
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
File: Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft (raw, json)
Hash identifier: 0v/1yo3TXCkWqeZzFwfc7yxq9/UnK/ik6cJjp7XjquQ=
Subject key identifier: 8D:A2:71:4C:B8:68:22:08:50:1E:3F:1E:DF:BD:20:78:70:41:82:DB
Authority key identifier: 42:1E:49:E1:C7:55:FD:E0:38:BD:18:75:C7:F3:97:A5:68:64:60:14
Certificate issuer: /CN=421e49e1c755fde038bd1875c7f397a568646014
Certificate serial: 019FA228FF64165712405691B233595B7635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
Manifest number: 0BE2
Signing time: Mon 27 Jul 2026 06:00:23 +0000
Manifest this update: Mon 27 Jul 2026 06:00:23 +0000
Manifest next update: Tue 28 Jul 2026 06:00:23 +0000
Files and hashes: 1: Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl (hash: JJNnQjoryqfTir9m/44KkU6wobStyxtdhqbevgohIN4=)
2: tzxRcibemA94VnMAm0dv4MlqbUA.roa (hash: VBIKKEa5Iy0UgSH1dlBF7tfkGRCcGJgtuhRAaqjOCP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:28:ff:64:16:57:12:40:56:91:b2:33:59:5b:76:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421e49e1c755fde038bd1875c7f397a568646014
Validity
Not Before: Jul 27 06:00:23 2026 GMT
Not After : Jul 28 06:00:23 2026 GMT
Subject: CN=8da2714cb8682208501e3f1edfbd2078704182db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:42:44:b9:f4:b6:1c:a4:4b:56:46:88:47:b2:
f2:7a:2f:6d:15:95:5b:96:45:74:25:b2:4f:6d:1f:
ac:48:67:20:69:9d:fc:89:45:f2:41:c6:d2:ed:29:
5c:c0:de:5f:27:67:dc:61:a4:4a:0e:10:2e:8f:10:
63:a0:91:07:d4:7c:8d:ac:a6:c4:0d:9d:cb:5f:55:
d2:24:ee:cf:d0:59:54:8d:36:f1:d1:0e:3d:61:47:
e3:1c:c4:d8:29:f5:5f:7a:28:80:38:cb:bd:aa:1f:
6b:a4:83:ff:ed:f0:3c:96:96:8b:ed:9c:86:76:92:
fc:5e:40:51:52:bb:d5:18:23:1c:86:97:2d:31:83:
dc:b1:41:e3:7d:9b:0a:99:b4:07:72:dc:bd:22:1a:
55:d1:25:3f:f5:1a:bc:c6:58:71:6e:c2:0f:03:ca:
b4:ee:70:05:09:2c:60:51:99:4a:cc:d0:4c:49:8b:
c8:ed:84:e0:f8:3e:ca:c1:45:16:d5:67:d7:92:80:
16:09:04:76:5d:c8:e2:16:29:1f:ca:0a:bd:be:cb:
66:a1:26:11:b8:b1:29:3b:3e:3d:45:b7:50:88:fa:
a1:7a:1c:63:35:a2:89:63:34:85:06:9c:82:8b:f5:
6f:f9:4d:6e:52:c2:83:b4:e2:85:e1:2c:46:a3:cd:
8e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A2:71:4C:B8:68:22:08:50:1E:3F:1E:DF:BD:20:78:70:41:82:DB
X509v3 Authority Key Identifier:
keyid:42:1E:49:E1:C7:55:FD:E0:38:BD:18:75:C7:F3:97:A5:68:64:60:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:46:37:7b:94:ce:52:5b:8a:67:f2:38:ae:6a:a4:91:1a:da:
7a:0b:ba:e5:e0:b8:e6:a0:92:dc:bf:d2:7e:bf:0f:ea:fd:65:
a1:3e:b2:97:09:71:48:0b:ef:aa:28:22:b5:0f:13:e5:6e:d6:
3b:f6:b8:30:81:86:52:b5:74:70:6b:d2:ca:76:16:16:66:ba:
3f:d3:39:bf:3d:ea:96:fb:32:02:ef:8c:b3:5e:bb:61:4c:9b:
17:5b:11:90:90:3f:08:2e:15:8c:31:3a:ef:c6:60:89:53:2e:
cb:18:53:a4:77:4f:6a:ea:4c:9d:98:9b:c1:6c:8c:2d:4f:29:
24:9e:77:de:5f:84:d0:a7:2f:04:ea:c3:ed:02:3c:cc:88:3d:
a6:99:b9:0d:cb:4b:76:0d:24:47:68:00:c7:a3:3e:3e:46:1b:
01:b8:44:53:ce:be:f7:fe:a5:19:23:0b:55:28:96:ac:1a:1e:
fa:17:1b:6a:e2:3b:8c:75:8c:89:e6:a3:f5:a5:bc:7c:ae:2b:
84:c5:c2:9b:4d:4a:0e:55:01:5e:70:9e:f4:39:9b:44:a5:80:
43:4d:1e:cb:c7:e2:ba:f8:76:9e:c3:20:12:fe:eb:59:15:b7:
65:71:8d:c5:28:d2:d0:ec:67:e2:e1:c4:cb:9f:a6:74:89:d0:
8e:8b:27:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:35:53 2026 by rpki-client