:d8:72:9f:71:7f:3f:7d:
a0:ab:ff:dc:81:e0:30:43:10:5a:3e:91:56:b3:28:8b:b0:5e:
59:83:aa:95:76:0e:da:a8:be:25:48:cc:37:05:f7:f1:7e:e1:
e5:c3:99:4a:58:95:17:22:a3:b3:ed:ab:43:6b:55:10:86:fe:
66:7b:ed:1d:d5:91:c9:16:d9:f2:ba:b7:67:0e:bb:40:cd:cb:
b2:72:ce:3f:9f:cd:71:f3:82:01:79:e8:90:ad:f0:f9:38:b8:
9e:00:a5:df:7d:80:29:3a:d2:32:10:bc:28:88:12:fa:95:c3:
6a:9b:91:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:15:54 2026 by rpki-client