Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
File: sUqqmwhIZPRLrhi6B2smBndU-2I.mft (raw, json)
Hash identifier: cqmdN2yxygONTThKTCWLyYVjN9OwYSP5oXULbRitVns=
Subject key identifier: 7B:B8:BD:23:A7:FF:04:23:02:1F:57:88:DA:72:23:8D:32:62:FB:E8
Authority key identifier: B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62
Certificate issuer: /CN=b14aaa9b084864f44bae18ba076b26067754fb62
Certificate serial: 019FAD8915DA66C0B8E5DF049675150051C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
Manifest number: 19D4
Signing time: Wed 29 Jul 2026 11:01:10 +0000
Manifest this update: Wed 29 Jul 2026 11:01:10 +0000
Manifest next update: Thu 30 Jul 2026 11:01:10 +0000
Files and hashes: 1: ICjM29Ho5ilzx2CC9UyPCpBHk08.roa (hash: iDThEuTUmWf3SPJoG/mF6aomqM2YAji1cqVmI0Zj0pI=)
2: d6GlurZjrrwt2Mzk129b7bT_DCU.roa (hash: 2ZHYIA1Xr0+oHcfnaFr8fQOS6BVciW3KH+j7gwm8oEg=)
3: sUqqmwhIZPRLrhi6B2smBndU-2I.crl (hash: 3SLH792Qqd2+1jz8G6HkZKPCYm7yievWI6GX9fKXkjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:89:15:da:66:c0:b8:e5:df:04:96:75:15:00:51:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14aaa9b084864f44bae18ba076b26067754fb62
Validity
Not Before: Jul 29 11:01:10 2026 GMT
Not After : Jul 30 11:01:10 2026 GMT
Subject: CN=7bb8bd23a7ff0423021f5788da72238d3262fbe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1a:8b:b6:9a:32:c4:76:72:71:26:d8:dd:fc:
1e:10:7f:06:7c:5c:40:6a:b0:8c:35:c2:b0:87:74:
13:d4:f2:be:8a:6c:52:86:24:0a:15:8b:21:52:dd:
62:19:83:eb:5d:48:f9:75:10:0e:4f:16:49:bb:a2:
f2:67:09:af:9f:fe:40:b5:f0:50:53:58:7b:6f:ae:
28:d1:7e:cd:27:a5:fa:cb:4c:44:65:48:5d:9a:43:
eb:10:56:79:34:dd:bd:3b:1f:1f:81:8c:88:9d:36:
44:95:8d:c9:2e:1d:6b:12:be:eb:59:3a:8f:e8:87:
ef:cf:b6:c5:f5:3d:5e:29:47:a6:46:a1:55:4e:68:
97:af:b4:f3:41:47:11:4c:11:33:de:53:e8:0a:50:
10:dc:e8:2e:d6:d7:32:65:23:d6:7a:b2:2f:75:3d:
2e:13:73:44:f9:30:44:f5:13:ba:fa:34:ce:f5:d8:
2f:86:02:da:8d:32:8b:67:d8:d3:bd:21:a7:53:5f:
a9:54:8e:0f:4d:9d:18:62:0a:76:f2:36:f4:4b:b1:
52:cd:56:c1:dc:4e:9c:8d:d0:1f:33:37:ed:eb:c1:
b1:77:85:99:9a:50:90:7c:4b:18:aa:c9:0b:16:5d:
16:da:02:77:0c:02:d6:49:04:da:33:94:21:86:cd:
a4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B8:BD:23:A7:FF:04:23:02:1F:57:88:DA:72:23:8D:32:62:FB:E8
X509v3 Authority Key Identifier:
keyid:B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:18:c2:77:e9:46:47:9e:73:01:53:aa:a4:c3:4b:48:30:64:
d1:eb:e2:12:09:b1:19:5a:7c:66:f0:ea:21:5d:0c:1c:3f:f5:
a5:45:08:83:77:3b:35:84:ec:6f:82:60:5d:b0:4a:0c:db:37:
b6:10:6b:21:ea:9c:52:b7:a1:be:ac:28:45:53:dc:cb:1b:37:
6f:be:50:83:40:29:d6:b6:16:13:3f:af:f6:06:80:c9:cb:4d:
62:10:ab:77:d6:63:27:42:d5:9e:95:37:7a:cb:71:c3:b7:b8:
c3:2b:c7:94:26:70:4e:c1:dc:b0:83:f4:72:94:e2:ed:c3:97:
07:34:0e:69:63:ff:90:95:7e:c4:70:af:5e:3c:f4:6b:0e:77:
9f:3a:52:f1:b4:2f:a0:c2:fc:ad:4e:93:5b:b7:e6:81:fa:4c:
01:2f:ae:96:a6:d4:54:c6:5d:f0:73:db:52:31:5e:fd:a7:a9:
46:8e:a9:9f:ee:5f:ab:2d:5f:ed:de:dd:aa:80:1c:a3:0e:8c:
41:4d:24:88:5c:ad:f4:4b:e4:7f:1d:89:88:be:5c:8b:08:04:
17:cc:02:14:cf:21:c9:b9:8b:f5:99:c9:9b:f7:c3:1f:cf:a4:
75:93:b7:4f:ad:07:d3:a4:80:b4:92:c6:fc:18:82:c8:38:6f:
cb:6f:0f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:11:00 2026 by rpki-client