Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
File: dqNyt1TkkgjWRqp4WeNItHXlJtI.mft (raw, json)
Hash identifier: cG5QuQPxNTaKHGe6ZBy+6dkiC5yAgGjEItO83xvUzMg=
Subject key identifier: 2D:15:1E:62:82:B7:9D:49:A7:92:DC:0F:F2:53:AC:8D:63:D4:1F:FA
Authority key identifier: 76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
Certificate issuer: /CN=76a372b754e49208d646aa7859e348b475e526d2
Certificate serial: 019FAC08732B663889E32655C42830145D9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
Manifest number: 19D4
Signing time: Wed 29 Jul 2026 04:01:02 +0000
Manifest this update: Wed 29 Jul 2026 04:01:02 +0000
Manifest next update: Thu 30 Jul 2026 04:01:02 +0000
Files and hashes: 1: dqNyt1TkkgjWRqp4WeNItHXlJtI.crl (hash: MCkUC5g27TxxNEmo5PXs456/u1YIGn1Jrw68DGH4Xu8=)
2: hU1lZW7ePs-jJStAbmgwJQdywgk.roa (hash: GCbi7/7u241zxcC9BwBBXY2OG87lKhbUz6RrhT+13oQ=)
3: oBx_PUd9jIs7YBgUmwcA4lLwIh8.roa (hash: hhGP/lSRzYSBVwOdWUcy+jdF25VySsbxm9Awg1JpKdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:73:2b:66:38:89:e3:26:55:c4:28:30:14:5d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a372b754e49208d646aa7859e348b475e526d2
Validity
Not Before: Jul 29 04:01:02 2026 GMT
Not After : Jul 30 04:01:02 2026 GMT
Subject: CN=2d151e6282b79d49a792dc0ff253ac8d63d41ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d7:e4:b4:8f:4d:af:de:8d:bc:66:99:d0:96:
87:2b:0a:06:30:7c:79:a0:3d:75:2b:a3:51:14:47:
3a:be:cb:e4:0e:fa:49:26:95:ad:fd:f1:43:ce:db:
a9:f9:c3:cf:c3:20:9b:79:db:75:97:f1:b8:47:1d:
4d:a7:90:08:12:b6:40:17:e2:b7:27:a7:96:7d:7d:
90:55:3b:12:23:4b:8e:5c:f4:bc:df:4c:db:75:ab:
4f:b2:ee:28:0b:d8:80:c1:6e:a1:8d:8e:1b:cd:e6:
ab:df:30:98:bd:3c:31:bd:e4:84:5c:fd:04:47:e7:
81:27:2c:56:d3:6f:4d:31:c2:71:25:da:b0:5c:c6:
83:11:0f:9a:ca:b5:5d:c0:8b:78:ed:4c:30:b8:9f:
a1:cd:f1:05:64:99:bc:a4:af:6e:28:bc:58:24:ce:
c6:0b:ad:50:db:f6:c0:82:f6:5a:2f:42:ed:a1:8c:
38:95:4d:77:c3:65:fb:c4:83:eb:4a:59:86:e4:7b:
fc:f0:80:00:41:83:9d:4f:03:87:1a:8c:11:a7:86:
6b:67:b9:58:95:02:bd:8e:28:a0:c5:0d:21:64:7e:
98:4b:56:58:83:01:9b:7a:ff:ed:3a:3e:13:37:69:
8e:b3:c1:95:5a:be:a6:4f:51:e5:3f:16:f2:94:89:
15:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:15:1E:62:82:B7:9D:49:A7:92:DC:0F:F2:53:AC:8D:63:D4:1F:FA
X509v3 Authority Key Identifier:
keyid:76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:26:1a:29:00:5d:59:a8:18:b1:a5:6c:9c:6d:62:96:5d:8e:
28:f6:d1:1b:76:19:a1:f8:18:94:78:05:7f:24:2f:ec:af:81:
32:60:e6:10:7a:66:e1:54:ae:63:32:4b:17:54:c0:b2:61:3c:
46:d2:6b:20:b0:d1:a0:96:75:82:7c:c2:9a:b9:56:23:43:7a:
ab:78:8a:01:31:9f:10:04:72:fc:a8:b1:19:b3:47:55:4c:f2:
3e:c6:65:81:d3:23:cf:82:aa:87:d7:07:3f:c4:52:8b:87:bb:
09:75:8c:7c:a5:c1:e3:82:8f:85:a1:09:e0:34:56:fd:7e:7c:
6b:94:53:f7:b2:64:f4:a7:a4:94:2f:eb:b2:96:27:17:4a:c3:
aa:15:9d:f7:a6:30:c0:f6:c6:95:42:da:7b:af:17:f8:9f:b9:
1a:79:72:dd:81:21:11:59:30:4e:8c:55:6e:11:e1:de:89:cd:
71:71:a5:57:83:b1:3e:ad:98:dd:44:27:62:c6:36:96:ca:b3:
f6:04:7a:ec:5b:c4:ab:ec:7f:d7:cd:13:95:9e:10:69:0d:ac:
88:54:30:9b:cf:91:d6:a8:bf:f6:8d:ae:e0:f8:08:90:7e:22:
b2:33:86:6e:63:e3:65:02:2b:39:b2:f4:7e:a2:b3:9e:26:1e:
df:1a:18:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:43:42 2026 by rpki-client