Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
File: qOdYAufvuGU-OvWcvxvAZTi8pnE.mft (raw, json)
Hash identifier: w+0JsbxuiCizm00EFNJtp9atdaCftYLVmfrwxVEko1I=
Subject key identifier: C8:7B:8F:6F:70:0A:E0:F6:4D:C7:CF:4A:5E:99:06:68:F8:0E:1C:86
Authority key identifier: A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71
Certificate issuer: /CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
Certificate serial: 019F1BD68241103E4DE70997753E518300E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
Manifest number: 17BF
Signing time: Wed 01 Jul 2026 04:01:10 +0000
Manifest this update: Wed 01 Jul 2026 04:01:10 +0000
Manifest next update: Thu 02 Jul 2026 04:01:10 +0000
Files and hashes: 1: H2T8PA1785l6gX-iVp9IuPaA4Nc.roa (hash: 6faWeYIv5Ai9qI/fX55pW1xZn22WZewYCnXhS25+v6I=)
2: Xz4dqhqCzoZvF10IK-TkgPiAc5Q.roa (hash: ZFUgfRsBRCs1X5BDvrArX90/CdgfBgfrW7Rw9sq2N84=)
3: lyOH-P2_hH5Ugem7r8kpnkt99SI.roa (hash: GiPFjQfoJkQaMedHXbS4M3+BR9UAmP0J6PtJlsbWkGg=)
4: qOdYAufvuGU-OvWcvxvAZTi8pnE.crl (hash: 6HeY3I9IpHe93FinOj0cvndoM/ks2EQKUJi/ErUpuGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1b:d6:82:41:10:3e:4d:e7:09:97:75:3e:51:83:00:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
Validity
Not Before: Jul 1 04:01:10 2026 GMT
Not After : Jul 2 04:01:10 2026 GMT
Subject: CN=c87b8f6f700ae0f64dc7cf4a5e990668f80e1c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:17:ae:b8:8d:6e:af:0c:81:29:f2:1a:ff:4e:
d1:d1:b6:69:07:8f:d4:a4:24:eb:40:e3:73:84:e6:
9e:de:74:2c:9f:a6:55:36:3a:b6:44:7f:bc:03:3a:
60:e6:c7:a1:a9:67:51:9a:32:b3:e4:d2:66:1b:05:
ca:52:d3:74:75:75:06:6b:42:f1:20:78:8a:f2:fe:
5a:ab:da:35:80:72:38:16:09:31:2b:bd:5d:11:34:
ee:e8:2a:99:6e:0e:24:85:f6:e2:11:2a:90:77:bb:
65:70:30:d0:a8:9f:93:18:f6:0e:6e:d8:82:48:08:
99:bd:63:eb:85:ea:ab:34:8b:a4:52:87:9e:32:62:
c3:92:64:76:d2:64:5b:16:5f:f2:dc:75:00:b4:c8:
8c:e5:9b:6c:96:0e:c3:51:6d:ae:d8:f2:67:6b:82:
57:4f:0b:b4:57:e9:39:f4:ab:f0:93:c6:e9:8c:68:
b6:de:b7:f7:82:1f:e1:bf:64:58:da:59:73:75:4e:
e9:0f:d3:ce:a9:7d:66:13:60:8a:0e:ce:a5:8d:6d:
7f:cc:cf:f6:2c:e8:24:ec:29:27:b6:0c:65:2e:db:
98:4d:39:a9:14:fc:d4:a5:06:16:57:6d:18:5a:18:
4f:8e:bc:d5:8f:85:c0:00:a0:d4:f7:d4:70:39:1a:
06:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:7B:8F:6F:70:0A:E0:F6:4D:C7:CF:4A:5E:99:06:68:F8:0E:1C:86
X509v3 Authority Key Identifier:
keyid:A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e3:2d:13:8f:d6:5e:5c:05:91:a9:51:f6:63:8f:0d:d9:70:
9a:9c:90:cb:6c:a7:e6:c9:b0:d4:04:df:5f:2e:8f:c3:6a:e0:
3a:79:4e:44:3c:79:a0:44:4d:cb:31:3f:dc:51:48:98:f7:36:
79:c7:1b:5e:7c:09:fb:33:94:f8:32:3a:69:67:b5:25:ed:8c:
eb:bd:b9:d4:5a:18:93:95:ed:14:a1:32:96:f4:79:62:b1:33:
31:ce:24:90:e7:6f:e1:2d:2b:57:c8:d1:48:3e:4d:fd:e4:9e:
32:c6:28:7e:28:d5:10:8f:8e:01:3b:50:f5:67:01:e0:a7:e1:
ac:bd:ac:14:45:1f:60:55:2a:09:4a:ae:0c:98:21:1e:e5:38:
f5:4b:39:5e:6e:23:e3:24:71:23:7c:ea:b2:05:ed:28:83:4b:
66:90:a1:03:6f:63:eb:37:9a:ea:0b:df:16:dc:7e:cb:16:de:
47:2b:72:8d:37:30:78:9e:a4:61:6b:86:74:ac:c2:18:21:93:
cb:66:ea:57:0f:6e:c4:18:bc:86:08:c1:9a:06:78:b8:16:52:
8d:3e:2b:f4:e0:b2:2d:5e:33:11:6c:b8:8a:7d:6f:ea:c3:c1:
70:e9:0c:36:93:80:d4:b0:c7:2a:26:f8:45:97:0e:04:1a:06:
45:69:27:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8b1oJBED5N5wmXdT5RgwDhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZTc1ODAyZTdlZmI4NjUzZTNhZjU5Y2JmMWJjMDY1Mzhi
Y2E2NzEwHhcNMjYwNzAxMDQwMTEwWhcNMjYwNzAyMDQwMTEwWjAzMTEwLwYDVQQD
EyhjODdiOGY2ZjcwMGFlMGY2NGRjN2NmNGE1ZTk5MDY2OGY4MGUxYzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzheuuI1urwyBKfIa/07R0bZpB4/U
pCTrQONzhOae3nQsn6ZVNjq2RH+8Azpg5sehqWdRmjKz5NJmGwXKUtN0dXUGa0Lx
IHiK8v5aq9o1gHI4FgkxK71dETTu6CqZbg4khfbiESqQd7tlcDDQqJ+TGPYObtiC
SAiZvWPrheqrNIukUoeeMmLDkmR20mRbFl/y3HUAtMiM5Ztslg7DUW2u2PJna4JX
Twu0V+k59Kvwk8bpjGi23rf3gh/hv2RY2llzdU7pD9POqX1mE2CKDs6ljW1/zM/2
LOgk7CkntgxlLtuYTTmpFPzUpQYWV20YWhhPjrzVj4XAAKDU99RwORoGYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMh7j29wCuD2TcfPSl6ZBmj4DhyGMB8GA1UdIwQY
MBaAFKjnWALn77hlPjr1nL8bwGU4vKZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU9kWUF1ZnZ1R1UtT3ZXY3Z4dkFaVGk4cG5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82MjU2YjYtMzZhMS00ZjJmLWEwYjkt
NDExZjU4MzdmZWZhLzEvcU9kWUF1ZnZ1R1UtT3ZXY3Z4dkFaVGk4cG5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82MjU2YjYtMzZhMS00ZjJmLWEwYjktNDExZjU4MzdmZWZh
LzEvcU9kWUF1ZnZ1R1UtT3ZXY3Z4dkFaVGk4cG5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI+MtE4/W
XlwFkalR9mOPDdlwmpyQy2yn5smw1ATfXy6Pw2rgOnlORDx5oERNyzE/3FFImPc2
eccbXnwJ+zOU+DI6aWe1Je2M67251FoYk5XtFKEylvR5YrEzMc4kkOdv4S0rV8jR
SD5N/eSeMsYofijVEI+OATtQ9WcB4KfhrL2sFEUfYFUqCUquDJghHuU49Us5Xm4j
4yRxI3zqsgXtKINLZpChA29j6zea6gvfFtx+yxbeRytyjTcweJ6kYWuGdKzCGCGT
y2bqVw9uxBi8hgjBmgZ4uBZSjT4r9OCyLV4zEWy4in1v6sPBcOkMNpOA1LDHKib4
RZcOBBoGRWknNA==
-----END CERTIFICATE-----
Generated at Wed Jul 1 06:26:54 2026 by rpki-client