
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/qSsmw4t2LJ5Ume_f86zVmGKL6s8.mft
File: qSsmw4t2LJ5Ume_f86zVmGKL6s8.mft (raw, json)
Hash identifier: WEqv9/Eg7qfHaEU0+L5gL6yGmwL38xJQCaFDF02hidc=
Subject key identifier: D1:C2:BC:2B:61:FA:B1:31:7B:56:F4:9D:62:7B:0E:E1:42:BA:67:E1
Authority key identifier: A9:2B:26:C3:8B:76:2C:9E:54:99:EF:DF:F3:AC:D5:98:62:8B:EA:CF
Certificate issuer: /CN=a92b26c38b762c9e5499efdff3acd598628beacf
Certificate serial: 019FA898E36049B02DCB11DA489360ADD77B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qSsmw4t2LJ5Ume_f86zVmGKL6s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/qSsmw4t2LJ5Ume_f86zVmGKL6s8.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:19 +0000
Manifest this update: Tue 28 Jul 2026 12:00:19 +0000
Manifest next update: Wed 29 Jul 2026 12:00:19 +0000
Files and hashes: 1: NI385oVhm3QWY8htYFFjFZ1jYzc.roa (hash: sk6wuFdZcfLmM6VcAQviz4agp5zQex1ujsQrgI5Apto=)
2: qSsmw4t2LJ5Ume_f86zVmGKL6s8.crl (hash: jSwcGGVKWXWs0i0ZMurI67h1tb30zl4B7I9PId+iJH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/qSsmw4t2LJ5Ume_f86zVmGKL6s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/qSsmw4t2LJ5Ume_f86zVmGKL6s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qSsmw4t2LJ5Ume_f86zVmGKL6s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:98:e3:60:49:b0:2d:cb:11:da:48:93:60:ad:d7:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92b26c38b762c9e5499efdff3acd598628beacf
Validity
Not Before: Jul 28 12:00:19 2026 GMT
Not After : Jul 29 12:00:19 2026 GMT
Subject: CN=d1c2bc2b61fab1317b56f49d627b0ee142ba67e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fe:6a:fd:a6:39:c9:b4:3e:31:ea:08:09:fd:
6d:ca:66:bb:e6:96:da:7d:cb:32:05:29:bf:f8:5c:
e2:94:dd:b1:7d:c7:26:55:fe:14:65:a7:62:69:81:
0c:f6:7f:c5:ea:ae:50:42:fc:c2:86:71:02:0e:ae:
1e:d2:19:30:f6:57:e0:67:f8:25:32:e2:83:95:e5:
82:30:e7:45:1e:e4:5c:59:24:d6:fe:95:71:16:63:
dd:7a:a4:fa:74:f1:21:a5:b8:27:52:39:c7:79:2c:
c4:83:e3:24:0b:d0:33:8f:44:05:62:97:59:62:c2:
14:34:e4:00:30:a8:21:eb:a7:0c:e3:c8:4e:9e:cf:
02:41:db:a0:52:aa:bf:9b:a6:35:dd:7f:55:61:79:
89:2c:00:80:e9:e4:64:ce:57:52:2d:65:17:f1:1d:
0b:e5:82:2c:e8:30:11:34:5d:a9:99:33:fc:fb:0e:
06:cd:50:f4:c7:74:16:d9:a3:f5:7b:e1:51:04:fb:
65:4e:2f:38:4e:0d:ef:c6:ef:97:6c:c3:ea:6c:a7:
13:ee:e5:3d:05:fe:72:64:be:b2:cf:8f:97:8a:c9:
0f:35:1c:16:e2:00:12:86:20:55:6b:b3:8a:58:12:
e1:71:97:b0:4f:40:81:6e:13:33:b7:de:e3:d3:d3:
2e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C2:BC:2B:61:FA:B1:31:7B:56:F4:9D:62:7B:0E:E1:42:BA:67:E1
X509v3 Authority Key Identifier:
keyid:A9:2B:26:C3:8B:76:2C:9E:54:99:EF:DF:F3:AC:D5:98:62:8B:EA:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qSsmw4t2LJ5Ume_f86zVmGKL6s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/qSsmw4t2LJ5Ume_f86zVmGKL6s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/qSsmw4t2LJ5Ume_f86zVmGKL6s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:0d:2e:b9:e0:f3:42:fd:c2:90:05:73:99:75:99:a7:a2:83:
61:7a:cf:4e:6a:e1:6f:36:1c:7a:ca:cd:db:6c:00:30:4d:d7:
35:a7:21:81:97:f9:ab:a6:49:89:a4:30:3f:ba:72:ce:cf:fe:
3f:50:1d:72:92:d7:36:6a:56:43:74:41:80:15:8b:23:2d:c2:
5f:dc:87:29:10:60:51:0f:56:55:ac:55:5a:2d:b7:4d:22:4b:
1a:c2:aa:5f:73:55:63:97:07:2b:a6:2c:01:11:20:e8:ea:cb:
2f:cb:49:61:5a:94:8f:41:e1:13:95:83:ad:bf:2e:f7:fc:6a:
8a:25:af:a1:9c:6a:1b:b3:8d:39:fb:ce:a3:e4:50:f1:cd:10:
7b:4c:e5:08:cb:34:58:05:40:62:bf:5d:8b:0b:22:a5:dc:d3:
21:58:4b:36:24:ce:ed:68:5d:95:6e:38:70:93:86:29:09:a9:
3e:7e:67:59:31:ec:ac:c5:00:32:af:81:90:8c:a0:8e:29:26:
59:b5:79:a5:93:cf:71:61:09:0f:9a:ee:31:19:f5:3d:8e:f3:
70:f6:b1:1e:d6:b0:2b:b3:46:36:06:13:a0:d9:11:0c:07:49:
63:b5:36:5d:f7:52:45:41:7d:c9:ef:99:ee:ee:16:95:4e:86:
56:34:ac:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:53:30 2026 by rpki-client