Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
File: 1QTmQeVaSK7gFB4sDSYicQLKptQ.mft (raw, json)
Hash identifier: iVWWvuDdCUrYNPTca3Fi8IXfpyAwVOO0H+VFpRUlDao=
Subject key identifier: 3D:79:3D:DF:1E:1C:0E:E9:70:9F:88:37:67:FE:03:E6:15:2D:46:8E
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Certificate issuer: /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial: 019FAA506EF3C72B889F7E4D0D6D8988D5AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
Manifest number: 1388
Signing time: Tue 28 Jul 2026 20:00:25 +0000
Manifest this update: Tue 28 Jul 2026 20:00:25 +0000
Manifest next update: Wed 29 Jul 2026 20:00:25 +0000
Files and hashes: 1: 1QTmQeVaSK7gFB4sDSYicQLKptQ.crl (hash: lfQX7GdqH6msZ4VK9jLXqXF6d0w2i8kz0lePu7S2T+Y=)
2: Fmacp4NY6nEGonmiT-U_xfP1PNA.roa (hash: nMGKz5J/UdppiFPUA3K/6569wtZvBmanoCiwnJ4msoE=)
3: G8ok4WnRssMF_kSU0fMKahJetsU.roa (hash: l43UBskPXl3nXaaaJdzsHUtTJRUjiog9FX+gAeGDp4g=)
4: HXx-9xf840ychc1XFQvrQhYAMc8.roa (hash: wEQlpP9y0gAps6ZTYiJzXEzVVAyiwRr/90bpIEEpgsY=)
5: KdqxPru-n3hoW07_Ia_EY5qo-gs.roa (hash: nHBt8Iolo72XzLdo8e8Ep2RH7UXsZGR1GpAo5yUz4DM=)
6: _G6g6_QnVtIFB_-iAP4mTCvteXs.roa (hash: uAtUHoDLiIbUy1NlipnwKBXuGU0z4c5OSzrv5oTG0UI=)
7: lbA6fkEyToINYPSmlJ-B17hV6T8.roa (hash: RPJR9tlk6PGxFVrIXjpYwQZILEQbLWxfjexbsXGiL+U=)
8: nU05wjCCjQdvD0N5GwShQguLcMg.roa (hash: j/VwIGsTlBAaDg3IJsHet13mXvJWrVOZiHUgffdX7c4=)
9: smJvEGMAn4xu8Scd8dffeO2ae_U.roa (hash: hTRU88LHGp5KUHTSb+P61y5pXqOZZZN6CAlWM8NKLFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:6e:f3:c7:2b:88:9f:7e:4d:0d:6d:89:88:d5:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Validity
Not Before: Jul 28 20:00:25 2026 GMT
Not After : Jul 29 20:00:25 2026 GMT
Subject: CN=3d793ddf1e1c0ee9709f883767fe03e6152d468e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:be:84:e1:6e:9e:9c:77:cd:50:63:5d:f5:c3:
00:43:a1:f6:e1:93:23:aa:b2:51:e4:0d:0b:1f:79:
91:c1:55:cb:51:34:b5:c1:b3:7b:a5:af:e5:d5:6e:
24:83:24:47:9e:19:1d:49:d4:e5:87:ee:80:18:07:
8b:42:45:d1:b3:be:07:34:8c:f0:d6:a3:49:36:13:
f8:a9:7e:0e:3e:2c:cc:dc:0b:86:4f:83:65:4b:72:
c0:fc:1d:d1:03:2a:a2:55:9b:7e:a8:b8:c7:9f:4c:
ed:ef:7a:f4:60:21:98:4c:a4:01:d8:bd:45:1b:70:
c2:5c:db:44:dc:d0:ac:9a:5f:23:c3:4c:82:c7:ce:
38:8d:e1:c3:32:b5:eb:c7:01:7d:d7:c9:f3:59:34:
8d:3c:ba:83:39:d1:ab:eb:1a:be:e4:18:e8:a2:e2:
35:6d:ef:e7:a5:50:ed:61:4f:ac:75:a8:8a:45:45:
5d:6c:92:2a:09:3a:f5:21:a5:b1:c6:da:d5:76:32:
b3:3c:27:7c:9e:75:32:3f:ba:02:01:82:d9:13:ce:
4f:13:e5:09:ac:bf:01:62:11:81:e4:5b:c1:1f:71:
28:8d:f2:b2:2c:d4:e3:2a:7c:77:b6:13:2c:cb:d2:
9d:81:a5:17:c7:a7:c5:e7:76:e5:85:9c:22:12:bd:
8b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:79:3D:DF:1E:1C:0E:E9:70:9F:88:37:67:FE:03:E6:15:2D:46:8E
X509v3 Authority Key Identifier:
keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:68:44:92:3a:c2:e7:4c:f1:74:e0:c5:5c:f6:c4:0f:2b:fd:
ee:c8:52:68:9a:07:27:e0:87:2d:0d:ce:9f:ec:ee:6e:f6:b3:
73:20:41:25:cb:47:82:8a:3c:97:10:ac:e2:39:a6:eb:7f:62:
fe:5d:fe:e5:dd:03:4b:20:27:ee:c6:fc:74:47:58:b2:87:8f:
75:fc:5a:f7:a3:2a:07:54:a0:4e:73:88:f8:40:81:cd:6f:3c:
70:96:9b:28:19:8b:3b:34:5d:89:db:7d:dc:bb:a7:53:fd:09:
86:6a:02:a3:3f:4c:65:27:80:ab:b0:ad:ed:35:2e:37:dc:ae:
2b:ad:fa:99:29:c5:90:62:ba:a8:00:04:6a:aa:ff:66:21:fb:
89:ec:a6:e2:a7:1a:40:61:e4:03:bb:e5:f1:3f:09:46:9f:af:
ce:32:5e:cb:47:71:2a:d3:c0:55:c7:ad:11:fb:88:e5:9f:24:
08:29:eb:9e:68:d4:8b:20:a7:e0:92:83:ae:95:7a:26:4c:11:
74:78:77:49:ab:36:54:9c:1b:a5:33:21:48:ef:f9:4d:13:c2:
a4:bc:b4:ad:ab:6b:7b:9e:4c:f2:0f:7e:86:ee:f2:d6:95:7f:
11:db:e7:23:fb:f6:92:64:05:0d:be:95:86:8b:c5:74:69:b1:
5a:ef:46:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:42:28 2026 by rpki-client