Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
File: q7zPUQ4allMK2M8UI_0lmLgv46Y.mft (raw, json)
Hash identifier: WK/1JikQd2NEruoJbChT1EJEVb7qKtBx1jwQtgbtTB0=
Subject key identifier: BC:44:34:CD:56:D0:F9:BE:6F:6B:48:D6:2E:F9:49:70:1B:3E:23:07
Authority key identifier: AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
Certificate issuer: /CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Certificate serial: 019FA8CFEA090505E74FB949695F24CD57D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 13:00:25 +0000
Manifest this update: Tue 28 Jul 2026 13:00:25 +0000
Manifest next update: Wed 29 Jul 2026 13:00:25 +0000
Files and hashes: 1: 1gpC6ZZOyt2mOkXIYbt5K_lzXps.asa (hash: JDIIwJMIws7Yan/EHkT9Ljq/fUXQU7hpu1yjAvkm5mo=)
2: SATda0Q9JgLf7FNzUfrTDL5vnEQ.roa (hash: XGliMsZWtirHhZX2xfYpxBaxkmF1dTUTYWoC+BYAPKw=)
3: q7zPUQ4allMK2M8UI_0lmLgv46Y.crl (hash: WgTAHk/GJRE6LLPIpp4LedEpuEhHHeiSY+Z/GL11y1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:cf:ea:09:05:05:e7:4f:b9:49:69:5f:24:cd:57:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Validity
Not Before: Jul 28 13:00:25 2026 GMT
Not After : Jul 29 13:00:25 2026 GMT
Subject: CN=bc4434cd56d0f9be6f6b48d62ef949701b3e2307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cc:c9:a3:b5:51:f7:e1:63:44:d0:bd:49:fd:
56:4e:e8:04:84:37:3d:f8:58:2a:6a:7f:dd:48:71:
e1:ae:8c:1a:77:6e:d5:d7:d5:c1:02:79:f0:74:83:
36:b1:28:17:d6:1d:ac:3f:df:19:89:fe:ff:55:34:
32:a7:88:2b:49:de:66:77:7e:b0:06:30:fd:2a:f8:
38:9e:af:73:76:aa:1b:41:b2:4b:95:c6:79:93:ca:
b3:57:9b:cc:ec:c7:db:e1:cc:1b:e5:ca:95:93:5f:
85:ad:b0:82:27:ed:ea:83:64:e7:2d:d4:bf:0b:5f:
84:99:c5:c9:77:bb:15:e4:bf:b6:96:01:63:f9:eb:
5d:5a:aa:81:20:56:d9:fc:6d:41:4b:b2:df:d8:51:
52:80:ce:13:73:27:a3:2a:26:3d:36:66:e1:2c:53:
02:ba:c1:5c:1c:6c:78:19:a8:a1:eb:f6:bc:34:33:
43:31:bb:57:61:f1:d7:d0:1a:e2:7f:ab:65:4f:7a:
06:f8:23:6c:17:81:44:b9:15:e5:79:2f:fd:5d:cd:
a8:4a:cd:cb:19:f1:44:81:fc:eb:21:39:57:4a:c1:
e6:a3:a2:e7:3f:e5:f8:c7:9d:63:62:43:58:bd:bc:
d7:af:ae:d1:40:12:ff:15:c4:02:22:9a:47:31:03:
27:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:44:34:CD:56:D0:F9:BE:6F:6B:48:D6:2E:F9:49:70:1B:3E:23:07
X509v3 Authority Key Identifier:
keyid:AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:51:6d:28:a4:3a:84:09:92:9c:03:df:25:5e:07:c2:f3:f4:
b6:c5:8c:e8:79:e5:ff:1b:7f:85:84:14:d6:65:1c:11:b5:6f:
2f:c0:80:20:3b:eb:0c:c7:66:64:04:dd:d5:aa:de:53:3d:35:
6d:b5:91:7d:51:09:0f:cb:b5:7c:ac:aa:b2:4b:98:df:29:03:
f3:39:3d:b6:95:20:52:fa:7c:6b:f7:90:bb:f9:71:32:65:25:
24:2c:fd:ac:dc:93:69:25:cf:81:de:94:11:b1:a9:9f:d2:22:
91:57:eb:19:1a:b9:b1:e5:a0:bc:05:af:68:f8:ed:ae:81:ae:
ea:9b:7c:2c:e0:35:39:f3:74:6c:6c:5a:15:5a:53:4f:64:dc:
3b:ce:b1:73:a5:8e:65:d3:0a:39:e4:a7:de:73:50:d8:45:98:
b2:07:39:ba:f6:af:66:5a:7e:6d:18:87:77:91:59:c3:2c:cc:
b1:96:cd:d1:7d:ee:5d:b4:c0:c2:22:5b:28:53:c1:73:84:16:
7c:9a:f3:99:86:db:08:59:d4:f7:4d:c9:92:65:4c:17:75:83:
3e:24:0a:e6:53:bb:17:ef:28:b3:d6:70:a8:a3:9c:9a:58:ec:
cf:6b:f5:97:9a:b7:4f:39:86:e7:50:4f:03:28:87:fe:58:87:
c8:42:38:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:35:25 2026 by rpki-client