Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
File: qDOwgB1A0FhJBy4vyBITsCXSorw.mft (raw, json)
Hash identifier: WZavxUrZb3sSPgoBmBM7RGsO0Yef/MXhBCs40uvKq7Q=
Subject key identifier: 29:0C:F1:F0:91:B8:5F:CF:0A:51:1F:6E:2A:D3:73:59:FC:93:90:1C
Authority key identifier: A8:33:B0:80:1D:40:D0:58:49:07:2E:2F:C8:12:13:B0:25:D2:A2:BC
Certificate issuer: /CN=a833b0801d40d05849072e2fc81213b025d2a2bc
Certificate serial: 019E8EA524C8C888BBC3A9A79CC4BA216C4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
Manifest number: 02F4
Signing time: Wed 03 Jun 2026 18:00:47 +0000
Manifest this update: Wed 03 Jun 2026 18:00:47 +0000
Manifest next update: Thu 04 Jun 2026 18:00:47 +0000
Files and hashes: 1: 8dx6CDeeDv1yQZPzxZW_CCsiWuI.roa (hash: d7H5FvAS5k9Xu18WJ58VOwYw00U/ixBu9RyNPrcPus0=)
2: qDOwgB1A0FhJBy4vyBITsCXSorw.crl (hash: 6il9kcYwNNbxtK6zZd47rs+D1bQLD169Ph1vSusra7A=)
3: vZtaog6rpuNltteEkdUJlHMVrcw.roa (hash: 7RtaWZDq5AUONnDyPCbjKsuXwOlICNTJNhflkjZkwLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 13:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8e:a5:24:c8:c8:88:bb:c3:a9:a7:9c:c4:ba:21:6c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a833b0801d40d05849072e2fc81213b025d2a2bc
Validity
Not Before: Jun 3 18:00:47 2026 GMT
Not After : Jun 4 18:00:47 2026 GMT
Subject: CN=290cf1f091b85fcf0a511f6e2ad37359fc93901c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:20:e9:bf:65:26:1f:18:ac:d9:6a:42:b1:d0:
1c:74:0f:dd:45:6d:63:de:ee:20:2e:57:e3:55:63:
11:dd:d9:b3:0d:7c:f2:f2:b9:03:2a:11:dd:f2:ce:
3a:6b:55:3f:1f:52:57:0f:9b:85:10:88:c6:c3:60:
2d:d0:6b:86:bc:39:42:6d:13:61:a0:da:07:66:96:
2b:fe:04:4e:5e:be:10:63:bb:1b:4e:7c:c6:45:54:
51:e6:e5:a0:65:ee:d5:21:8b:18:9d:27:91:83:1d:
03:cf:84:48:2c:df:06:20:95:d1:d0:c3:57:c1:74:
8a:3f:31:21:46:09:b5:81:b5:25:e8:51:be:c2:72:
9b:b0:38:8a:37:e1:6b:bb:f2:8d:b7:7d:66:8f:63:
6f:cd:a2:9e:8c:6c:3e:be:ad:76:e8:87:93:46:7b:
a7:0e:27:36:76:dc:3c:1b:4e:47:f5:f7:48:23:cf:
37:06:fc:85:2a:f5:d4:72:98:67:2f:de:6b:87:03:
10:e3:c3:5b:a5:4f:b5:7f:b5:af:a7:32:3b:42:ec:
5f:5e:0a:cc:8c:36:4a:c5:0e:8b:49:79:1d:1d:af:
a8:14:14:5a:1a:fd:4e:64:e2:33:a4:d2:12:e0:e9:
50:a6:3d:05:3d:29:39:43:46:d5:cf:a5:f6:27:00:
2c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0C:F1:F0:91:B8:5F:CF:0A:51:1F:6E:2A:D3:73:59:FC:93:90:1C
X509v3 Authority Key Identifier:
keyid:A8:33:B0:80:1D:40:D0:58:49:07:2E:2F:C8:12:13:B0:25:D2:A2:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c1:a2:96:ed:84:14:c7:3e:d6:99:95:5f:04:12:05:a3:be:
a7:f1:cc:a7:54:ca:16:33:52:91:56:ed:0e:bd:de:f0:8d:b2:
95:92:bf:b1:20:98:db:b3:77:19:77:24:af:89:07:d9:10:17:
91:a3:47:dc:6b:94:fd:2b:d8:0b:5b:a3:0f:0c:67:b5:29:60:
11:b0:16:39:04:12:0a:9b:67:4e:56:c3:3a:98:16:11:e7:fa:
40:70:7d:b5:44:a9:6b:c8:29:35:56:cf:d9:ab:6a:34:61:46:
25:97:34:07:16:9c:40:0f:c3:dd:98:80:c3:93:35:2f:51:13:
c8:32:fa:20:7f:3b:96:7b:19:7c:a2:37:24:b6:74:e1:63:12:
49:04:94:b0:66:51:62:2c:55:23:53:df:12:6a:d3:db:c9:4b:
2a:89:99:ec:2f:b3:9e:e0:c7:41:50:41:51:25:84:d4:25:db:
db:85:c0:62:da:8d:37:dc:f6:90:23:d6:39:e3:45:49:f9:4c:
0c:6f:e3:aa:a8:94:76:14:e6:ca:12:0e:5f:55:1b:85:4c:8e:
8a:67:02:a2:4d:0b:f0:22:96:a5:46:84:ed:39:bb:38:00:99:
9c:0f:23:a4:a8:ff:eb:81:b2:46:29:31:1e:62:e3:51:fe:92:
c6:1a:e5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 19:57:45 2026 by rpki-client