Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
File: qyt5QmiS7R2nsuYYZ3DPsErmA80.mft (raw, json)
Hash identifier: MCV2oGPYKcMBr5WaCVdudLcBpuLPVMOtyJp50KR23FE=
Subject key identifier: B5:90:61:7A:4C:D4:84:9E:02:2F:B5:D3:A7:20:D4:B5:29:45:BD:19
Authority key identifier: AB:2B:79:42:68:92:ED:1D:A7:B2:E6:18:67:70:CF:B0:4A:E6:03:CD
Certificate issuer: /CN=ab2b79426892ed1da7b2e6186770cfb04ae603cd
Certificate serial: 019FF947C131FBF288362F89E7B0C4394867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
Manifest number: 0CA3
Signing time: Thu 13 Aug 2026 04:00:57 +0000
Manifest this update: Thu 13 Aug 2026 04:00:57 +0000
Manifest next update: Fri 14 Aug 2026 04:00:57 +0000
Files and hashes: 1: Ep1UdBXzCWlqSTpFzem1RUVZTHA.asa (hash: f0L/PAFatn0IgaIhqoEyZoZ0cRFuKV57J/o6cZd4vJM=)
2: UVwGUstyqvelkq37jwrCyB34k94.asa (hash: E7qX0L3M0NDAHs6Gtk5Rp5Gs8S25rdSfJnVG4BtVL6w=)
3: qyt5QmiS7R2nsuYYZ3DPsErmA80.crl (hash: sBViRxofzf+CUuRFq+m8uswdhpaIrpHMIwrV9u+KTgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:47:c1:31:fb:f2:88:36:2f:89:e7:b0:c4:39:48:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2b79426892ed1da7b2e6186770cfb04ae603cd
Validity
Not Before: Aug 13 04:00:57 2026 GMT
Not After : Aug 14 04:00:57 2026 GMT
Subject: CN=b590617a4cd4849e022fb5d3a720d4b52945bd19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fd:59:bf:f2:ee:be:05:cc:dd:a0:37:1d:da:
80:5e:fe:e6:88:5d:d7:dc:11:d9:ae:ae:f3:e0:13:
c1:d4:d6:77:37:53:86:0d:c6:f0:48:0f:db:ae:41:
b8:d4:57:42:69:a3:29:38:e7:03:e2:31:64:9d:a5:
be:a9:6f:df:00:9b:10:94:9e:9b:7e:df:98:89:19:
a8:18:6f:f5:68:5e:e8:bf:d0:d1:b4:b6:fa:cd:84:
9a:77:df:18:2f:23:d4:51:32:3f:13:1b:02:39:6d:
19:35:41:77:0a:65:c1:fb:8a:29:8f:ee:e8:4c:fc:
28:6f:0f:79:d9:2d:da:ac:36:f5:50:26:3a:06:a8:
1c:e1:6a:51:23:d1:5c:7c:43:db:ee:7e:ae:16:ff:
d3:16:4e:6f:3d:47:a0:95:8a:45:ad:d9:5f:b0:ce:
20:04:e8:5a:00:0d:67:38:db:aa:cf:a5:3e:76:18:
41:c9:9b:40:0c:fb:05:d0:f6:3f:fc:0b:81:87:81:
d7:60:10:bc:78:7b:5e:6e:a0:f4:72:7c:e2:74:64:
96:ed:a2:ee:53:d5:82:6b:fe:d3:8f:03:fa:f1:67:
73:1a:23:18:c2:29:7a:11:e2:af:7f:ff:26:fc:50:
b1:74:7d:74:12:1f:bb:f9:f3:ee:de:56:fb:6d:72:
6c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:90:61:7A:4C:D4:84:9E:02:2F:B5:D3:A7:20:D4:B5:29:45:BD:19
X509v3 Authority Key Identifier:
keyid:AB:2B:79:42:68:92:ED:1D:A7:B2:E6:18:67:70:CF:B0:4A:E6:03:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b3:de:92:6b:c9:1d:b9:0c:f0:4c:b2:57:53:a2:5c:64:0a:
9c:34:7b:e7:4d:25:e8:47:2e:bf:6d:a4:c5:0a:97:8c:03:dd:
5f:07:c8:e9:9c:df:84:a8:2d:0a:92:12:ad:89:3b:d3:66:43:
6d:a7:0a:ea:85:6b:85:c7:52:42:b4:0d:69:c4:0b:e3:5e:2a:
c5:56:44:17:8b:86:90:c0:ed:23:f9:fb:e9:ba:54:f1:77:33:
1b:2e:d3:0a:2d:32:ee:bd:53:d9:69:6d:f6:8c:5f:33:ff:e6:
24:6e:7b:78:b3:71:e4:50:99:0e:06:b2:85:39:f9:17:84:bc:
11:7c:f7:4d:71:cc:43:e1:89:42:33:4d:03:7f:8d:83:4e:16:
2b:f9:2d:40:ef:cb:bc:32:f5:dd:b6:03:19:61:f7:04:90:10:
50:fc:e2:2c:0a:4c:af:73:01:e9:27:6e:ed:e3:cb:fa:f7:11:
5d:06:94:61:e6:c0:66:87:53:f9:d3:79:b0:b2:e3:38:ef:f6:
f1:0d:25:e8:37:bd:6a:92:0c:c1:93:a9:40:e9:f9:b2:d0:ce:
b6:04:1a:a4:72:61:b0:3f:ae:9a:a0:14:b1:94:4b:85:f7:b8:
5e:db:8f:2c:0e:f9:29:f0:e7:2b:a9:d8:0a:09:93:36:c6:bb:
8a:21:b7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:02:11 2026 by rpki-client