Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
File: qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft (raw, json)
Hash identifier: YEH8vaEgLlKndnggyNyGoExzy7hKjowRVf3+trrwFSM=
Subject key identifier: CF:18:A3:3C:FC:E3:3F:53:71:3A:DD:DF:1F:D6:7C:02:EB:E4:30:ED
Authority key identifier: AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
Certificate issuer: /CN=aa8551e851e69db165c6c632af45f21715512939
Certificate serial: 019F37F242360549541A7D4AC71F26D3DA4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
Manifest number: 1768
Signing time: Mon 06 Jul 2026 15:00:51 +0000
Manifest this update: Mon 06 Jul 2026 15:00:51 +0000
Manifest next update: Tue 07 Jul 2026 15:00:51 +0000
Files and hashes: 1: qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl (hash: ylabgnl99CE7bTGCmN2/6K0yLl63S71dHVwRVbon6iA=)
2: vN94HUAPgmvQh3qxUmTqfU_xu68.roa (hash: 9/wGgd57yRAqhby3LLSAoNbCoPVWoNBJaPZEuWx53As=)
3: xBgy_H62jp_peWFVNL2jCljFBzw.roa (hash: FsGIuRvPcEfadNKC9UqpUs/32O7Qa+ZVXh6PzF+igCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:f2:42:36:05:49:54:1a:7d:4a:c7:1f:26:d3:da:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8551e851e69db165c6c632af45f21715512939
Validity
Not Before: Jul 6 15:00:51 2026 GMT
Not After : Jul 7 15:00:51 2026 GMT
Subject: CN=cf18a33cfce33f53713adddf1fd67c02ebe430ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3a:f0:0e:74:2d:96:28:25:f0:dd:14:9f:40:
00:9a:55:93:41:ff:6a:08:9a:58:19:cd:ed:0f:29:
7e:e2:05:4c:84:d9:6b:38:d2:bb:c2:db:39:99:51:
b9:c5:88:b3:31:4a:32:2b:93:53:09:b2:d4:86:31:
bc:4c:10:bc:b4:3c:a4:d7:e2:d8:54:95:fd:f5:18:
f7:15:fa:58:50:6a:af:45:31:ac:e8:f0:56:0e:8a:
38:6d:66:0a:05:b9:95:41:c0:b7:91:96:65:a1:ed:
71:3d:fc:ea:cd:f8:4f:bb:2d:b7:46:fe:44:1d:30:
37:33:a9:3f:19:d3:0c:1c:7f:08:66:e0:95:68:e8:
52:54:48:14:d9:bb:dd:21:01:1d:31:3c:bc:46:7c:
47:cf:f7:33:8e:13:6d:73:d8:11:76:1e:8f:8f:1c:
48:bb:38:2d:ef:58:c5:0a:69:81:e6:de:bb:ee:65:
af:2c:79:20:3c:17:18:85:19:bb:87:04:81:43:58:
8d:dc:f3:d0:0c:42:af:33:16:c2:eb:b1:8c:95:2d:
c7:80:18:a0:83:c4:9c:f7:1f:ff:60:02:d2:4e:72:
b5:58:36:2d:dd:f4:53:f7:06:ec:64:56:79:d9:95:
79:96:2b:7d:4e:23:b5:4c:cf:3d:81:e3:cd:13:28:
77:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:18:A3:3C:FC:E3:3F:53:71:3A:DD:DF:1F:D6:7C:02:EB:E4:30:ED
X509v3 Authority Key Identifier:
keyid:AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:1e:d3:63:e6:3c:b7:ea:16:d7:05:de:3f:72:28:a8:78:e3:
66:b9:66:33:2a:47:bd:54:3b:62:9e:88:56:2f:e6:08:5b:ef:
43:37:cf:ed:a0:0b:db:16:62:11:38:50:f9:72:e5:8c:7b:79:
06:25:3a:3e:9a:5b:66:b8:63:b2:50:8d:08:a8:0d:4e:7d:b1:
4d:f0:79:9a:a3:c5:f3:a9:c9:99:c0:d8:af:f0:5f:1f:07:38:
ec:08:19:ce:2e:b0:28:68:a6:2a:32:dd:06:74:b0:95:d9:30:
43:fe:f9:b1:7d:36:30:3e:44:20:20:36:07:13:1b:ba:ee:19:
47:81:ae:ec:ae:b8:ea:33:1a:b4:39:39:c8:69:94:51:8a:26:
18:df:ac:6b:99:fc:40:2c:8e:6b:8f:fa:36:4b:12:e9:8a:d0:
2c:76:ef:10:8d:c2:1a:d8:45:b6:a7:0e:62:0a:2b:80:4f:97:
a3:ca:47:bd:78:02:c9:6f:83:11:2d:64:56:43:30:96:25:5f:
aa:b7:89:34:b9:93:d9:b2:78:48:8a:cb:43:8c:87:2e:91:27:
e8:08:26:13:d1:bc:6e:d5:ba:40:12:e1:1c:11:ca:e9:f5:09:
64:56:df:08:cb:d2:e4:eb:f1:ed:67:66:4e:7b:c2:7d:ee:c0:
a7:38:96:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:16:24 2026 by rpki-client