Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
File: 1-q6U9bfurTpdhIMHiAmi7_ooOA.mft (raw, json)
Hash identifier: JOTSvlhBxd3ugnp8jvuoA5bePuXoMPrAlNX5Qc2KKms=
Subject key identifier: 2E:45:32:03:9F:0B:80:08:2D:B0:BE:01:CC:F1:AF:26:5E:D0:45:68
Authority key identifier: D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0
Certificate issuer: /CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0
Certificate serial: 019FA9E2EE548C90C3EE870A8104E5372AA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
Manifest number: 1711
Signing time: Tue 28 Jul 2026 18:00:49 +0000
Manifest this update: Tue 28 Jul 2026 18:00:49 +0000
Manifest next update: Wed 29 Jul 2026 18:00:49 +0000
Files and hashes: 1: 1-q6U9bfurTpdhIMHiAmi7_ooOA.crl (hash: 3NBC9/hxH/JVNccI0Jw5WEEu1pUp9QIAlwH3FV0xnD8=)
2: GgOMAQruAzmkXd3YxcVIPj0Q92A.roa (hash: aiEiFcDwOGmCZNV/ayFmXDTOeDIePLYyLtQ16GSKhHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:ee:54:8c:90:c3:ee:87:0a:81:04:e5:37:2a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0
Validity
Not Before: Jul 28 18:00:49 2026 GMT
Not After : Jul 29 18:00:49 2026 GMT
Subject: CN=2e4532039f0b80082db0be01ccf1af265ed04568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:73:d9:f9:32:66:85:a7:b0:17:b6:af:65:82:
89:e1:c4:c9:31:57:34:ce:17:0f:98:6f:b6:cd:03:
86:d9:ef:1f:17:62:8b:0e:f5:e0:9e:ce:6c:47:d7:
36:a1:95:17:8b:66:84:80:63:83:26:9b:77:7f:83:
a8:98:cc:45:a7:07:bc:47:61:80:d9:d8:68:13:1f:
fc:9d:02:67:89:e9:b2:43:42:a2:a0:41:a1:b5:8e:
a7:44:b4:78:00:ad:8a:ed:0e:02:3b:94:da:2c:48:
8a:c9:6d:5c:e7:6a:7d:5f:22:43:14:47:6a:0b:65:
71:d9:33:dc:f3:9c:6b:ac:8a:25:d0:f7:24:12:7e:
54:74:13:43:91:c9:99:0a:63:12:01:92:58:57:5f:
71:16:1a:dc:81:ab:c5:81:95:b2:f8:15:13:e8:c6:
f9:37:e9:85:cc:07:82:a7:0e:e7:b6:23:a5:a7:c9:
aa:a4:98:c4:53:29:6a:8a:9e:56:c5:6c:6c:75:31:
e0:9a:19:cf:38:3d:d5:27:a5:58:1f:11:7b:1c:ad:
cb:cf:f1:ad:47:32:7f:66:fe:f0:08:e5:be:1c:61:
3b:33:6e:c9:44:bd:d2:1d:cd:0f:47:3d:83:04:cd:
b0:25:81:9e:fe:b0:8e:53:0c:65:50:46:88:c8:8d:
e2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:45:32:03:9F:0B:80:08:2D:B0:BE:01:CC:F1:AF:26:5E:D0:45:68
X509v3 Authority Key Identifier:
keyid:D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d4:9c:7f:ea:3d:de:84:a9:f0:de:b2:d6:c8:f9:49:6a:2e:
9c:07:2d:df:bd:3d:3f:2e:68:29:f1:c0:7f:9a:ed:2d:e8:5c:
12:bb:f2:1a:ad:1e:25:27:ea:b2:16:bd:74:cd:f3:7e:f2:28:
13:7c:28:af:96:01:d8:1e:54:75:2d:c4:13:d4:c4:ff:07:8b:
80:22:7f:96:10:94:18:f1:a4:2d:39:18:e1:1e:ed:b9:96:3d:
19:20:fc:b4:01:7d:91:b2:7d:bb:9c:6f:5f:e3:df:08:b7:94:
fb:70:a4:a3:8e:6b:c7:ad:0d:5d:3c:5c:30:a6:1d:65:d2:e4:
90:d9:59:8e:de:c9:16:d0:80:dc:24:bd:02:a7:68:b4:82:0e:
e3:80:38:71:57:cb:c6:bb:3f:30:6b:28:69:9b:a6:96:56:77:
76:b2:45:85:ae:04:c4:f3:b1:ba:43:8a:01:66:d1:21:1b:7e:
85:30:bd:67:ab:a2:67:c2:70:91:13:5e:54:af:cb:b5:6e:1e:
b7:d5:57:d4:ad:5a:81:c9:fc:d4:3f:56:fc:7a:7e:8e:55:5c:
d1:cb:7c:86:77:cc:04:43:cf:18:09:55:8c:e7:4f:92:c2:5f:
83:94:d2:bb:0e:97:92:1d:9e:64:a9:df:ad:ed:bd:a1:a1:24:
b8:83:24:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:21:16 2026 by rpki-client