Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
File: qb2hj--wDn6cVHMwGcdiuy6zozw.mft (raw, json)
Hash identifier: AeEfNZ9Cc0//iWuOWSElVgBJX+ZBsGVnTnrw8jL8aBc=
Subject key identifier: 0C:8D:B9:60:FD:54:4E:B8:82:4D:FD:6A:6A:6E:01:FD:EB:57:16:A1
Authority key identifier: A9:BD:A1:8F:EF:B0:0E:7E:9C:54:73:30:19:C7:62:BB:2E:B3:A3:3C
Certificate issuer: /CN=a9bda18fefb00e7e9c54733019c762bb2eb3a33c
Certificate serial: 019FA2972280125B8316061166F290A5A91C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
Manifest number: 0DCA
Signing time: Mon 27 Jul 2026 08:00:41 +0000
Manifest this update: Mon 27 Jul 2026 08:00:41 +0000
Manifest next update: Tue 28 Jul 2026 08:00:41 +0000
Files and hashes: 1: 3loz_wUg8iUnmUBOtpVHROxNJvk.roa (hash: J7VMYCaBbkzMjXRMgzvhwXQZ2f23okoS+RYz+uaW5gI=)
2: qb2hj--wDn6cVHMwGcdiuy6zozw.crl (hash: fqfS8JcDKnG3szaLPUBgGAg/PqocN8/3vFr6KQ1Qq4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:97:22:80:12:5b:83:16:06:11:66:f2:90:a5:a9:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9bda18fefb00e7e9c54733019c762bb2eb3a33c
Validity
Not Before: Jul 27 08:00:41 2026 GMT
Not After : Jul 28 08:00:41 2026 GMT
Subject: CN=0c8db960fd544eb8824dfd6a6a6e01fdeb5716a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:eb:e2:8d:68:86:73:3b:4c:66:d4:e9:d4:01:
95:26:73:b9:63:57:06:5e:55:fb:bc:79:b4:a0:86:
bc:22:b1:f1:26:f1:b0:c3:c4:ae:11:25:51:aa:09:
9f:1c:bb:91:b0:bc:95:2b:24:db:89:e6:98:e8:ad:
00:56:c1:65:35:7e:d3:fd:c3:12:69:2e:e0:84:29:
71:b2:e0:33:23:ac:0d:43:a5:a5:5d:9e:21:92:7a:
53:84:2d:1f:02:4d:4f:16:8c:ef:74:22:7d:fd:e9:
20:b8:f2:b3:4a:57:b9:2b:76:f0:ee:63:1d:a2:13:
49:9f:76:90:1c:c9:ca:2b:96:5b:00:7b:62:69:46:
5f:8d:fa:ac:af:90:9f:20:9d:28:ca:1b:26:65:92:
03:76:9b:9c:26:6a:8f:0c:79:4f:02:c5:13:92:98:
ca:03:53:4a:0d:94:12:4c:f3:5d:73:30:ff:64:dc:
f1:bd:8d:29:d5:97:2d:ad:4b:95:55:b8:6c:19:9b:
82:6e:05:33:d9:e8:26:38:45:27:37:8a:93:39:86:
4e:45:6e:99:93:2f:8f:e1:1d:25:c2:8d:be:ac:3d:
81:45:ea:2b:82:e3:6b:e4:d0:2d:35:55:ef:98:ab:
7d:c7:05:cd:88:3b:3e:14:98:79:a0:c1:d6:9a:3a:
2d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8D:B9:60:FD:54:4E:B8:82:4D:FD:6A:6A:6E:01:FD:EB:57:16:A1
X509v3 Authority Key Identifier:
keyid:A9:BD:A1:8F:EF:B0:0E:7E:9C:54:73:30:19:C7:62:BB:2E:B3:A3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:1a:47:a5:da:3f:3d:f3:da:a8:99:7f:83:07:06:1f:84:b6:
1c:09:38:97:a7:f6:0c:80:b0:ea:96:0b:93:54:5a:23:fa:2d:
34:ec:14:ba:4f:32:5b:c9:45:03:f1:91:55:64:c3:35:39:e7:
de:7d:4a:0d:80:c2:b4:2c:04:6c:67:0b:8c:33:fb:64:6c:65:
fd:f3:bb:9e:5e:3f:36:09:4c:2f:ef:c5:00:5c:9e:fe:88:6a:
c8:7d:b4:ec:ea:68:b4:da:7f:a2:d4:a7:97:3d:e6:dd:c4:ba:
99:c9:5b:a7:dd:d6:ea:c3:99:28:47:62:90:8b:39:28:f1:1a:
6c:b0:e4:b5:ee:03:cc:30:5c:c4:8a:9b:f5:c6:4a:77:b4:34:
0d:f1:a9:11:c7:70:d1:47:01:32:7b:95:7d:c7:93:fe:85:f1:
05:85:94:52:8e:0a:e1:72:b6:8e:a5:ac:47:bc:23:24:b3:74:
da:5b:97:21:24:de:84:55:8f:47:e0:ce:39:7d:1b:ba:11:b9:
69:c2:51:31:25:5d:91:49:15:06:e6:bd:ae:f7:42:f9:27:f9:
64:4e:52:33:d8:71:be:5c:1f:5d:43:75:a6:f0:54:fb:7a:0e:
63:e3:21:ce:80:d7:51:32:16:f5:8a:e2:eb:3b:26:1f:51:1a:
b7:84:d6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:55:29 2026 by rpki-client