Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
File: q838GnxSDPjRdykgjoXosZfErf8.mft (raw, json)
Hash identifier: xvxDi7NHuF0NM4cxLVv8mQynXz4S4OvRjsG2jSvUnTk=
Subject key identifier: 29:DE:74:85:33:37:43:AA:9B:64:0F:2B:F5:FF:7C:1E:02:AA:46:DB
Authority key identifier: AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
Certificate issuer: /CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Certificate serial: 019EFA93BA870052EFFE2C2FD9D647C0D4E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
Manifest number: 0FAB
Signing time: Wed 24 Jun 2026 17:00:45 +0000
Manifest this update: Wed 24 Jun 2026 17:00:45 +0000
Manifest next update: Thu 25 Jun 2026 17:00:45 +0000
Files and hashes: 1: Oyzshlci-9jPVV78Pg3C9EqgWpQ.roa (hash: bjeZr+jgrrjOajuuWHyD7Sxiyz43CZIWH0Yks80/PvM=)
2: ZGp0FDP8qvB8cgr-1S3_xdm1jys.roa (hash: 9rCAt6z+0Tts+8L8PuhpJuck/ju+E8/tnJZUEMT7+6Y=)
3: q838GnxSDPjRdykgjoXosZfErf8.crl (hash: SjE3DOpYDYEwF4P8IXIf1cELpP6zqfZ30MNVY1ztq4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 14:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fa:93:ba:87:00:52:ef:fe:2c:2f:d9:d6:47:c0:d4:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Validity
Not Before: Jun 24 17:00:45 2026 GMT
Not After : Jun 25 17:00:45 2026 GMT
Subject: CN=29de7485333743aa9b640f2bf5ff7c1e02aa46db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ea:99:78:ef:87:ee:f9:c4:a5:61:48:a4:82:
7a:39:4e:47:7b:c9:5b:07:67:51:81:9b:19:0d:03:
80:49:1f:a7:99:4d:3a:41:33:af:c2:de:3b:a6:22:
76:7d:69:c6:77:84:4f:be:33:46:1b:7e:6f:3c:b2:
92:7f:33:ca:b4:80:ce:2f:47:63:2b:71:0a:b0:3b:
32:c7:7e:45:c9:82:8d:63:69:e1:24:4d:2a:65:b0:
d3:22:38:26:9f:17:e4:19:a4:10:9d:90:a1:9d:18:
f5:78:b7:69:e0:e6:54:8a:bd:3b:cc:dd:c5:a4:fd:
e0:58:c7:5e:74:18:18:5d:a0:8e:e8:02:78:6f:9e:
bc:54:4f:a3:2b:18:1f:c4:96:ef:31:c4:00:9a:47:
81:99:d6:a8:44:73:0f:57:36:4a:58:18:41:6c:fd:
14:0a:98:14:2d:26:fe:41:22:33:e6:87:01:db:86:
3a:21:80:e8:d5:ec:1d:51:32:0f:cf:09:19:d2:5a:
56:2b:6e:70:5d:72:93:63:14:35:6a:13:55:f9:36:
07:a2:ec:47:16:a1:f8:ae:ca:e1:0f:25:17:d2:38:
af:8d:1e:4a:51:a5:b7:9d:ef:c6:a1:db:fe:84:85:
97:d4:78:bd:32:5e:ec:99:d2:41:d9:18:c4:01:28:
9c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DE:74:85:33:37:43:AA:9B:64:0F:2B:F5:FF:7C:1E:02:AA:46:DB
X509v3 Authority Key Identifier:
keyid:AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:74:7d:7d:a9:f7:91:31:6e:cf:0a:79:68:a8:4e:b6:8b:0e:
32:02:dd:0f:7a:e4:aa:51:ff:3b:8b:a1:77:88:4c:59:f5:a2:
cc:6c:71:02:8a:ff:78:73:72:f0:59:9f:b1:fa:18:b0:34:17:
68:23:bd:bd:6c:78:96:5e:45:00:c2:fb:42:5e:2b:ee:14:25:
5a:29:90:ff:c6:e9:19:78:50:d3:f6:7b:48:e2:cd:92:1b:78:
97:f5:b8:f3:74:12:81:0d:3c:cf:8c:15:9f:50:aa:2e:03:6e:
ab:56:f8:b8:60:c0:ee:71:23:8f:04:db:bf:08:56:f2:9c:2f:
34:79:a9:63:b1:20:ca:b3:9d:83:ca:82:32:5a:01:ed:49:b0:
57:ac:1a:d5:65:45:74:d8:01:90:24:3e:cc:36:a4:01:51:e4:
32:6b:7a:89:31:26:37:cc:59:76:80:81:e1:17:8d:b0:f8:e2:
84:ab:36:a0:4a:2a:39:c2:ba:7a:d4:63:55:8c:24:00:f8:2b:
e4:2e:df:01:b0:ec:21:73:87:a3:d1:04:da:89:5d:ec:d8:22:
89:49:b5:f4:c3:63:7c:63:b4:12:af:e8:52:53:d8:f3:8d:1a:
da:ce:aa:5a:31:89:c1:d8:b4:b3:8e:2f:4e:e1:79:b3:34:2c:
9e:6e:df:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 21:18:26 2026 by rpki-client